Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: fbDMZZvXeHaEUJt3RivmfGcZ3tFMqHLkb+JXL5snyIo=
Subject key identifier: 25:A2:12:C1:7C:65:C4:72:0D:67:8A:4C:A0:AA:B9:2C:EC:ED:B6:0D
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019D3977FB5A5C961CD057CA40A7C379CAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 1401
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
2: ASI3-gM-OYcgvKx41_9-0-MFno8.roa (hash: rSz6ivInpdfIjSJs5vzuNUiUeq90iqCKHwJnYqFONoY=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: frtxEqmY2Pm5MLxCVId06hdKFwUEs583zko3otWSuLg=)
4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:fb:5a:5c:96:1c:d0:57:ca:40:a7:c3:79:ca:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=25a212c17c65c4720d678a4ca0aab92cecedb60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:22:01:90:ae:94:c9:8e:8c:1f:e1:9c:6a:
a9:50:e1:4b:41:5b:c0:56:0b:5e:15:e1:e4:f2:28:
04:00:0f:b2:80:b3:9c:ac:77:c4:35:7a:f9:39:6c:
4d:98:3a:45:ae:d0:66:63:8e:f7:27:80:2c:af:31:
8f:9e:75:05:50:31:a5:ca:48:08:8d:d4:66:5a:97:
d6:d0:de:c0:5d:00:e0:39:ad:f2:39:22:4e:02:75:
b7:fe:b3:3d:cd:c8:ca:30:10:20:6c:ec:e4:21:60:
83:c3:6c:8e:4c:16:6b:d2:30:5b:42:74:1b:c9:e3:
13:b7:29:47:61:cd:7d:fd:01:2e:67:c0:98:52:a8:
d6:08:af:3c:53:bc:e9:99:25:a8:82:39:3b:4d:2c:
19:00:bd:cf:2b:0a:f7:fd:d9:e0:e4:ae:42:94:df:
d9:8b:b6:9f:33:2f:7e:90:95:a0:c8:3a:88:d0:d7:
98:cf:c8:79:c2:de:53:01:1d:be:46:1c:64:90:f6:
6c:e0:c7:5e:dd:c6:13:ab:eb:c0:6a:3a:bf:31:7c:
d3:91:cd:f3:0d:0e:e7:0a:2d:1f:47:0c:49:d9:f7:
0c:09:60:19:20:e2:96:33:4d:72:9a:09:44:3f:5c:
78:cf:d7:a4:ef:16:90:58:a9:d3:66:6c:37:f5:ba:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:12:C1:7C:65:C4:72:0D:67:8A:4C:A0:AA:B9:2C:EC:ED:B6:0D
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:ad:92:34:a6:03:b0:56:98:50:79:aa:f9:1b:37:23:71:
fa:ed:94:da:ec:c6:6e:4b:0c:5e:54:42:45:52:0a:56:51:af:
0c:7e:2d:78:ca:eb:e1:e6:49:a4:b3:ee:90:0d:ec:3a:8b:0b:
e0:21:6a:38:a0:b6:1e:fb:1d:f9:f8:3d:36:9c:d6:9f:1a:98:
3e:f3:b3:05:06:00:76:3f:ea:44:5c:ae:03:af:63:0f:46:5a:
e0:af:fd:b4:fd:96:fd:93:a8:a5:cb:8e:fc:62:f6:e9:02:67:
ba:3d:f5:ae:90:f9:90:ac:ae:3b:47:43:c1:0b:8d:dd:fc:04:
e9:9d:52:ff:a3:68:8a:43:db:59:69:43:6c:98:81:f1:ac:da:
d2:97:09:7e:ce:57:52:ca:be:11:f2:21:3e:cb:51:27:fa:a4:
89:5b:7d:ee:28:bb:4c:ad:54:87:b2:c4:ad:4f:b9:67:7e:8b:
0d:e3:98:a2:7d:79:d6:87:4e:f8:e0:d7:9c:ba:16:21:13:aa:
ea:80:02:9d:08:76:0e:ba:ab:a8:79:df:c4:75:ac:f6:5b:39:
c7:86:96:3c:6f:1c:90:4a:e1:f9:42:fa:f1:d4:f8:a6:9b:d0:
a5:c0:7f:60:aa:5d:49:8b:d6:a4:72:93:29:18:4f:38:fc:b0:
07:8e:66:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:52 2026 by rpki-client