Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: RR0d19qTv0VQwBKUWGSwbseUcyp2JQD4kcYERs3Lx/U=
Subject key identifier: A7:1A:A3:E3:45:66:7B:BA:FD:F7:3C:6A:B9:8E:F5:BB:CE:89:F2:35
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019D3789090385A4D2B0B629DADE56EF76DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0C62
Signing time: Sun 29 Mar 2026 03:00:20 +0000
Manifest this update: Sun 29 Mar 2026 03:00:20 +0000
Manifest next update: Mon 30 Mar 2026 03:00:20 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: P2Ci4p3k1ScpyPQnKQYys/+WD6r+MM2ObX858fGp+Lk=)
2: b5hEA0skW7XIPdQy24vlGY78QsQ.roa (hash: wOWtUPMhhEOhukktL5n5JA5DpIw7T84vi3SfnV7rzhc=)
3: wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa (hash: e7gIuzOOhyYERCBNmfCsDBCus3fRDqXK6S2fVbX8rlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:09:03:85:a4:d2:b0:b6:29:da:de:56:ef:76:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Mar 29 03:00:20 2026 GMT
Not After : Mar 30 03:00:20 2026 GMT
Subject: CN=a71aa3e345667bbafdf73c6ab98ef5bbce89f235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:77:ce:e2:0b:ea:b6:70:89:1d:03:e8:aa:
97:fb:8e:75:0f:68:f8:18:81:29:46:b6:f1:cd:71:
e7:25:2f:ee:6a:11:de:a1:f5:e4:4d:e2:7a:27:33:
2b:fd:36:d9:24:01:a9:08:80:31:82:7e:0c:1d:43:
c8:5d:54:20:04:6b:b4:9b:4b:59:71:7f:e5:da:f3:
89:4b:c4:e5:23:45:be:aa:db:fd:f2:05:2e:70:d3:
6d:d7:ce:5f:79:08:33:de:da:b9:16:85:95:0b:8f:
a5:9a:ee:33:ca:35:22:83:46:6f:cf:20:57:a3:96:
ef:7f:08:58:53:6c:ce:7a:7f:61:fe:6f:33:6d:db:
64:87:6d:e4:81:42:a9:fb:c4:c9:59:cd:3d:3e:f8:
b4:6e:db:ea:72:ef:15:7b:56:58:79:5d:e1:6a:3f:
02:53:e6:f6:9d:6d:a1:a7:6c:4c:b5:1c:d7:32:fb:
10:f6:f5:ed:c6:a8:7f:08:94:21:16:6c:95:74:d1:
c5:9d:2d:ce:14:13:e5:40:a1:4c:ec:7a:bc:fe:fe:
43:d1:f3:6e:6e:67:06:95:a3:bb:75:32:50:74:07:
59:01:50:0c:19:27:09:d2:a0:48:57:1a:2c:b6:e9:
e2:88:5a:c1:19:72:ca:ea:39:ec:6b:be:66:6f:73:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:A3:E3:45:66:7B:BA:FD:F7:3C:6A:B9:8E:F5:BB:CE:89:F2:35
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9a:a8:4f:01:4b:0f:22:11:e4:74:04:e2:1d:00:01:e6:d4:
e2:87:cc:48:61:44:39:f5:33:42:6b:e2:b7:69:82:9b:b0:af:
4c:ff:aa:be:fb:4c:68:55:25:a4:84:92:a2:83:9f:86:13:09:
33:20:0e:82:55:ee:c2:4a:d2:a5:9f:94:1e:07:aa:33:93:87:
6c:e0:03:f0:d6:29:ae:c7:89:09:37:6e:04:a3:d8:3a:ec:e9:
ca:39:70:86:92:1a:9e:84:ea:51:57:69:f2:62:1f:57:1d:52:
da:57:ad:e8:aa:8b:bd:fd:16:8a:84:25:6b:c7:07:fb:f2:82:
dd:66:9a:bb:bc:7b:d3:7b:ca:4b:b0:d8:aa:18:73:15:11:e7:
e1:d8:8c:b4:1c:59:d5:7d:59:0a:f4:37:c7:c9:e5:92:1a:d8:
a4:08:91:40:78:ff:5b:08:85:4e:8e:c4:8e:86:54:98:d1:fb:
5d:5c:6b:c6:aa:87:d4:27:af:82:a0:78:57:d2:b2:92:c0:06:
f2:a8:53:62:c2:53:48:a3:45:30:ae:17:a1:c7:dc:6a:63:32:
72:bc:95:f4:a6:dd:39:6d:eb:7e:1a:05:15:b8:e0:52:ae:67:
23:f2:19:32:1a:d3:21:5e:93:c4:f4:4a:69:0e:5a:b6:ca:3b:
52:95:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:23 2026 by rpki-client