Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json)
Hash identifier: ZetFvCowhagqbAlGE1rfWWTtz8RlzWssCH/xxbR4N2k=
Subject key identifier: 37:2A:29:01:98:2E:7B:FB:AD:92:3C:BA:2A:18:4C:6B:6C:37:EA:D3
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial: 019D9B50E658F6BBEE83201B71813101E998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
Manifest number: 0A38
Signing time: Fri 17 Apr 2026 12:01:03 +0000
Manifest this update: Fri 17 Apr 2026 12:01:03 +0000
Manifest next update: Sat 18 Apr 2026 12:01:03 +0000
Files and hashes: 1: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: sCWcm/W5LBkHAqYXEuzhnNVuLXUde+3Dp+gCWRCCzds=)
2: RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa (hash: CRq+pDZeUDRucY39aQu9W9dJZ2hkbZK+EIWSe9Ksg/E=)
3: _No3AaXXRlHLcpFNSmUWopTAJdg.roa (hash: EJSEOoxCaCh+aZvxqJVPw2pAxsLbMiGabHj8Ve+PjSE=)
4: swGFUTWOXUe99AW4UAnyiW3gY2Q.roa (hash: m5rwzGfEVZaEpVcuRJk6LpH2JpmpgTyQJgllQOQrn/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e6:58:f6:bb:ee:83:20:1b:71:81:31:01:e9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Validity
Not Before: Apr 17 12:01:03 2026 GMT
Not After : Apr 18 12:01:03 2026 GMT
Subject: CN=372a2901982e7bfbad923cba2a184c6b6c37ead3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:d5:83:57:da:ae:d0:48:61:71:96:f0:3d:
28:3a:60:b2:f7:e6:60:76:08:13:b9:6c:f0:32:ac:
4d:d4:66:a1:ad:ca:a1:4b:6b:50:5c:ef:3e:9c:d3:
c6:3f:8d:75:2e:db:41:42:51:d6:8d:4a:d5:58:d4:
df:4e:c7:6d:72:fa:9b:dc:3a:70:c9:39:ca:54:a6:
89:a4:67:af:46:5c:4f:1f:5d:dc:76:6d:b7:18:fe:
bb:f3:0e:c2:89:b4:71:48:b9:2f:d3:8b:15:6f:4d:
09:38:34:29:9e:d2:df:11:8e:e4:e3:90:68:ff:63:
a4:48:1d:5d:a7:eb:88:a1:da:82:30:ea:48:d4:c8:
45:c7:df:86:b2:8c:46:4f:85:f5:a5:21:03:da:f0:
21:db:3f:38:72:4f:8f:4c:d5:93:5e:57:6c:60:62:
50:40:43:0e:d3:4a:97:f6:78:28:be:ba:43:09:12:
9b:96:f2:84:cc:e3:0b:85:32:21:5c:ce:60:74:c9:
cd:ae:53:f1:d5:96:59:1b:00:a6:ed:6e:61:24:35:
8c:34:55:6f:cd:d3:7a:e5:43:79:b9:d6:18:c1:bd:
ad:b8:ba:85:23:43:e4:5c:7d:94:0e:15:7d:ff:83:
03:a0:cc:b0:c6:43:a6:0c:2b:8b:e6:af:90:f2:a3:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:29:01:98:2E:7B:FB:AD:92:3C:BA:2A:18:4C:6B:6C:37:EA:D3
X509v3 Authority Key Identifier:
keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:64:c0:40:00:39:4c:53:a1:1c:ed:fa:2f:ef:14:d5:72:
bd:aa:90:5f:07:a6:d5:ad:07:8f:ac:2a:65:47:6b:78:6b:79:
6a:c0:3a:df:d0:26:f6:41:a5:01:89:96:ee:c1:6b:d8:74:31:
53:2d:6f:ad:a7:7f:de:b0:fd:69:ee:d0:43:00:b3:78:92:0f:
44:87:33:35:7c:00:cf:6d:0f:7f:1c:4d:c4:5a:be:0c:4b:b3:
48:b2:e3:06:63:d8:2c:9f:d7:e2:86:3d:0d:9d:40:f6:b6:2a:
b5:f5:8a:6b:d9:14:9d:31:56:a7:d5:1a:4d:c2:c8:fa:3c:9c:
b1:0a:0d:bb:d5:c9:ce:2a:35:17:49:05:f3:31:3f:93:0b:24:
9a:14:87:92:e7:58:2a:a9:90:9a:71:da:dc:a6:0b:eb:4e:e7:
a1:dc:b5:19:c8:f3:72:ba:64:10:28:bf:36:41:f1:d1:a2:a9:
f3:01:79:c0:56:73:7a:5a:bc:55:bf:2e:15:99:fb:60:9c:23:
2d:3f:a0:94:b2:03:ae:88:40:3a:f9:92:0e:16:b9:30:69:e5:
a8:0f:1c:12:65:00:9f:98:26:b9:b1:d8:2d:40:71:50:b4:ef:
99:84:71:f3:55:af:4c:9c:91:a0:79:1d:cf:43:ed:8f:e5:43:
5e:eb:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:20 2026 by rpki-client