Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: 2zQJfX3e2UPyHLDczYA5jH1wSfDpT6jT6bm2IxwbvxI=
Subject key identifier: 39:9F:97:5B:BC:FC:7F:F7:81:8A:25:83:39:87:F3:06:67:4F:40:EC
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019D98507A5C8D1F1BD5978B0EEB3BE58015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 22:01:44 +0000
Manifest this update: Thu 16 Apr 2026 22:01:44 +0000
Manifest next update: Fri 17 Apr 2026 22:01:44 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: kNLiS5ETUlBNSIFKyMuEPumkic2RH8fK+lf/ChPBJ6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:7a:5c:8d:1f:1b:d5:97:8b:0e:eb:3b:e5:80:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Apr 16 22:01:44 2026 GMT
Not After : Apr 17 22:01:44 2026 GMT
Subject: CN=399f975bbcfc7ff7818a25833987f306674f40ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:f9:f0:4e:ef:66:b6:6f:d3:8b:c9:de:63:
fb:df:c6:02:23:5e:79:3d:1d:31:15:5d:1b:88:65:
f8:ea:e1:25:9e:74:9a:2f:b9:32:72:e2:41:9e:81:
65:d6:2c:89:37:28:b6:7b:e8:40:c9:f0:59:a4:ef:
75:8e:6a:c4:70:9a:c9:c2:d1:25:d0:06:c0:dc:4a:
4f:cc:23:53:aa:54:15:8b:64:19:dd:fc:59:88:0d:
47:9a:a1:6f:d4:de:a1:8b:1c:bd:f0:9e:87:7b:5f:
36:36:bb:b4:80:7c:1d:9c:66:b7:fd:86:71:be:3e:
74:a1:23:16:cd:4c:b1:f9:e7:f7:f3:0a:ff:9a:d3:
d0:42:f8:a4:01:1f:6f:d4:b9:e0:46:55:67:f8:3a:
ff:0f:a7:77:51:91:3c:12:ea:2e:79:7e:6f:4f:c7:
9a:ba:fa:01:5a:b8:87:d8:2f:77:a6:d7:1d:72:ec:
70:02:06:ca:e7:03:38:8d:d2:c4:9d:5a:3d:5d:89:
1f:92:a0:59:04:f2:e1:71:0e:9a:f4:3e:8c:71:00:
c5:cf:a1:81:95:2f:e8:ef:e8:a9:2b:b1:ad:43:2c:
c1:4d:aa:61:a3:13:e1:fa:7b:d8:dc:ec:c9:d4:a6:
54:1d:a2:a4:c4:d7:97:90:84:bb:78:ad:81:74:f7:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:97:5B:BC:FC:7F:F7:81:8A:25:83:39:87:F3:06:67:4F:40:EC
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b3:b2:f1:70:37:b8:ae:91:df:fe:1d:00:d2:c9:7d:6f:5a:
98:a0:c3:21:9a:b8:93:8e:33:03:6e:f2:f1:69:09:66:f2:b5:
3d:6b:8b:5f:ad:3f:53:9b:28:29:6e:a6:2e:00:d1:b1:c6:3d:
2b:3a:d9:04:06:0a:f9:b3:7b:fc:4e:27:c0:72:9b:f9:3e:a4:
9b:d6:50:94:90:4c:63:59:0e:6a:1c:af:0f:ea:08:5a:96:60:
e2:15:36:81:af:05:95:8b:30:36:91:fd:60:95:94:cc:9a:9e:
77:5a:c7:72:e1:31:71:16:a1:87:24:93:8b:0b:a8:3e:62:26:
21:d3:33:b2:dd:b5:e8:57:c9:4c:ba:88:39:3e:cf:81:77:8c:
3e:5e:f9:6f:86:bc:0b:2a:f2:b6:e8:14:a8:21:77:b5:fd:23:
63:39:ea:db:2c:bb:fa:a1:d1:38:6b:24:cb:42:39:58:e1:ed:
5a:9b:29:7c:8a:fb:5d:f9:04:42:bb:df:c0:3a:3d:a3:51:53:
f4:c2:fd:db:a5:6c:a4:bf:aa:7b:10:77:d4:ea:a6:1d:42:6d:
fc:88:34:58:23:38:68:b4:69:1a:37:e6:17:d7:2a:fd:b0:a8:
85:a1:11:8d:ac:a2:cf:70:2a:b2:18:9c:d5:d3:cd:8f:9a:ce:
7b:e9:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:32 2026 by rpki-client