Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: S7u67liKrk1cstdWFTx4JvIs9BbbRG7Iza54njnbrl4=
Subject key identifier: FB:4D:B5:82:B5:E7:82:91:F8:41:28:7D:E5:9F:8C:39:51:06:D5:B0
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019CAAFD1531A390B280D2826AE8510BEF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:38 +0000
Manifest this update: Sun 01 Mar 2026 20:00:38 +0000
Manifest next update: Mon 02 Mar 2026 20:00:38 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: R5UBedjs98KCJuGMmc4rCqQPCka+gsxBvY+CHJCQufA=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:15:31:a3:90:b2:80:d2:82:6a:e8:51:0b:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Mar 1 20:00:38 2026 GMT
Not After : Mar 2 20:00:38 2026 GMT
Subject: CN=fb4db582b5e78291f841287de59f8c395106d5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:b6:4e:ca:7a:5d:92:78:11:e9:39:95:eb:
86:90:18:89:83:8e:de:43:f2:29:53:45:42:d8:4f:
ff:f4:43:ae:00:69:2a:af:ba:95:21:e4:cf:b9:2d:
e0:c3:aa:d4:53:2f:97:63:ff:31:c8:c5:56:cb:fc:
c3:7d:fe:b9:27:95:17:e3:7e:0c:cf:67:00:27:55:
2a:49:33:a0:70:25:b8:e3:29:7c:40:1c:21:94:02:
ef:6b:09:d1:43:e1:38:9c:8e:8f:41:d4:5c:ef:19:
0a:cd:c2:3c:0d:61:d5:8f:3c:8c:ec:01:63:e6:2d:
78:2b:b7:c2:39:e4:7a:7b:21:30:f3:a4:8d:b1:c6:
b8:b1:b7:71:19:a2:7e:55:0d:63:bc:32:de:12:67:
38:88:5f:c3:7d:11:07:45:9b:d0:ff:5b:97:19:c9:
b3:30:8c:87:b6:e7:e2:a4:43:7a:08:fa:a0:e3:95:
31:02:52:6c:1e:28:36:ec:37:c5:2c:a7:5e:1b:d9:
84:2e:ab:36:42:92:ad:18:76:10:dd:ef:d4:af:1b:
67:f4:e1:1c:a2:2d:22:03:1f:db:d9:e7:90:35:8a:
53:4f:ec:ab:c3:33:2c:fb:23:31:7a:2b:66:93:6a:
93:34:0f:27:5f:44:ae:91:58:0c:d4:96:b6:44:14:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:B5:82:B5:E7:82:91:F8:41:28:7D:E5:9F:8C:39:51:06:D5:B0
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:93:ba:fc:6b:19:5f:6d:b1:47:9b:58:2e:47:14:1b:8c:d7:
04:83:c4:16:eb:dc:90:41:4b:d6:c9:86:7d:7d:ef:95:c4:48:
f7:e6:11:74:f7:c1:9b:fc:34:55:9c:1f:ed:5c:26:35:db:d6:
91:47:a0:d5:12:a5:c3:21:dc:49:66:8d:94:23:54:1f:c4:65:
17:7d:72:39:34:43:42:9c:46:07:89:c8:1a:b5:86:93:b1:32:
66:96:30:0a:c6:ff:70:6b:c5:ac:ee:f0:66:50:a8:2d:e9:84:
4c:1d:15:56:55:04:96:d5:83:8d:6c:ca:5e:bb:ff:3e:a4:bc:
8e:c7:e3:c4:4e:45:86:e4:23:9b:50:0b:cc:2d:38:d4:13:b9:
ad:82:de:dc:9d:05:31:51:c8:f1:a0:5d:af:af:c1:e9:fe:a9:
aa:4c:b8:e4:a4:7a:fa:89:cf:ee:95:30:75:d4:32:6e:81:38:
ab:1d:3f:9b:95:8e:45:b3:67:10:c2:bf:45:2e:e4:f7:47:38:
65:8e:12:1f:34:28:c8:45:b4:09:3b:ae:4e:a0:61:a7:80:86:
b8:2a:73:dc:2f:ec:4d:b5:9c:f0:ee:f5:95:e3:fa:8f:68:01:
d1:50:ee:a2:71:c1:16:66:a3:a1:4f:be:bf:48:ae:5b:d1:87:
f9:3d:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:17 2026 by rpki-client