Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: FYTJtOwSAAecwMrGlM3VbtYQNyAGGit1593zyYL3WZQ=
Subject key identifier: B7:16:0F:C2:F8:7E:59:C6:09:C4:F8:FE:45:CC:BE:B8:BA:6B:0E:52
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019D9AABB2FB0F8C978364C088BAE33F4DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0FA8
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: rWdgMZeh7pmgaguKPsByGK4neRcYLM6ZlAhmtSBceXQ=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b2:fb:0f:8c:97:83:64:c0:88:ba:e3:3f:4d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=b7160fc2f87e59c609c4f8fe45ccbeb8ba6b0e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:d5:2d:3d:9b:36:2f:c9:82:25:2b:a4:54:
c2:e7:ed:53:da:b7:3a:0f:b9:ba:41:6b:2c:fd:ef:
54:1b:c9:50:f8:92:1f:8f:52:67:bc:c3:ae:4b:27:
de:75:19:df:bd:58:de:ce:32:74:60:9c:74:8d:a3:
33:fa:ad:ca:fa:9d:db:dd:e9:ed:23:c7:5f:61:f5:
a3:bd:ba:39:79:46:12:6d:d6:83:5c:73:73:f3:16:
90:33:46:74:14:71:21:44:12:91:06:cb:ae:63:fc:
57:4b:25:21:99:bf:11:08:f2:ac:94:fe:3c:d9:f4:
a1:89:c5:06:6d:d9:df:0c:b7:ab:c0:4c:f9:cd:d5:
22:21:8e:06:bf:ab:b7:31:75:28:d3:25:e6:a1:a3:
07:f7:68:6c:4f:1a:7c:0d:4b:dc:36:b4:c3:21:fe:
64:b3:bc:74:e1:81:3f:f0:ae:e2:82:0b:35:66:b5:
58:21:61:33:e1:0c:14:a8:43:c3:90:63:76:75:9f:
12:e0:5d:e1:21:20:fe:06:8e:75:c2:e4:9b:ba:90:
b3:5e:6f:7b:84:f4:d5:f9:3c:16:36:9f:8d:65:e7:
c0:5b:e3:f1:9a:e5:0e:77:4a:14:65:a2:ee:c2:91:
11:c6:ba:5e:a9:ed:f0:35:59:76:2a:c4:e7:a2:3e:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:16:0F:C2:F8:7E:59:C6:09:C4:F8:FE:45:CC:BE:B8:BA:6B:0E:52
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:36:68:9e:8e:6f:13:f8:7f:5b:18:f0:e8:07:7f:f4:e2:a3:
c8:9d:ea:1d:4a:93:f5:e3:b6:21:65:a2:42:3a:51:57:7a:74:
3f:b4:f2:10:6f:32:9e:84:88:19:83:3a:50:99:68:b0:fc:0d:
3e:d0:d0:3c:de:33:81:0d:11:ed:c7:e3:f6:86:11:ce:e7:a7:
02:28:41:e5:40:23:78:94:bc:f5:ed:ee:90:31:23:ec:cb:6a:
b5:d4:d9:e1:75:ea:d2:23:e4:88:7a:a0:03:2c:99:e1:84:44:
a1:c8:ca:72:f8:61:36:20:37:bd:a1:ac:33:8c:53:40:16:ab:
1e:bd:33:68:d5:b4:1f:d0:83:fa:4e:81:74:0d:53:c5:b6:12:
a7:f9:e7:1b:e4:7c:74:bd:15:b6:41:ef:1b:eb:b5:ff:b1:19:
22:5b:e5:27:d2:8b:a6:65:ef:52:b2:40:35:83:9c:a7:25:80:
81:09:5e:e3:82:5a:d9:10:5e:f5:f7:95:4e:8c:1e:6a:a6:d6:
a3:d0:26:68:dd:07:07:1b:73:07:e5:c8:05:89:79:bf:d8:d8:
d7:f3:73:79:34:79:58:d9:53:5f:e2:e8:c4:30:65:22:27:75:
f2:7b:69:64:52:47:48:59:14:74:2c:01:fb:c2:bb:d9:65:bb:
c7:bb:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:44 2026 by rpki-client