Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: xlBx4ARI9Sx92VFX2bR3ndnW2f4xM5AB8QxOyuNod/o=
Subject key identifier: 6F:11:E5:10:5B:E0:F7:A7:5F:E0:4B:6A:C4:1D:BD:02:67:53:6A:9A
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019CAB33D8CA2EE769D9CE492241CC24D5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0F2C
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: JbDIJ4Bm9lAoW9sDFJ6lsxNEwXnSWHsnmeUUhBiUGZg=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d8:ca:2e:e7:69:d9:ce:49:22:41:cc:24:d5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=6f11e5105be0f7a75fe04b6ac41dbd0267536a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:48:14:06:f4:81:b8:72:5f:ee:03:09:6e:
76:45:e7:d4:00:a9:81:61:c0:43:5f:00:98:b4:b4:
dd:d0:fd:d5:a2:ff:9b:68:b9:8f:f4:2a:13:f0:bb:
f3:ec:8f:14:e4:05:a8:5c:bf:a4:73:de:1b:2f:b0:
67:bd:56:13:64:4c:4b:99:d6:cc:36:a0:37:07:0d:
43:23:6d:03:03:f1:5e:ff:e8:de:d3:e7:8a:fd:95:
7e:7e:8a:70:82:1f:4e:74:b3:37:a0:08:d4:12:90:
29:63:ec:34:f0:38:5b:2f:bf:0a:1d:06:5b:08:0a:
80:30:dd:20:7c:6a:39:82:3e:30:9b:1c:df:e5:10:
ca:92:2f:05:80:6e:78:06:d9:cb:8d:27:f2:a4:79:
f7:1f:4f:ad:ea:3b:1a:be:bf:0a:80:5a:25:5f:81:
29:bf:d5:5c:5b:73:68:19:ed:42:d3:5f:c5:de:54:
07:9e:a5:6a:8d:0b:57:3f:98:a2:9d:91:0a:cd:72:
74:d7:3d:11:a0:d7:46:ff:20:3a:0f:53:39:02:ce:
c5:04:1a:6a:ba:82:f0:d8:e1:80:01:21:f7:4c:ed:
e5:49:27:31:fc:92:22:5c:b2:de:2f:39:84:28:32:
98:b5:95:78:07:c3:08:4b:8a:0c:b5:d8:0a:c4:aa:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:11:E5:10:5B:E0:F7:A7:5F:E0:4B:6A:C4:1D:BD:02:67:53:6A:9A
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:98:ac:e3:b5:ab:34:b0:28:d2:5b:c8:eb:8f:53:63:5c:b9:
02:2a:25:6e:46:94:be:2d:73:c1:5c:d8:5b:19:70:47:27:ba:
c4:69:43:44:f7:ef:32:e8:da:ed:6f:94:5e:b4:cf:b1:91:4c:
14:bf:87:cf:45:fd:dd:8c:60:b8:b2:b9:9c:14:0b:55:9d:20:
85:bb:9b:56:18:70:cf:21:75:d2:6c:d5:89:a8:0a:85:d2:03:
64:03:d6:b4:54:79:2d:22:75:e8:92:69:d7:c0:48:5c:f6:6a:
0a:3b:7f:3b:92:7b:36:0f:f4:32:a6:b2:1e:04:be:6f:74:f8:
28:89:0d:f4:bb:48:df:7b:b5:a0:02:e5:d4:36:e5:aa:a6:71:
bb:ae:c0:80:82:3f:d7:cf:75:1f:08:90:83:2f:9a:db:40:ec:
0a:8c:fb:6b:40:e3:7c:24:f5:28:a9:7d:8d:69:31:17:67:b7:
21:26:fe:2b:d7:8e:2a:15:e9:56:50:ae:0e:49:d6:c1:7c:3b:
47:96:3b:41:e7:83:5f:c0:c3:d8:60:3a:46:ad:6c:5a:30:d5:
75:f8:87:ce:6e:4e:d4:7c:e2:23:83:d5:7a:03:1b:ae:4e:a6:
ad:b7:48:6e:b2:ba:af:2f:bc:89:03:22:27:41:dd:ce:2e:ec:
6e:67:fe:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM9jKLudp2c5JIkHMJNX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm
OWY5YzUwHhcNMjYwMzAxMjEwMDI3WhcNMjYwMzAyMjEwMDI3WjAzMTEwLwYDVQQD
Eyg2ZjExZTUxMDViZTBmN2E3NWZlMDRiNmFjNDFkYmQwMjY3NTM2YTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ttIFAb0gbhyX+4DCW52RefUAKmB
YcBDXwCYtLTd0P3Vov+baLmP9CoT8Lvz7I8U5AWoXL+kc94bL7BnvVYTZExLmdbM
NqA3Bw1DI20DA/Fe/+je0+eK/ZV+fopwgh9OdLM3oAjUEpApY+w08DhbL78KHQZb
CAqAMN0gfGo5gj4wmxzf5RDKki8FgG54BtnLjSfypHn3H0+t6jsavr8KgFolX4Ep
v9VcW3NoGe1C01/F3lQHnqVqjQtXP5iinZEKzXJ01z0RoNdG/yA6D1M5As7FBBpq
uoLw2OGAASH3TO3lSScx/JIiXLLeLzmEKDKYtZV4B8MIS4oMtdgKxKrEawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8R5RBb4PenX+BLasQdvQJnU2qaMB8GA1UdIwQY
MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt
ZjU0ODY5OWY5NDdhLzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh
LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJis47Wr
NLAo0lvI649TY1y5AiolbkaUvi1zwVzYWxlwRye6xGlDRPfvMuja7W+UXrTPsZFM
FL+Hz0X93YxguLK5nBQLVZ0ghbubVhhwzyF10mzViagKhdIDZAPWtFR5LSJ16JJp
18BIXPZqCjt/O5J7Ng/0MqayHgS+b3T4KIkN9LtI33u1oALl1DblqqZxu67AgII/
1891HwiQgy+a20DsCoz7a0DjfCT1KKl9jWkxF2e3ISb+K9eOKhXpVlCuDknWwXw7
R5Y7QeeDX8DD2GA6Rq1sWjDVdfiHzm5O1HziI4PVegMbrk6mrbdIbrK6ry+8iQMi
J0Hdzi7sbmf+Qg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:10 2026 by rpki-client