Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: 53LAlIPIxfRp9BDN1N9KKB5WR0C7ijukFvLgS9zj1XQ=
Subject key identifier: 9F:04:B7:03:35:FC:00:1E:92:2E:E9:9B:CF:BB:74:1B:32:85:DA:0B
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019DCCAAADAD25C74F360F397FA74CC207AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 02:00:30 +0000
Manifest this update: Mon 27 Apr 2026 02:00:30 +0000
Manifest next update: Tue 28 Apr 2026 02:00:30 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: 7hz1t2BoxhJ8r5MyjSqfRkGbdztSihciEZWNdyqJ+rs=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:ad:ad:25:c7:4f:36:0f:39:7f:a7:4c:c2:07:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Apr 27 02:00:30 2026 GMT
Not After : Apr 28 02:00:30 2026 GMT
Subject: CN=9f04b70335fc001e922ee99bcfbb741b3285da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:f2:b0:e3:7c:a8:3e:64:6f:0b:4d:91:ef:
d4:03:2d:10:c3:55:7b:87:72:69:08:34:cb:7c:90:
44:cc:3c:d4:a9:d2:db:30:f4:a0:fb:d2:fe:d1:ae:
28:98:a2:95:9b:13:70:d1:8d:3e:92:f7:9a:e7:bd:
09:61:33:22:bb:fd:70:e4:c2:0e:8d:a0:15:63:dc:
52:f6:d1:b0:d3:50:87:18:dc:e6:6b:57:5d:30:5e:
f8:05:b0:8c:8b:b5:bb:39:42:9f:8a:a2:97:24:22:
f5:1a:88:15:b6:77:04:63:da:4f:d5:20:9f:24:5b:
16:5b:95:29:1e:a8:d5:59:fb:c5:f9:2c:dd:82:c2:
42:64:f9:fe:69:41:c9:a0:32:3b:7e:73:77:6a:11:
e7:41:1c:70:b6:d1:e1:28:15:6d:36:af:7f:c0:0c:
ca:d3:88:6d:d7:1d:07:6e:05:45:c3:1c:8f:da:2b:
27:a5:9c:94:b5:dc:56:18:7e:d9:0a:b1:9b:e2:a2:
4a:ff:ff:1d:37:89:ba:e3:14:bf:3f:6d:f6:aa:96:
11:9f:bc:86:3e:4f:aa:c3:ce:69:dc:a7:5a:43:e8:
a3:fd:89:2d:52:87:52:69:9c:c5:14:c5:8e:73:9d:
e2:59:8d:9e:f9:e6:69:91:73:5c:e1:ab:97:a8:8d:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:B7:03:35:FC:00:1E:92:2E:E9:9B:CF:BB:74:1B:32:85:DA:0B
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ae:cf:c6:e7:77:55:48:43:99:83:ba:51:ac:03:da:6c:e0:
d2:21:e6:41:9b:a9:88:9c:ee:8e:f4:34:2b:4d:24:b1:a9:f9:
5e:0b:55:a6:97:10:5f:7e:07:24:ba:cb:72:ad:83:85:ec:72:
50:82:9e:39:54:64:fd:c8:f1:62:9f:81:be:42:be:a1:fc:d5:
55:c4:37:b6:c6:29:1e:e7:de:64:bc:61:cd:23:b7:db:9d:e6:
07:88:52:b4:ee:30:8a:28:5b:28:3e:4e:7b:35:0b:49:24:57:
de:4d:63:4f:83:58:e6:8d:79:87:c9:f8:ae:2a:1e:7c:ab:44:
8c:f1:0b:fb:90:b5:d2:7d:83:4f:65:da:4f:ca:bd:26:a3:76:
c0:fe:1b:91:62:18:cb:20:28:f0:63:22:f6:48:aa:aa:c0:02:
52:1e:a7:bd:4a:1a:48:ed:53:05:28:db:55:8d:b8:b6:10:35:
c0:32:c0:3d:a7:9d:06:10:67:68:22:b5:2f:ae:48:04:70:94:
04:37:20:39:b1:d5:46:87:30:6c:52:57:d5:54:23:77:c3:10:
74:31:7e:0a:49:6f:f1:a0:c1:97:99:18:be:e6:b2:ad:2c:77:
63:49:c9:99:e1:48:bb:8a:9f:0e:02:aa:8c:9f:71:0d:ed:2e:
33:a5:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:15 2026 by rpki-client