Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: 5yMaK3eoi5v4RUttXwktWJcppudTXfhyfbfgNt27ILs=
Subject key identifier: E3:E4:2D:86:6B:08:1C:46:22:09:3A:97:43:C6:EE:81:F4:42:FA:BE
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019DCED0606151AA634CC6B5EC79DC43CCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0FC3
Signing time: Mon 27 Apr 2026 12:00:55 +0000
Manifest this update: Mon 27 Apr 2026 12:00:55 +0000
Manifest next update: Tue 28 Apr 2026 12:00:55 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: m6iQx9OIXyz5e6rkRwUgE3W+0MyohziEFq2pJ4fH7ek=)
2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=)
3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:60:61:51:aa:63:4c:c6:b5:ec:79:dc:43:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Apr 27 12:00:55 2026 GMT
Not After : Apr 28 12:00:55 2026 GMT
Subject: CN=e3e42d866b081c4622093a9743c6ee81f442fabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:c8:a4:12:bd:4e:2f:5f:88:9b:fc:26:7c:
9a:fa:9c:a2:ea:3c:54:ba:ec:29:47:90:1e:84:76:
34:0d:c7:65:ff:8f:04:b4:fe:0a:e9:5e:df:4e:2f:
f6:47:f4:bc:e7:12:9f:fc:62:64:50:5d:3f:88:ea:
bb:c9:ad:f6:bb:df:c0:e1:cb:0f:93:1b:47:1b:38:
ab:9e:69:dd:d7:f4:86:86:b2:34:ed:42:e4:0f:99:
62:3d:20:25:35:f3:94:25:a0:8f:5b:98:fb:e5:69:
90:ff:cc:53:01:98:4b:7a:57:91:aa:7f:4f:63:50:
53:8c:12:b5:0e:87:ef:14:da:87:43:81:97:00:71:
ce:26:b2:69:dd:9b:d1:91:65:16:3a:5d:2e:42:8f:
99:41:fc:60:ab:bf:d6:7d:5c:62:db:f3:10:73:72:
17:22:93:92:45:e0:3d:5f:e7:6a:f4:9f:69:a3:cc:
8e:79:a5:5b:99:18:5e:c1:0b:0a:d2:91:62:eb:3e:
fa:7c:cd:12:d8:c0:89:d5:34:eb:65:ec:e0:7e:4d:
e2:c1:ca:77:34:4c:fe:10:2d:69:85:e5:94:d6:21:
c6:ba:a2:b1:bd:b7:4e:62:15:b0:70:dc:be:b2:e7:
d9:37:01:92:59:9f:d9:aa:16:44:8f:55:7c:23:b5:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:2D:86:6B:08:1C:46:22:09:3A:97:43:C6:EE:81:F4:42:FA:BE
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:f8:46:c2:59:e4:d7:ed:9a:b9:c4:f7:72:2a:b5:85:78:
b7:0b:6b:2e:f6:b2:f0:91:35:92:61:55:9d:02:e6:2e:f8:06:
22:d1:ca:d3:1c:85:db:0a:b9:65:8b:f2:a3:20:2b:0d:7c:b0:
d9:f7:60:20:9d:95:c2:30:22:49:be:81:d3:0c:5f:56:59:1b:
4d:35:80:61:c5:81:7a:a2:9c:b1:84:dd:d5:c1:da:8c:5a:36:
14:b6:f6:05:f2:82:58:a0:4a:e3:72:48:bf:04:a4:08:d6:ad:
24:42:d8:71:fa:ec:dd:0a:f8:85:2a:3e:00:43:e2:92:38:ea:
b3:aa:63:e1:db:35:92:15:7d:68:e3:9e:8a:fe:ba:33:21:74:
07:a3:2e:70:1c:38:ef:7d:1c:24:69:ca:de:72:85:e6:40:74:
2c:6e:ae:c7:e1:d4:97:52:cc:8a:fb:4b:09:f8:61:ff:70:32:
e0:af:41:c7:fd:6f:12:bf:b0:d4:0e:33:bc:e2:4e:8b:4b:4e:
b8:89:49:d0:eb:aa:92:97:90:09:1a:73:78:ba:4d:83:35:dc:
c7:c2:87:8e:90:24:f1:ea:e4:e8:71:e7:dd:76:bf:12:f4:45:
4f:f8:43:85:de:34:0b:ee:95:1c:7c:30:65:6e:65:bc:79:1e:
73:eb:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:26 2026 by rpki-client