Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: mk2bdy2g7hRsDmigAhFgyIziAFDEi7UmbcY9PtZ7hAk=
Subject key identifier: D7:62:C5:CE:05:5F:83:3F:BE:8F:A7:A6:8C:2C:D8:71:50:FA:36:04
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019D0F6952F68A64811C02C0F7B959B2F515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 187A
Signing time: Sat 21 Mar 2026 08:00:53 +0000
Manifest this update: Sat 21 Mar 2026 08:00:53 +0000
Manifest next update: Sun 22 Mar 2026 08:00:53 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: pO41mZPcpYwGWakst5v0ZJm9eYo9hOFCdwK/vJau514=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:69:52:f6:8a:64:81:1c:02:c0:f7:b9:59:b2:f5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Mar 21 08:00:53 2026 GMT
Not After : Mar 22 08:00:53 2026 GMT
Subject: CN=d762c5ce055f833fbe8fa7a68c2cd87150fa3604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:d0:25:c8:9f:28:5a:4c:27:8b:6c:d4:a5:
49:22:fb:e2:d4:8f:5d:92:3e:ad:5a:6d:14:eb:0a:
06:8b:c7:1b:0a:67:00:3e:05:e5:66:a5:c9:09:61:
12:f3:d9:78:28:8a:cb:2c:c9:a7:b6:70:4d:02:f8:
69:b9:b6:9a:a7:17:06:e5:2f:02:1b:d6:39:5d:ad:
4d:3f:a7:c3:7b:71:0b:a7:cd:c0:8b:55:f6:0c:e3:
af:45:cc:3d:eb:42:dc:96:a6:0c:6d:90:15:e2:b9:
7c:37:a8:0f:07:8c:6e:44:5d:e1:cb:5d:39:16:df:
28:b9:29:f0:da:be:40:52:89:c5:53:db:16:f4:57:
e0:e9:9a:32:34:c8:6d:22:40:41:39:dd:82:07:cc:
52:f5:d4:14:09:4a:51:a0:a8:5e:a4:84:f6:0b:14:
f9:fe:0f:b4:41:c3:9f:2b:81:82:cb:77:04:6d:4a:
02:0c:6e:89:2b:a1:e6:78:fd:ab:f9:26:84:b0:a7:
be:37:c8:0f:4f:48:34:f2:53:6b:52:c6:25:b8:9a:
d8:a9:8d:08:20:58:04:f6:78:ab:34:07:be:78:bd:
c5:48:85:8b:05:45:e4:fe:d6:f8:4b:8a:ff:66:4e:
7d:a0:93:fa:c7:7a:e8:19:fd:a3:ae:38:e6:ad:42:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:C5:CE:05:5F:83:3F:BE:8F:A7:A6:8C:2C:D8:71:50:FA:36:04
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:99:65:52:ce:b8:1b:b7:81:60:d1:6d:50:28:ac:86:99:b8:
33:2c:1e:c4:94:17:08:bc:a8:80:d0:c3:d9:4f:cc:2e:2c:69:
12:a6:01:b1:6f:13:df:3a:51:d7:5e:09:c2:7a:ad:0b:53:b4:
a4:a4:d4:26:ac:a9:aa:9c:3f:f0:44:47:72:fb:55:71:b5:e2:
3b:5f:12:4a:ac:c4:b2:3a:65:0b:d9:ee:90:84:90:92:bd:1e:
fd:06:4b:a9:36:3c:ec:65:40:67:2e:81:68:a8:42:d6:74:e3:
ae:4c:cb:fa:67:38:f8:f1:ac:c0:67:28:05:ec:e8:b8:48:b7:
08:28:47:0c:0a:ea:54:6c:88:7e:cb:10:cd:fa:02:d3:67:7f:
46:29:65:2f:85:c4:92:26:d5:11:be:97:80:8d:58:24:e6:15:
34:49:25:4a:02:44:27:4f:1b:91:18:ff:40:03:0a:8d:38:c0:
f1:45:de:0a:fc:6c:26:97:f1:3f:c3:af:44:4b:df:35:dc:cf:
cc:ce:c5:ce:25:2d:c6:b0:2d:88:a8:af:d4:2b:81:ee:33:ee:
eb:4f:14:0b:10:9b:fa:3c:48:2f:06:04:ba:05:f1:ea:92:a9:
a2:26:1b:77:1d:c1:94:54:70:43:a2:8e:3f:51:41:66:ae:4c:
ed:ec:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:35:24 2026 by rpki-client