Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: BJjyQcuiOiB5bJw6QiF4g7QL5mX8TzoGa/aY4dWVsCY=
Subject key identifier: F8:52:63:FA:A1:AA:62:06:13:00:BA:A7:DF:36:FA:8E:57:16:46:8C
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019EB657BB4214F72B3AC07B2CAA6228D2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 11:01:03 +0000
Manifest this update: Thu 11 Jun 2026 11:01:03 +0000
Manifest next update: Fri 12 Jun 2026 11:01:03 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: udMlYbQ3cUbfdWPTMuu5LyFUflsNAFgEOvWlsuWzb98=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:bb:42:14:f7:2b:3a:c0:7b:2c:aa:62:28:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jun 11 11:01:03 2026 GMT
Not After : Jun 12 11:01:03 2026 GMT
Subject: CN=f85263faa1aa62061300baa7df36fa8e5716468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:d7:6b:62:bf:a4:05:bc:0c:2c:7c:ba:9c:
2b:70:07:18:14:77:88:4d:79:08:e8:8d:2c:68:54:
0b:27:1a:27:2e:3d:8d:e9:77:c1:52:c0:cb:e1:ac:
d8:09:8d:bb:fc:d6:3d:32:4c:b6:e6:d8:8c:58:11:
c9:d3:c5:b0:e0:f4:2f:73:2c:d7:c5:40:54:c0:69:
e3:c1:a1:0d:3d:af:df:90:06:99:d4:eb:3e:9a:aa:
21:12:1d:61:80:ce:10:af:88:bf:89:f6:4f:fd:73:
bc:bb:a3:bc:72:99:a6:55:4e:61:05:a7:f6:4c:6d:
91:5b:d8:69:d5:81:d1:3b:94:f7:ea:e2:8c:d6:eb:
1f:be:39:c6:96:e3:2b:c4:b7:79:bb:70:82:78:3d:
a3:b0:64:52:fb:5b:67:e6:24:f8:c7:1c:ca:9f:b0:
94:68:6b:ce:60:b1:af:38:c7:f5:ce:91:62:62:93:
5a:f7:84:54:78:6c:99:af:b5:36:a8:cb:ee:ed:57:
7d:9d:69:9e:47:3c:f3:9e:89:a3:39:dc:38:43:c2:
14:1d:85:f3:ec:2f:12:d9:ca:eb:26:7f:08:0c:75:
b4:20:2a:62:f8:e3:1e:b9:dd:73:4f:37:ef:c3:b5:
44:3b:6a:06:75:71:b6:f9:db:25:aa:72:48:da:5d:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:63:FA:A1:AA:62:06:13:00:BA:A7:DF:36:FA:8E:57:16:46:8C
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4d:ca:12:d5:cd:93:9f:37:4a:ba:b2:b7:61:27:60:c0:07:
b2:e2:8a:67:18:ae:4d:dd:5d:ce:f5:74:99:e0:06:8f:b4:98:
57:da:90:28:b9:a4:07:da:06:5d:04:fa:f2:d6:49:b3:9b:00:
9b:44:1f:11:92:7d:9b:25:79:ac:61:aa:ee:66:8e:b0:01:6d:
60:a8:9c:a0:03:98:cc:8a:87:3d:6e:0a:63:10:1e:e6:5a:9c:
3c:63:92:ad:5f:16:62:55:36:4f:0a:ae:cd:45:af:3a:2e:f5:
4c:85:cb:88:73:6d:56:82:2b:d3:d2:98:42:14:89:b0:6d:a8:
41:69:53:81:33:40:7b:2f:0b:b0:c5:e2:f6:81:7c:13:ab:95:
39:1c:92:0c:b3:dc:d9:11:fa:25:6e:77:ca:33:74:a9:59:88:
21:a4:cc:7f:dc:1b:28:26:d7:f7:a0:6b:76:cd:47:ce:9a:e1:
2b:7f:df:ea:fb:5a:fc:7d:3e:e0:a4:44:0f:49:e6:2a:5a:f8:
bd:17:9e:59:f3:17:70:32:62:bc:e2:5a:dc:4b:39:a6:aa:93:
dd:a7:fd:85:cf:61:fa:da:e2:42:b0:95:24:1f:c8:0b:3d:57:
a1:4b:5c:74:3d:c0:61:90:55:08:11:bd:9f:1c:25:ec:1a:44:
f2:f4:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:31:18 2026 by rpki-client