Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: nmVUzhDLnbiIof1+ErjivceFNvf7mgNZU4TTfgNqI4E=
Subject key identifier: 89:A1:42:87:89:19:BC:CE:0D:AA:88:F9:DA:8E:6C:F8:B4:F6:07:29
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 01A0D124869F6864119C004C217F6759ABEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 02:00:26 +0000
Manifest this update: Thu 24 Sep 2026 02:00:26 +0000
Manifest next update: Fri 25 Sep 2026 02:00:26 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: j4+QCtaM8cIZXNliTkb9vGa4SQPl67NGty3HmgwkH3k=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:86:9f:68:64:11:9c:00:4c:21:7f:67:59:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Sep 24 02:00:26 2026 GMT
Not After : Sep 25 02:00:26 2026 GMT
Subject: CN=89a142878919bcce0daa88f9da8e6cf8b4f60729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:3b:5a:4b:38:5f:b4:ed:50:0a:9c:1c:a1:
bf:a3:b2:e6:2f:95:67:e8:80:ed:15:af:a6:7e:4b:
91:b7:70:18:a7:a6:3b:2f:4e:80:b1:80:32:9e:d7:
46:56:f7:09:f4:4b:8b:63:a1:97:83:bd:b7:30:b8:
d5:de:60:fb:c3:89:62:f3:8c:ca:4d:b8:78:7a:14:
40:ef:82:fe:6a:bb:51:27:1b:67:a5:ef:6f:ee:77:
6e:c4:4f:cb:30:fa:74:ab:89:14:3f:bd:b3:6e:39:
4e:83:de:85:ed:c7:75:e6:fc:99:95:75:9b:33:8f:
e9:dd:55:2d:b8:b3:68:a0:c1:60:5a:5b:3d:85:1c:
af:f6:37:e9:bd:fb:f6:46:82:f6:62:85:fb:ec:d2:
1f:ec:7c:d1:06:77:fa:f5:d7:ba:d4:55:6f:04:73:
0b:b3:08:95:f1:64:bf:7a:56:91:b8:83:fa:f1:18:
7a:6e:c3:8f:e1:5b:a0:84:98:09:bb:57:24:bf:76:
98:35:35:78:7c:72:fd:83:32:01:2c:60:09:10:9d:
fd:1f:fa:64:51:81:d4:2b:50:54:20:ad:f5:37:cd:
39:3b:3f:4e:61:ad:20:66:90:86:da:c6:71:82:7d:
24:c4:4f:92:c4:a2:54:07:ca:2c:63:e7:92:0a:27:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A1:42:87:89:19:BC:CE:0D:AA:88:F9:DA:8E:6C:F8:B4:F6:07:29
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:70:bd:e4:af:1a:62:b7:08:08:fe:f5:7f:93:03:c2:a0:f9:
54:c9:d3:aa:51:47:de:72:fd:b6:19:24:9d:11:1a:bf:7a:95:
c4:8e:a4:44:ad:74:73:b3:32:b4:6e:e7:9a:1b:ec:c1:e4:92:
ea:2e:65:ad:e0:1a:bf:df:f3:be:4a:15:5a:91:17:60:09:47:
e0:69:fa:01:68:51:f4:5b:63:38:c6:f7:c4:eb:3d:71:68:a3:
90:99:33:f2:36:33:2e:bb:38:5e:f3:02:65:17:85:19:2d:83:
dd:f3:a4:0f:21:5d:73:1b:58:12:39:17:a7:e5:3a:34:ee:66:
6b:0c:62:ae:40:a3:b0:e5:43:8c:c3:29:8f:f0:ed:76:c0:69:
93:32:de:53:62:e1:9a:be:3a:b5:8d:a6:29:ce:29:1f:93:80:
cd:ec:ed:dc:93:49:d5:1c:1c:a6:ec:94:a0:b0:97:0d:e1:97:
fd:77:24:01:12:4b:32:2f:40:73:2f:ac:be:db:49:06:b2:a7:
b2:c7:02:74:67:fb:6c:f9:e5:5e:88:e0:5d:5c:53:cf:75:04:
51:73:7c:cb:83:d1:50:d7:38:da:62:64:2a:b7:5e:50:06:31:
21:5f:ee:8c:1b:14:06:c2:39:d3:7e:d0:57:13:2b:45:15:41:
a3:6e:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:50:35 2026 by rpki-client