Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: KY21zMw65TZEEbPKiQGaimm3JZvVspxZXMtvOYHcALk=
Subject key identifier: A4:3F:44:4E:71:E2:32:90:A9:34:6A:EB:88:32:A5:DB:3C:29:E2:09
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019D37C09D88B6B89D5862DE88CEF3D07A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: vnXl29IJn3n1Hd7q8eDTTqlTqQu8xUCVyS8qnazUFog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9d:88:b6:b8:9d:58:62:de:88:ce:f3:d0:7a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=a43f444e71e23290a9346aeb8832a5db3c29e209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:56:42:f1:bd:7b:bb:9e:fa:c1:9a:d5:52:
d2:e2:4d:17:37:c6:22:bd:3b:b7:5a:cd:30:19:3a:
19:d9:b7:77:a1:9b:41:76:7a:cd:b0:8e:f3:c9:51:
58:ab:5b:f3:27:8b:fe:5e:59:f0:e2:2d:be:de:98:
ae:e9:0f:8e:46:be:70:4f:3d:ed:54:c1:98:bb:cb:
bd:d2:6a:1d:ab:64:af:75:7d:0b:88:3d:41:93:6e:
eb:ce:4c:ec:b5:52:4e:d7:66:b9:10:3e:f1:05:82:
0c:1d:02:e8:d1:97:22:36:a9:71:9c:0c:07:f1:bf:
ff:44:e6:39:56:ec:0b:fd:d3:0c:fa:fc:61:ed:19:
d7:7e:2e:86:f7:9c:36:e5:e8:53:da:d6:de:9f:59:
59:69:93:6c:44:a4:40:25:7d:25:87:39:89:9d:2d:
bc:aa:45:a7:8b:81:d3:c1:d7:00:42:fb:29:ce:14:
21:fb:37:c5:5a:9b:a2:a1:2f:eb:7f:e3:8b:64:fe:
ea:d2:b1:c6:21:87:5c:92:3d:89:d3:08:4f:46:9e:
a2:90:20:aa:5d:50:cc:ba:02:07:bd:e8:fb:64:81:
76:7f:8b:50:15:59:a8:91:9c:24:5d:39:c1:26:5f:
2f:7d:00:89:7d:fc:c1:14:20:be:5f:1d:d3:c5:79:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3F:44:4E:71:E2:32:90:A9:34:6A:EB:88:32:A5:DB:3C:29:E2:09
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:2f:fe:99:6e:90:0d:e7:08:be:5e:0b:d9:bb:55:34:88:
d0:6c:a2:40:8f:ec:c3:ee:07:14:16:2f:5e:d1:68:14:23:2d:
16:bc:07:2a:9f:69:b1:27:ce:09:b6:d5:c8:11:48:d9:21:23:
57:74:32:89:db:68:44:ea:1d:9d:b7:fa:36:ca:68:64:6f:45:
8b:d3:17:92:03:93:7a:d4:a8:68:66:62:c5:fd:d2:40:37:d3:
03:31:55:65:7a:e8:c4:cc:91:67:6a:24:b6:4f:06:41:e0:5a:
c6:4c:b1:fe:41:c3:29:ca:8a:e1:7e:23:77:d0:6e:7d:df:6a:
40:dd:b0:9d:b4:e9:f5:8f:62:89:7b:da:dc:ac:54:12:00:e9:
9b:f4:aa:09:48:fb:e4:8e:b7:f1:ba:d6:2b:fc:75:ab:d8:21:
e8:f7:ca:d3:01:21:36:6d:e3:1f:f1:e2:ca:15:2d:43:ec:cc:
34:04:fb:ff:7d:ce:5f:ca:cb:f3:2f:e5:11:b4:d5:7c:ee:96:
8c:46:11:f5:bb:bb:ed:ac:e0:75:21:aa:88:a4:2f:5d:50:90:
1c:0d:d5:54:d0:83:ad:0d:77:e3:cd:27:b0:59:d4:62:22:e8:
cf:4c:96:ce:41:58:90:93:92:1f:a4:7a:25:84:07:2b:ec:35:
a0:60:1e:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJ2ItridWGLeiM7z0Ho9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTljOTU3ZDIwOTFkMjRlMGRmZTVmNjZjOTdiZTRhYTFm
OTMwODQwHhcNMjYwMzI5MDQwMTAzWhcNMjYwMzMwMDQwMTAzWjAzMTEwLwYDVQQD
EyhhNDNmNDQ0ZTcxZTIzMjkwYTkzNDZhZWI4ODMyYTVkYjNjMjllMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyxWQvG9e7ue+sGa1VLS4k0XN8Yi
vTu3Ws0wGToZ2bd3oZtBdnrNsI7zyVFYq1vzJ4v+Xlnw4i2+3piu6Q+ORr5wTz3t
VMGYu8u90modq2SvdX0LiD1Bk27rzkzstVJO12a5ED7xBYIMHQLo0ZciNqlxnAwH
8b//ROY5VuwL/dMM+vxh7RnXfi6G95w25ehT2tben1lZaZNsRKRAJX0lhzmJnS28
qkWni4HTwdcAQvspzhQh+zfFWpuioS/rf+OLZP7q0rHGIYdckj2J0whPRp6ikCCq
XVDMugIHvej7ZIF2f4tQFVmokZwkXTnBJl8vfQCJffzBFCC+Xx3TxXkmrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ/RE5x4jKQqTRq64gypds8KeIJMB8GA1UdIwQY
MBaAFDCpyVfSCR0k4N/l9myXvkqh+TCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQt
ODRiZjMxZGU4NDEzLzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy84MTJhMTUtYzZlNC00MTZhLWIwOWQtODRiZjMxZGU4NDEz
LzEvTUtuSlY5SUpIU1RnMy1YMmJKZS1TcUg1TUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY0v/plu
kA3nCL5eC9m7VTSI0GyiQI/sw+4HFBYvXtFoFCMtFrwHKp9psSfOCbbVyBFI2SEj
V3QyidtoROodnbf6NspoZG9Fi9MXkgOTetSoaGZixf3SQDfTAzFVZXroxMyRZ2ok
tk8GQeBaxkyx/kHDKcqK4X4jd9Bufd9qQN2wnbTp9Y9iiXva3KxUEgDpm/SqCUj7
5I638brWK/x1q9gh6PfK0wEhNm3jH/HiyhUtQ+zMNAT7/33OX8rL8y/lEbTVfO6W
jEYR9bu77azgdSGqiKQvXVCQHA3VVNCDrQ13480nsFnUYiLoz0yWzkFYkJOSH6R6
JYQHK+w1oGAevA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:04 2026 by rpki-client