Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: E3C8/4mcHU3/598u3hBzgr+1ZCgx+NV6vo0QkNW1B38=
Subject key identifier: BD:E4:E3:4D:AF:A0:43:69:F7:36:B0:20:1F:B9:62:75:20:DF:B5:3D
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 01A085D3EE4D776C68185ACE30EC12CC3EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1A45
Signing time: Wed 09 Sep 2026 11:00:53 +0000
Manifest this update: Wed 09 Sep 2026 11:00:53 +0000
Manifest next update: Thu 10 Sep 2026 11:00:53 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: vgj0Vs+7RNgdL7jFsLXUs2aAXGbry63dX8mESEZWKL0=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:d3:ee:4d:77:6c:68:18:5a:ce:30:ec:12:cc:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Sep 9 11:00:53 2026 GMT
Not After : Sep 10 11:00:53 2026 GMT
Subject: CN=bde4e34dafa04369f736b0201fb9627520dfb53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:78:a8:d7:50:bb:9e:26:c4:5e:21:a6:e5:
c9:df:2f:8b:9c:00:24:c8:83:93:3e:ff:70:9d:2f:
23:b5:5c:c5:d1:19:85:16:99:d0:7c:dc:2f:87:99:
cc:3d:34:3a:f3:ca:cb:0f:55:a2:a4:1c:37:7d:a4:
4d:bb:ef:02:6d:22:c5:2b:b7:2c:5a:be:e1:0c:61:
51:6e:e1:cd:08:06:7a:8e:fe:51:25:b2:21:23:40:
44:34:1a:8f:01:b2:15:8e:c2:74:46:91:59:c8:88:
89:fc:89:9a:34:18:22:6e:cc:e0:c1:9a:73:0e:f5:
b0:dc:f6:72:2a:77:84:f5:6d:fa:ed:c9:7e:b7:57:
b4:59:52:73:e7:fd:2d:63:6c:1d:0d:0c:16:bb:07:
bb:b8:bc:9f:15:41:39:9e:5f:05:9e:06:0b:be:da:
3a:9f:18:81:88:92:85:f4:44:9c:2e:04:21:e8:eb:
0a:7a:a3:81:1d:5d:e2:c1:bc:39:65:d7:28:87:92:
66:a3:c8:1b:81:74:9e:44:94:f4:92:e8:1f:18:fe:
a0:6e:03:0e:fe:1a:59:e3:ba:51:5b:f7:d9:c9:2a:
e2:06:82:fb:3c:fc:67:4c:ff:f7:92:ca:92:f5:0c:
59:bf:89:ec:cd:87:cc:72:bc:7b:ad:bd:bf:23:b2:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E4:E3:4D:AF:A0:43:69:F7:36:B0:20:1F:B9:62:75:20:DF:B5:3D
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8d:c5:01:bb:65:34:9c:67:a7:91:a3:0c:ac:d3:62:61:92:
fc:a9:45:ec:4c:c5:e7:1e:72:79:ea:cf:e0:48:b8:95:5a:68:
dc:c4:00:b2:c5:cf:fb:41:c2:58:ae:19:ac:35:50:3c:82:d5:
1b:04:ba:94:c9:88:da:f4:62:21:e5:37:58:9c:05:43:96:13:
b3:cb:6a:44:86:9a:32:92:13:73:59:54:b2:4c:52:c1:32:bb:
a3:85:99:4a:e5:92:d3:99:ee:c2:e7:5c:97:1a:89:94:4b:d3:
eb:20:32:d3:80:66:ca:92:5c:e1:ca:ba:99:2c:8f:19:61:a7:
7d:d0:81:90:03:87:e0:8e:dd:03:f3:da:6d:fb:9e:b5:9f:00:
6f:a5:f2:23:8a:a7:22:f3:ba:7c:5f:a2:57:48:c5:f8:99:37:
82:04:af:a5:f3:2a:3f:00:3c:7b:f3:92:84:d3:24:ef:14:75:
93:26:14:46:7d:6c:55:2a:c0:be:a7:a4:d6:a2:47:2a:05:2a:
46:f4:f1:49:57:5a:c1:0d:da:49:03:ec:db:8f:33:b9:24:fc:
10:79:63:bf:6c:65:9c:ad:8a:4b:ee:b2:8e:2f:a5:66:4c:39:
47:80:94:ce:6f:ec:b8:6f:92:82:c0:fd:3d:aa:73:0a:de:b3:
1a:33:97:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCF0+5Nd2xoGFrOMOwSzD7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy
ZjFkNWUwHhcNMjYwOTA5MTEwMDUzWhcNMjYwOTEwMTEwMDUzWjAzMTEwLwYDVQQD
EyhiZGU0ZTM0ZGFmYTA0MzY5ZjczNmIwMjAxZmI5NjI3NTIwZGZiNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgN4qNdQu54mxF4hpuXJ3y+LnAAk
yIOTPv9wnS8jtVzF0RmFFpnQfNwvh5nMPTQ688rLD1WipBw3faRNu+8CbSLFK7cs
Wr7hDGFRbuHNCAZ6jv5RJbIhI0BENBqPAbIVjsJ0RpFZyIiJ/ImaNBgibszgwZpz
DvWw3PZyKneE9W367cl+t1e0WVJz5/0tY2wdDQwWuwe7uLyfFUE5nl8FngYLvto6
nxiBiJKF9EScLgQh6OsKeqOBHV3iwbw5Zdcoh5Jmo8gbgXSeRJT0kugfGP6gbgMO
/hpZ47pRW/fZySriBoL7PPxnTP/3ksqS9QxZv4nszYfMcrx7rb2/I7I8ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3k402voENp9zawIB+5YnUg37U9MB8GA1UdIwQY
MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct
OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh
LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK43FAbtl
NJxnp5GjDKzTYmGS/KlF7EzF5x5yeerP4Ei4lVpo3MQAssXP+0HCWK4ZrDVQPILV
GwS6lMmI2vRiIeU3WJwFQ5YTs8tqRIaaMpITc1lUskxSwTK7o4WZSuWS05nuwudc
lxqJlEvT6yAy04BmypJc4cq6mSyPGWGnfdCBkAOH4I7dA/PabfuetZ8Ab6XyI4qn
IvO6fF+iV0jF+Jk3ggSvpfMqPwA8e/OShNMk7xR1kyYURn1sVSrAvqek1qJHKgUq
RvTxSVdawQ3aSQPs248zuST8EHljv2xlnK2KS+6yji+lZkw5R4CUzm/suG+SgsD9
PapzCt6zGjOXUw==
-----END CERTIFICATE-----
Generated at Wed Sep 9 17:25:21 2026 by rpki-client