Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: ZfNdBiPhP+4SfqEWweO9tDjo2M4a+dPHqDeJgdcckh4=
Subject key identifier: 24:D7:AA:32:16:78:2F:8A:31:30:EF:D4:E4:9F:06:8A:12:89:19:B3
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019D9A752F1C5206409092AC4AEBAA2A34DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:01:04 +0000
Manifest this update: Fri 17 Apr 2026 08:01:04 +0000
Manifest next update: Sat 18 Apr 2026 08:01:04 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: FvXLRgCDo0jXWesUTL8K+7KXm9TTJNmvuF+jk0WkefY=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2f:1c:52:06:40:90:92:ac:4a:eb:aa:2a:34:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Apr 17 08:01:04 2026 GMT
Not After : Apr 18 08:01:04 2026 GMT
Subject: CN=24d7aa3216782f8a3130efd4e49f068a128919b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:b4:7e:0f:aa:95:e1:b9:3e:81:b3:0c:fb:
a1:98:18:de:a5:19:38:37:4d:7c:a8:5f:39:a1:02:
c3:18:54:6a:4f:7b:5f:98:4f:34:17:3f:d1:55:fe:
80:77:07:c8:ca:39:f4:37:7f:55:78:61:a0:2d:a8:
41:ab:3b:5b:81:ee:be:00:9a:a1:7b:1a:e2:d2:47:
36:e1:43:b3:3b:2d:94:f8:90:ca:75:8b:21:f6:36:
54:4e:10:ec:04:79:99:9c:a5:f4:66:50:26:f1:08:
e7:5d:6e:2e:79:89:1a:e0:02:e8:d6:b7:d4:2a:a7:
ba:1d:89:81:f6:00:3e:2f:c9:55:95:7c:22:0a:95:
b3:d1:1c:c5:c9:59:32:b4:a3:ad:66:f0:8c:66:7e:
05:1a:6e:78:e4:31:71:7b:42:65:cb:29:11:30:ae:
a1:70:f1:05:d1:55:9a:55:19:d9:13:ba:7c:00:26:
d1:ce:e8:46:da:95:9d:93:11:6b:9b:22:da:01:c4:
73:16:b2:7d:d6:97:84:a5:12:5d:c9:50:0b:56:14:
c8:4a:08:28:b8:98:c3:b0:64:0a:a3:1d:19:51:68:
7f:cd:6d:0c:3e:79:eb:8d:ea:7c:60:3f:bc:78:15:
77:c7:32:cc:17:8f:c6:48:d3:8c:f5:b4:7a:2b:8c:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:AA:32:16:78:2F:8A:31:30:EF:D4:E4:9F:06:8A:12:89:19:B3
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ae:df:60:9e:2c:ab:ea:c6:77:cb:b3:62:74:c4:fd:c4:b5:
80:ae:4b:3f:29:46:ab:95:fc:f5:1e:59:16:2f:03:93:28:b6:
07:4c:af:22:1d:d0:8d:e8:f0:15:2f:48:78:a9:d2:f5:a3:30:
9e:56:51:fa:e8:d3:bf:70:ce:f7:e1:33:05:b1:3c:41:53:df:
b7:c0:9b:f7:f7:54:73:14:f0:b3:18:34:c5:86:af:3a:3c:b9:
09:8a:62:aa:e6:6d:c8:03:42:88:e3:8c:26:4f:c3:55:ca:4a:
43:c6:f0:6f:23:45:9e:3a:ee:cb:c3:1d:91:33:24:50:c9:84:
fc:ff:c2:cf:72:6e:a5:32:6b:c5:45:44:90:a4:52:6e:88:7d:
43:7d:f6:36:3c:a0:3e:f9:01:f4:cb:11:1e:df:f2:79:a8:fe:
06:7c:fa:0c:f6:f7:36:85:b4:c4:bb:c1:f1:3f:70:12:1d:c6:
c0:48:54:c2:dd:30:66:4f:a1:21:04:3b:61:06:59:ba:88:f8:
4d:da:87:47:95:de:be:98:e2:63:30:0f:bf:42:2c:41:3d:ae:
9c:b5:cb:7c:e9:68:99:13:ff:64:ac:24:c8:69:64:91:a5:60:
73:c8:df:6e:bc:7f:57:db:c0:d1:69:57:a3:8b:4e:b2:e7:5d:
bc:aa:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:43 2026 by rpki-client