Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: MNz3dM6ilG+Ss8E/jqcnHaG+GUlmDxozobUXwx6vZDQ=
Subject key identifier: 99:03:4C:04:59:F3:2D:4C:42:49:D7:8B:06:E4:33:FC:9A:88:BD:09
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019CE523E37C45B167A103305BF9057C491D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0F4A
Signing time: Fri 13 Mar 2026 03:01:00 +0000
Manifest this update: Fri 13 Mar 2026 03:01:00 +0000
Manifest next update: Sat 14 Mar 2026 03:01:00 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: QZdiVUMVJ/j+h7+D6+hal3JQqafx8J3dt1gzNsYP42o=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:e3:7c:45:b1:67:a1:03:30:5b:f9:05:7c:49:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Mar 13 03:01:00 2026 GMT
Not After : Mar 14 03:01:00 2026 GMT
Subject: CN=99034c0459f32d4c4249d78b06e433fc9a88bd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:32:29:f1:20:f4:f0:26:7a:cc:f1:a1:58:
db:bb:14:87:d6:ad:ad:8f:16:c6:79:fa:c6:c1:b9:
6d:b5:4f:22:58:c4:56:c3:f3:d4:9e:3f:db:01:ca:
9c:e2:d4:43:3b:d4:a6:c1:e5:49:39:86:40:8b:22:
f0:f0:dd:00:c7:e8:23:9e:b3:13:44:c7:8d:61:8a:
88:d3:7a:6d:28:bc:d4:7c:af:2b:45:dd:0f:2c:09:
48:ab:87:05:60:ab:8b:2a:58:d6:6c:9e:5e:c3:07:
91:14:df:6d:a2:ad:67:e5:d8:00:27:be:8a:22:2e:
b1:be:f8:a2:ef:e4:20:ef:c0:c5:c5:11:d8:2a:46:
d9:32:ee:28:59:4a:f8:94:93:09:26:6a:9e:b3:8a:
68:fa:38:35:36:a1:10:cf:da:ff:82:c2:58:c0:6e:
e7:21:30:c6:8d:a3:f7:e4:aa:1f:4a:83:17:c3:cc:
75:48:70:05:a7:1e:d9:bd:65:a9:c2:93:dd:ef:c3:
e7:59:9d:83:cd:27:4a:c3:c8:3b:90:ba:00:ca:9d:
1f:d3:73:8c:fe:a0:80:af:50:7a:1c:e3:37:9c:b1:
29:f8:dd:f3:9c:48:82:a3:96:2d:92:62:68:fc:57:
4a:e5:df:65:4a:3b:01:d9:8a:da:73:ab:24:79:38:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:4C:04:59:F3:2D:4C:42:49:D7:8B:06:E4:33:FC:9A:88:BD:09
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:d8:af:93:a4:af:81:00:43:3d:98:ba:ea:d5:02:d7:51:
d0:94:58:46:e0:5c:e9:d8:56:55:ab:54:e3:c5:33:b1:ae:15:
61:aa:bc:5a:91:87:6b:e6:62:a1:51:b7:19:57:79:8d:18:5c:
93:cb:0f:d0:c0:9e:8d:bf:51:82:ca:b5:11:1c:c4:5c:10:1c:
a6:a0:d0:09:04:38:85:a5:6c:87:fd:26:18:e3:c2:d2:d9:71:
e3:42:8c:d0:db:e5:fe:bd:45:c4:ca:f4:2b:e2:7c:5c:f8:73:
d3:ff:be:de:37:d9:59:5c:c9:b8:48:f3:5e:d0:06:e6:98:bf:
e2:b5:e5:c8:fe:f2:39:64:ed:ff:48:4b:71:b0:f3:4f:2a:88:
93:47:18:92:7b:f8:9c:2c:b6:ab:29:86:3f:27:28:9e:b7:1a:
a3:f9:25:04:30:27:bd:a4:e2:8f:02:0d:a7:f1:82:72:99:8d:
5f:19:7d:9b:55:c3:24:9a:d1:32:fb:57:53:a1:a2:a3:45:a1:
1d:07:b3:bd:be:5e:23:b0:c9:0e:94:f2:96:54:c2:15:22:8c:
4d:b9:4e:15:a8:c1:29:5c:d5:05:e4:45:c9:94:56:12:80:d1:
e6:3d:13:7b:09:82:21:a3:68:e3:fd:28:a6:a7:64:4c:3f:20:
33:82:a0:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI+N8RbFnoQMwW/kFfEkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm
OWY5YzUwHhcNMjYwMzEzMDMwMTAwWhcNMjYwMzE0MDMwMTAwWjAzMTEwLwYDVQQD
Eyg5OTAzNGMwNDU5ZjMyZDRjNDI0OWQ3OGIwNmU0MzNmYzlhODhiZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA090yKfEg9PAmeszxoVjbuxSH1q2t
jxbGefrGwblttU8iWMRWw/PUnj/bAcqc4tRDO9SmweVJOYZAiyLw8N0Ax+gjnrMT
RMeNYYqI03ptKLzUfK8rRd0PLAlIq4cFYKuLKljWbJ5ewweRFN9toq1n5dgAJ76K
Ii6xvvii7+Qg78DFxRHYKkbZMu4oWUr4lJMJJmqes4po+jg1NqEQz9r/gsJYwG7n
ITDGjaP35KofSoMXw8x1SHAFpx7ZvWWpwpPd78PnWZ2DzSdKw8g7kLoAyp0f03OM
/qCAr1B6HOM3nLEp+N3znEiCo5YtkmJo/FdK5d9lSjsB2Yrac6skeTgRJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkDTARZ8y1MQknXiwbkM/yaiL0JMB8GA1UdIwQY
MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt
ZjU0ODY5OWY5NDdhLzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh
LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSbYr5Ok
r4EAQz2YuurVAtdR0JRYRuBc6dhWVatU48Uzsa4VYaq8WpGHa+ZioVG3GVd5jRhc
k8sP0MCejb9Rgsq1ERzEXBAcpqDQCQQ4haVsh/0mGOPC0tlx40KM0Nvl/r1FxMr0
K+J8XPhz0/++3jfZWVzJuEjzXtAG5pi/4rXlyP7yOWTt/0hLcbDzTyqIk0cYknv4
nCy2qymGPyconrcao/klBDAnvaTijwINp/GCcpmNXxl9m1XDJJrRMvtXU6Gio0Wh
HQezvb5eI7DJDpTyllTCFSKMTblOFajBKVzVBeRFyZRWEoDR5j0TewmCIaNo4/0o
pqdkTD8gM4KgAw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:00:14 2026 by rpki-client