Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: rG2WOnt5dxeG4YR4iopxBk05oWzzptxZot/nF7gLaoU=
Subject key identifier: 50:45:C3:8B:36:F9:A6:EB:01:6A:3C:30:56:17:14:76:10:80:CF:F3
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019DDEE89B691908B38475986014A42F37D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1684
Signing time: Thu 30 Apr 2026 15:01:19 +0000
Manifest this update: Thu 30 Apr 2026 15:01:19 +0000
Manifest next update: Fri 01 May 2026 15:01:19 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: 3Cas8w4tj/3lxztqhmNHwfa8Z7Vri7DTK3m6ZGbYnvE=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:e8:9b:69:19:08:b3:84:75:98:60:14:a4:2f:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Apr 30 15:01:19 2026 GMT
Not After : May 1 15:01:19 2026 GMT
Subject: CN=5045c38b36f9a6eb016a3c30561714761080cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:b1:3a:06:5a:c6:76:d3:e3:83:8a:ac:69:
23:ec:b1:5c:9a:86:da:81:39:cd:4d:fd:3a:d2:d9:
fb:b2:45:19:17:7b:47:87:56:48:a5:ec:9b:11:05:
19:c4:f8:a3:55:da:c0:82:ba:5d:f6:66:2f:f5:ff:
01:25:86:da:4e:62:d8:a2:f6:11:10:97:3e:54:56:
d8:2a:af:62:dd:09:95:78:92:2e:59:e0:a5:8a:51:
b0:68:dc:83:a0:5d:94:83:c4:0c:bb:1f:b4:5d:f6:
c8:2d:98:ac:1a:75:3b:1c:f4:a4:9e:fd:93:9e:89:
29:d1:8d:9d:09:b0:a6:67:d0:d1:24:2d:1f:3c:95:
67:0a:63:c5:7b:c5:cd:be:25:a0:5b:45:42:9e:e4:
40:d1:b5:bf:71:6d:88:54:25:74:23:eb:c0:1b:97:
21:08:ea:8d:11:2f:3a:d8:93:03:67:c8:33:69:58:
94:8e:84:48:9e:d8:87:cc:e7:02:98:34:78:0e:c6:
f0:d8:47:19:37:e1:4f:c0:75:85:e1:98:41:60:c6:
7b:f4:18:00:08:63:44:e7:dd:42:33:a6:61:a6:bc:
82:54:fa:d6:6e:e2:48:82:f3:91:61:21:2e:da:2b:
99:da:eb:7a:95:9f:58:93:b4:83:d2:8e:b3:b8:26:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:45:C3:8B:36:F9:A6:EB:01:6A:3C:30:56:17:14:76:10:80:CF:F3
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:75:91:51:35:5f:ad:64:a3:73:e3:1b:e9:02:19:54:d9:9d:
10:c4:a3:0e:a8:52:6f:2c:80:6b:f1:ef:97:40:70:35:97:01:
bf:a7:60:bc:00:2b:d5:10:65:53:0f:d2:cb:38:2e:ed:f9:b2:
5b:d7:94:00:6f:11:a2:e3:b3:1d:bd:29:2d:cc:d3:9f:7b:e2:
df:32:64:f3:ec:c9:12:e1:30:fc:d0:e7:95:e3:29:34:2f:e0:
ad:0f:6d:34:08:90:b2:e7:47:70:2d:19:66:30:b5:97:8b:0c:
61:84:8c:e7:df:4d:6a:ab:3c:2b:38:da:39:f6:36:56:dc:2c:
35:84:4d:15:7f:33:10:50:01:f6:eb:70:ad:c1:34:35:3c:3f:
17:7a:47:e5:f7:e3:83:6b:b5:5c:08:1c:b7:69:f5:2e:36:c2:
28:7e:bd:9c:56:ab:d7:c2:42:dc:3d:bc:7e:23:c9:c0:6e:b7:
47:5f:93:ed:9d:26:9e:bb:61:b3:70:31:8a:7b:f5:8b:9f:fe:
a6:5c:c3:0f:6c:08:17:ed:6a:2e:06:42:59:96:f3:d8:f4:52:
a1:a8:33:2d:9a:57:98:59:e9:30:c8:9a:bc:ce:ac:ba:44:10:
dc:1c:93:bb:aa:bb:86:3a:a2:f6:a6:18:79:d3:6f:34:7e:37:
77:93:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:29:25 2026 by rpki-client