Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
File: MK7HNts6BEOzui_FtKQkWG-0zhU.mft (raw, json)
Hash identifier: fN1R7KslpPS3Ae5xLHePmQJSmPe4pX9z41mu1GXKUnA=
Subject key identifier: EA:06:9B:0C:DF:F3:28:01:58:5A:9A:A6:81:8C:35:59:4C:85:08:89
Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
Certificate issuer: /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Certificate serial: 019D382E46C90C86EA1843515641F9BA894A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
Manifest number: 01AA
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: 3tQLmVymoZqw7VQrq9obl-zIU9Y.roa (hash: UW5r9uI28BmP8sjp5a0mYV+U1btRYcKpVFrYo4A53mM=)
2: MK7HNts6BEOzui_FtKQkWG-0zhU.crl (hash: Jye4sgcYUMgcYDLCOfWQ3BXdgLLOt0S6AvVLOcG9BYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:46:c9:0c:86:ea:18:43:51:56:41:f9:ba:89:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=ea069b0cdff32801585a9aa6818c35594c850889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:86:95:a5:63:33:af:1d:01:88:af:b1:29:
37:a0:fd:5e:03:20:a0:56:a3:5f:88:14:81:fa:60:
2d:0c:d5:79:ff:cd:8b:4b:a8:9b:39:15:f7:41:8f:
fb:07:e6:0a:f7:2e:e8:21:d9:f2:fb:da:0a:c1:f9:
bc:01:3d:ef:2b:b0:e6:09:ed:64:d1:d9:b1:71:9e:
4e:7e:5e:db:a5:6f:32:ee:5c:54:3a:ec:2f:b6:d6:
57:bd:27:cd:0b:5c:75:41:89:b2:fc:c1:d8:b6:55:
1f:f6:5c:2c:fa:42:18:b5:47:60:20:bf:04:a1:98:
b9:92:2c:fc:ff:08:82:0b:1d:95:5c:31:02:21:e4:
d1:ee:cd:64:d4:33:e8:05:26:db:1e:09:7c:09:27:
a2:07:8a:d1:13:cc:c1:59:c0:05:56:24:a5:a9:6e:
a5:31:c4:f6:f5:c9:4a:60:2f:cc:3f:2b:c5:91:eb:
51:68:b6:4e:10:0f:ae:e5:99:82:7e:06:e9:78:cd:
7e:cc:0a:c7:13:6d:23:c0:8e:07:ef:3a:e3:69:5e:
7b:9d:55:3b:96:84:6d:06:2b:b8:74:7d:ae:18:d9:
97:10:2b:53:2f:df:85:ca:67:c9:89:54:ca:61:6d:
0c:f0:94:a5:08:60:e8:30:0f:76:d3:29:6f:42:14:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:9B:0C:DF:F3:28:01:58:5A:9A:A6:81:8C:35:59:4C:85:08:89
X509v3 Authority Key Identifier:
keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:71:37:88:64:94:5c:fc:cc:73:ff:e6:6e:a0:7b:63:24:11:
23:1c:7e:86:3b:1b:2c:98:63:1a:46:33:d3:a8:ce:97:26:31:
49:48:6b:fa:42:80:e2:80:f6:13:08:63:fd:32:75:26:e7:87:
81:e4:b4:80:e8:68:0c:09:ae:0b:7f:48:7d:24:5e:3d:c0:9b:
b0:45:b6:f0:18:6e:9a:0e:a8:f9:a0:9d:92:78:20:fa:9e:79:
bc:38:3e:81:77:31:6e:51:30:f1:00:35:68:83:c0:5c:6a:ca:
90:0e:dd:1e:7e:f8:dc:46:15:59:0e:4f:60:03:4e:59:de:52:
81:55:2a:4a:7c:7d:29:78:f1:0d:c3:d6:f2:73:3b:3a:da:48:
92:8b:05:ba:96:c0:5e:98:75:52:ae:d8:24:9c:77:fb:e1:1a:
3e:9e:ec:ff:15:8f:10:89:f1:85:6a:27:b5:3f:0e:60:c7:51:
34:e5:31:37:9d:f9:3b:06:ca:95:03:af:40:11:c2:32:e8:8d:
c5:99:91:41:5a:65:ce:be:ba:88:2a:b7:9d:3d:47:49:54:c0:
3e:16:d7:c1:3a:91:37:fe:19:e1:4c:31:31:bc:5b:7a:41:ab:
3f:8c:fd:5e:01:45:f6:1e:bb:da:43:40:c4:b8:73:67:28:ac:
98:f7:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:30 2026 by rpki-client