Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json)
Hash identifier: 4vHT7ZeP5hMSPTNEwbQYaueQOdDDixcqhQ1UPOnA7Ts=
Subject key identifier: 38:39:CB:57:B3:FB:A6:C6:73:35:E7:E4:93:34:34:94:BF:57:86:26
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 019D371B65242E72157B7CD5EE543E255CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
Manifest number: 0FA4
Signing time: Sun 29 Mar 2026 01:00:35 +0000
Manifest this update: Sun 29 Mar 2026 01:00:35 +0000
Manifest next update: Mon 30 Mar 2026 01:00:35 +0000
Files and hashes: 1: 135bFZLoopnIepwNcNi6B_e5Go8.roa (hash: exHBkaVEfi0kzao9gSKTmFTCSigZ4hNeMaSzc8f+Tpg=)
2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: 8sgaxWMbAz7YwB9HeJqalQfKJPAfUaQh6vqFU8+3wUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:65:24:2e:72:15:7b:7c:d5:ee:54:3e:25:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Mar 29 01:00:35 2026 GMT
Not After : Mar 30 01:00:35 2026 GMT
Subject: CN=3839cb57b3fba6c67335e7e493343494bf578626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:7b:6f:96:ba:90:dd:52:a4:8e:0b:ad:63:
aa:8a:f4:9b:31:5e:31:a3:59:c2:60:8a:7b:3f:7e:
ca:94:2d:26:ac:79:ab:a1:e8:f7:c6:36:02:b1:4d:
4a:2a:90:ff:1d:34:d4:4c:17:db:98:8b:c9:f3:7f:
aa:39:25:70:01:c4:57:44:ff:72:67:b6:19:b3:3f:
30:e6:88:ac:23:a3:a2:be:a9:42:a2:fa:2d:b9:7b:
b4:88:c3:dd:82:0e:ad:2c:6a:cc:95:e8:dd:bd:e0:
a6:6b:b8:df:4b:4d:73:e3:d8:ab:4b:f4:aa:6b:9c:
7e:4c:76:5c:94:6e:37:83:4e:a6:a5:28:e6:9e:99:
57:e1:8a:98:2e:e5:2f:12:ad:a2:a0:de:cb:03:3b:
d1:4f:28:16:cf:1c:54:2c:6d:19:9f:78:83:f3:9f:
da:b7:78:97:da:60:0a:d3:91:fb:4f:b5:41:a4:75:
f3:7a:7b:82:52:48:6f:cc:94:9e:d7:82:4d:41:e4:
64:40:8f:2b:5f:cf:3d:64:89:7b:c5:e2:19:9f:76:
ba:60:3d:a5:c4:67:6b:e2:0b:ff:73:5c:f9:f5:f5:
f6:c2:75:e7:10:1f:b9:1c:66:f3:07:02:3b:07:ac:
88:28:cf:11:7e:00:cf:69:61:d9:ae:ba:19:77:89:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:CB:57:B3:FB:A6:C6:73:35:E7:E4:93:34:34:94:BF:57:86:26
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2c:39:d9:bf:63:d3:8c:69:f4:0a:78:c4:94:b0:fb:4e:45:
ea:f7:5f:40:5f:90:65:de:68:4b:8d:ae:91:93:aa:99:2c:98:
4c:7f:65:d9:c7:88:ca:1c:6f:4e:0f:1b:15:fa:da:70:50:f1:
df:44:8c:a4:28:6c:8a:b9:ab:c9:91:80:2b:af:56:31:b7:c8:
ba:c0:31:ec:18:ac:b8:25:8c:33:35:c2:03:2a:92:38:2e:09:
ca:73:59:86:df:6b:71:e5:64:d4:97:fc:f9:25:dc:7a:11:0c:
5e:0d:7b:7a:fa:d7:fc:81:ac:ac:0a:ef:84:e6:76:7a:87:ae:
99:b2:b6:d0:16:f0:ae:20:6b:ba:b6:12:2e:da:8b:ba:f7:7f:
e4:13:0a:98:c1:dd:a7:bc:60:6f:0f:5d:c3:f7:a1:9c:bf:82:
6a:a3:57:c7:ab:f1:76:99:49:c1:8f:06:3a:3c:39:71:39:4b:
b4:35:06:5c:7f:73:36:b0:df:e2:7b:35:38:a9:dd:ed:d6:6d:
bd:7e:76:1b:80:f1:1c:d3:9e:54:4b:8c:86:f0:b1:62:f1:98:
18:a7:35:d8:e4:87:ed:ac:3d:b3:f2:1a:2e:95:9b:f1:3d:87:
79:8b:9f:10:7e:b5:84:03:c9:3d:b9:1f:5d:76:bb:8a:4a:55:
1c:47:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:02 2026 by rpki-client