Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: d46fuEmZJ6XbFMc6/+3X3qwwHdxUalVkDe55qVovioI=
Subject key identifier: 3A:92:92:13:35:A9:0F:85:89:98:52:CC:7B:FB:D6:15:19:7E:CB:81
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019FB052C96ECDDD612BDCF13FEF1F624702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1775
Signing time: Thu 30 Jul 2026 00:00:43 +0000
Manifest this update: Thu 30 Jul 2026 00:00:43 +0000
Manifest next update: Fri 31 Jul 2026 00:00:43 +0000
Files and hashes: 1: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: MPDqEXLv1fxQTUA9zJnAbHoJPeO7j57jKYwg6DtGzWo=)
2: W8EXtY-krtG948bMW6fNLmFvObQ.roa (hash: /Mw8ZZAkQ7Cam52nmslN8jl5Gh3RIhYdhuibTCP4pNc=)
3: hsUdN5AH-_WZM1oy6ZaXEs1Pgkc.roa (hash: 5DMQKgnCdfv9+elfbQuigH3vAHijYLKsjKk2UMsJGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 21:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:52:c9:6e:cd:dd:61:2b:dc:f1:3f:ef:1f:62:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jul 30 00:00:43 2026 GMT
Not After : Jul 31 00:00:43 2026 GMT
Subject: CN=3a92921335a90f85899852cc7bfbd615197ecb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:9c:f5:ad:2c:31:4c:94:de:97:d0:0a:af:
5b:4e:42:a2:ee:d4:24:0a:de:c2:db:1e:07:85:ca:
e8:27:f1:3f:99:73:1d:1d:b1:79:8b:1d:3a:27:c9:
07:0d:fa:b4:bc:7e:6e:5a:67:89:90:aa:a6:46:11:
41:ff:8f:ac:32:9f:69:dc:eb:40:49:9f:a9:9c:53:
69:12:20:bd:b7:fe:b6:53:58:8f:f9:7e:08:92:92:
f1:73:3f:d2:de:ba:53:35:8c:ae:6d:c6:09:9a:55:
f3:cb:d2:82:3b:ac:2a:9d:6f:96:c8:cf:01:08:56:
e5:7d:cd:0f:49:b5:be:af:f7:95:bf:83:a0:b7:3e:
23:61:94:7c:1d:43:80:71:e2:d2:bc:1c:76:0c:15:
03:21:3c:13:b8:83:2f:bf:98:d5:64:a7:1d:1a:88:
de:ae:55:d9:74:ac:96:1f:66:b3:e6:12:91:4e:6d:
dd:63:cc:12:23:5e:aa:46:01:88:3a:37:35:dd:ed:
c5:19:61:a1:0c:ed:13:3f:c9:78:e9:2f:6f:07:14:
93:7e:fe:44:0b:1a:91:59:73:e8:a0:34:c6:0d:31:
59:70:4c:93:c4:22:23:85:da:b2:8b:85:96:f7:9e:
48:72:d7:6f:5f:a6:c5:5b:ae:21:eb:59:63:e3:91:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:92:13:35:A9:0F:85:89:98:52:CC:7B:FB:D6:15:19:7E:CB:81
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:e1:33:3e:a4:f0:90:e6:f5:a5:cc:72:ab:9d:3d:c1:ca:
75:b2:04:03:2f:a9:14:53:53:0c:24:28:7c:a6:4b:53:ca:37:
b7:8c:c3:e6:28:9a:34:e4:05:73:4e:77:a4:78:04:c4:83:6b:
c9:98:0a:a6:2d:8b:30:25:3f:75:05:b7:16:e7:7d:8a:7f:d4:
9b:32:c6:59:9e:75:56:6f:79:bb:ea:05:93:f8:13:d0:61:bb:
de:f4:a2:ea:c3:bd:68:7c:37:8c:11:e9:de:ce:15:0b:39:5c:
9d:22:7d:fe:cc:41:b5:5e:30:be:a4:a1:87:1a:7f:9e:17:74:
ae:2c:d2:32:95:0c:e5:32:91:fb:3a:cb:1a:82:1c:b3:6f:2a:
e7:5f:ee:22:2a:a3:9d:e0:79:ff:8c:af:ca:8b:71:8d:30:56:
6c:40:6e:67:2e:16:0f:80:27:84:a6:4d:75:6a:76:0f:72:33:
20:ee:f8:5a:46:1b:10:93:2f:bd:f8:84:4e:31:73:48:d6:c2:
bf:0b:92:01:bb:84:d9:ac:b7:ac:b1:c0:2a:30:76:92:36:bd:
de:8b:e0:1c:54:cc:5f:74:7c:29:08:5c:83:b1:1a:c9:93:1b:
1f:9c:d2:20:e0:2e:76:a2:d4:e9:e6:07:c7:64:3a:0a:7d:5b:
3a:d5:ca:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:49:01 2026 by rpki-client