Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: DibOPazTkN3vmb/i6pb1bzxG9pNAedJ57I1damTrQDM=
Subject key identifier: 83:BC:82:48:1F:D1:2E:D8:4D:C4:43:11:F7:54:4C:47:B3:B7:FE:B9
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019CE2FE4ADCF0545AB9D284A8DB278A91D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1863
Signing time: Thu 12 Mar 2026 17:00:41 +0000
Manifest this update: Thu 12 Mar 2026 17:00:41 +0000
Manifest next update: Fri 13 Mar 2026 17:00:41 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: nygWId6UtOsYaZnj18Xyj5k0spW6i+bGYwTA3vXAr3U=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:4a:dc:f0:54:5a:b9:d2:84:a8:db:27:8a:91:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Mar 12 17:00:41 2026 GMT
Not After : Mar 13 17:00:41 2026 GMT
Subject: CN=83bc82481fd12ed84dc44311f7544c47b3b7feb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:3b:dc:b9:8f:17:35:74:5f:0c:1a:62:1d:
ec:00:ad:52:42:72:53:d0:a3:2f:a0:9a:1b:d6:a7:
99:97:12:30:4c:0c:cb:0a:c8:64:d6:c2:4e:da:1a:
f8:ff:15:fb:cd:a6:76:0f:fd:ea:2e:46:0f:dd:9f:
c2:c0:63:5c:81:2e:b0:07:ce:a1:f9:fa:1e:1a:5a:
c6:1e:f1:86:02:89:ad:92:7a:81:3b:1b:99:0f:fd:
f4:e8:2c:a1:63:b5:84:e0:05:c4:12:4f:cd:b1:82:
f6:f4:d1:0e:f3:21:55:e9:27:16:9b:1f:5e:45:57:
97:1b:00:01:72:a5:b8:2b:93:29:6b:f6:a1:a4:c1:
7d:1b:9c:2d:d1:14:59:1d:fc:8b:9b:70:76:4c:b0:
56:3b:21:e1:44:55:81:a8:4d:c0:8e:c4:d0:c7:4a:
48:57:d5:e1:c5:bd:64:bd:71:b2:e6:3d:db:75:e0:
fc:88:e4:33:6e:6f:ac:7b:80:91:46:39:d5:f8:0d:
93:1d:d4:12:ae:00:d4:52:7f:d3:61:b3:54:93:13:
64:36:50:cb:80:e0:83:4c:96:bf:b7:47:64:34:a5:
0e:fc:c9:75:9e:ae:7f:53:02:f1:69:bf:6a:b0:fb:
d8:56:d3:5c:26:fb:f4:dc:59:f1:47:ec:54:bc:7d:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:82:48:1F:D1:2E:D8:4D:C4:43:11:F7:54:4C:47:B3:B7:FE:B9
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:02:cb:1a:a8:ea:12:27:37:55:21:58:93:78:1c:7e:c8:5d:
53:f0:a9:80:1f:a3:db:9f:49:06:51:7c:44:b2:8e:0f:d3:3d:
3c:4e:6c:15:fb:5b:57:5c:39:a4:00:9f:e2:a7:5b:3e:28:94:
22:10:59:d1:01:26:44:1c:b9:90:c2:9a:66:4f:24:d6:9e:fe:
81:69:32:b9:ba:3d:be:0e:bd:4b:21:f3:f0:41:35:04:68:1d:
2e:5a:30:f5:1f:ba:d8:04:cf:b4:26:25:fb:39:9d:38:92:29:
db:d9:e5:dd:1f:1c:89:5c:95:54:12:13:d5:54:b3:c8:4e:f9:
71:b5:44:c5:29:82:09:ec:5a:1d:de:4f:96:f9:db:a0:45:2d:
1b:95:f9:2f:a9:65:2e:76:33:cd:67:cf:33:72:e4:c1:09:bc:
3e:c1:35:bc:9c:96:51:11:61:8e:8b:29:eb:bb:19:98:2e:1f:
89:e5:57:5c:37:63:58:dd:7c:c7:46:16:96:31:6b:a5:da:22:
cc:9f:1d:d0:e2:ae:11:df:0a:4b:a4:0e:3a:3d:0a:a3:1e:b6:
65:34:0a:6b:27:94:e7:99:34:53:c6:d6:28:2e:25:b4:02:e1:
f1:f5:56:5d:b3:8d:9f:44:61:93:07:4e:43:cb:2a:11:a4:fd:
73:e0:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:10 2026 by rpki-client