Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: LH/rvi6ogYgx4Qbt3gV9BDxaeTJhlzVGihDbA2QxZvQ=
Subject key identifier: 71:AA:94:C0:64:E8:00:57:C6:31:54:BE:03:7B:36:06:0B:4F:CE:BB
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019D9BF5348D28C7B6D9F8EAFB9EAFEBC179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0C96
Signing time: Fri 17 Apr 2026 15:00:31 +0000
Manifest this update: Fri 17 Apr 2026 15:00:31 +0000
Manifest next update: Sat 18 Apr 2026 15:00:31 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: 45SARYzyjCTgnc/AAZIJJpULflQ3jWyl6oZLFCTglGA=)
2: b5hEA0skW7XIPdQy24vlGY78QsQ.roa (hash: wOWtUPMhhEOhukktL5n5JA5DpIw7T84vi3SfnV7rzhc=)
3: wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa (hash: e7gIuzOOhyYERCBNmfCsDBCus3fRDqXK6S2fVbX8rlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:34:8d:28:c7:b6:d9:f8:ea:fb:9e:af:eb:c1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Apr 17 15:00:31 2026 GMT
Not After : Apr 18 15:00:31 2026 GMT
Subject: CN=71aa94c064e80057c63154be037b36060b4fcebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:84:f1:16:57:e6:9c:9f:3c:24:00:6e:e4:
17:3e:c4:55:a5:2c:03:86:da:95:2f:27:6c:97:32:
ce:b9:79:d0:b7:d9:46:00:91:10:9a:52:3a:f0:8e:
9f:be:bd:19:25:24:48:5d:10:93:27:98:c3:7d:9e:
6b:30:a9:18:42:7d:b1:11:c2:25:eb:d2:69:6b:d5:
87:01:39:c7:fb:88:5f:05:c8:03:83:ca:1a:b8:89:
1d:83:02:18:45:87:1d:d9:bd:99:41:b4:a5:4d:70:
13:e6:ca:14:d9:fe:50:ed:5d:b7:92:b9:9a:a5:ac:
d0:6d:18:7d:01:47:24:f8:e5:0d:70:73:fe:49:ee:
7f:ec:b8:83:8d:16:36:e0:f0:ed:0d:70:e0:04:f2:
24:78:3c:12:d2:88:76:a0:00:c9:5b:76:93:63:b5:
d5:25:62:c8:33:79:72:c2:29:07:47:0b:2a:bb:d7:
d6:1e:e4:06:66:28:cf:4b:f6:4c:99:38:2f:a8:12:
56:a6:0b:53:a0:84:fd:92:4b:8e:7c:4a:bc:fd:f7:
4f:81:7a:b7:b5:79:01:df:87:87:95:f5:28:7a:b1:
a4:40:57:3a:20:68:4b:7b:b8:2c:75:0d:bf:d0:92:
34:57:5e:ac:57:85:ca:66:f2:95:60:6c:73:69:92:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AA:94:C0:64:E8:00:57:C6:31:54:BE:03:7B:36:06:0B:4F:CE:BB
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:af:9e:9e:d8:30:a9:87:99:23:28:21:28:f0:62:c0:9e:e6:
fa:b8:aa:f4:e8:99:68:aa:85:09:c0:bb:41:95:0e:a8:22:3b:
4a:b4:c6:b4:01:e3:1a:20:d4:e8:48:51:4d:d4:e2:29:34:83:
f3:aa:9d:1d:1f:19:c7:57:9d:2e:39:57:91:0c:56:29:7d:86:
65:0c:cd:48:58:78:c5:24:02:e3:86:8a:ed:01:d9:54:f7:17:
49:e5:a1:d4:1c:10:9c:4c:fd:d9:52:67:21:70:8e:9d:f2:3c:
b2:24:c6:68:cb:d5:cb:78:7a:f6:1d:81:73:49:77:e3:c3:d5:
5d:ae:75:28:75:0c:ca:bb:3e:e9:6b:d0:64:4b:4d:ca:bb:46:
82:dc:9c:f6:03:87:c8:cf:af:0f:fa:11:b1:6c:3b:b6:f6:ee:
53:a0:96:30:bd:19:d9:a2:aa:77:09:49:5d:bf:ce:da:73:8b:
80:96:6d:59:2c:2e:67:12:10:a8:de:e4:4d:ef:7d:c7:c0:95:
12:74:3b:ad:1b:0d:94:89:34:ef:74:75:12:3c:c1:2d:48:de:
73:c9:a0:77:e4:67:4c:e7:06:50:4b:62:a6:38:5e:ed:30:76:
e3:83:e9:25:68:4f:dc:0b:2b:42:d1:a0:02:e5:41:d6:27:bd:
15:d2:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:38 2026 by rpki-client