Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier: AfJ84N3Ooa5msot5LZEaCGdMFaG35AYofPEu5nkzOuo=
Subject key identifier: 52:F7:B4:56:EF:40:02:9C:8A:F5:5E:B8:7E:47:EB:0C:FF:EA:3D:68
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial: 019D38D31EA2DCF21F389772B612C3EAE49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: BrZeWnZmC5Yw11nXyPp7DFNUBPVN7nWQa0jn8MuVcmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1e:a2:dc:f2:1f:38:97:72:b6:12:c3:ea:e4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=52f7b456ef40029c8af55eb87e47eb0cffea3d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:34:6d:f4:31:b7:66:08:81:bd:7a:cf:99:
0c:c4:96:80:d9:5a:c4:df:b6:2b:34:fa:8a:db:04:
58:fa:1d:27:7b:2e:38:db:2e:f9:bd:8e:de:df:49:
02:c9:a2:47:0c:eb:83:b0:c2:2d:2c:ec:e0:2e:99:
89:b3:94:52:d7:6b:f2:78:9e:51:cb:ec:2d:4c:7c:
a0:f9:02:b2:0d:70:5a:78:e0:d9:fa:de:c5:7d:d3:
44:7a:83:c6:63:a4:d2:a7:ae:b9:88:e0:d4:f7:cb:
ef:c2:62:cc:42:51:d4:83:4f:5e:ca:04:e2:f7:f3:
a9:0d:96:1c:f0:da:35:76:f8:2b:6f:59:36:7b:70:
71:33:17:8f:50:8c:c9:8e:ad:d3:24:50:ac:d9:5a:
a8:3f:c1:c0:9f:1b:7c:52:25:48:e8:67:51:fa:f7:
15:ce:0c:94:c1:1e:ac:98:53:62:8f:b9:29:a7:48:
43:e4:82:cc:0e:69:a1:a8:a7:a0:aa:c5:15:78:4c:
8d:92:f2:a6:8f:f1:17:35:c1:db:55:dc:ec:4f:21:
7c:9e:19:c6:19:47:b4:a5:61:d0:49:ab:dc:99:d5:
91:c3:94:5d:82:75:13:54:79:3a:fe:5c:23:4c:44:
6c:f6:39:19:24:06:e1:1e:54:02:c2:fe:fa:88:ea:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:B4:56:EF:40:02:9C:8A:F5:5E:B8:7E:47:EB:0C:FF:EA:3D:68
X509v3 Authority Key Identifier:
keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:25:a7:51:d3:11:57:22:d0:1e:c8:7f:05:a9:46:fe:b7:99:
5e:03:bc:0c:21:0d:d1:d3:5b:31:4b:c5:c3:39:42:05:d0:c3:
f7:ee:1e:74:d4:54:c8:f7:26:98:91:b0:5a:1b:ba:89:7e:23:
9c:84:b8:b0:07:e1:ef:8a:b4:4a:5e:12:db:8f:11:c4:ee:f9:
80:32:35:f0:d9:09:6b:28:93:7c:6d:94:9e:f9:e8:f3:7a:fe:
ab:60:f4:2f:6b:d9:dd:63:22:22:df:31:09:af:6d:9c:3c:de:
77:b5:05:d0:62:a4:c8:c3:5c:e5:ba:25:d4:ed:68:1a:52:e9:
e7:6a:b0:66:74:ae:b3:c8:73:dc:62:f2:aa:ba:70:e8:cb:1e:
6b:5c:97:86:64:a6:f5:2c:25:bd:f3:be:e6:02:5a:37:91:51:
a4:20:9f:4e:60:be:60:48:44:b7:fb:c5:8d:24:6f:97:21:cc:
89:c3:79:58:2b:e1:76:d3:5a:45:68:56:73:36:ac:47:03:6d:
5b:d4:d8:43:ab:9b:4c:4c:4b:4d:48:35:50:f9:32:4a:fd:0d:
3d:91:d5:13:aa:5b:4d:a4:1e:bb:85:72:71:26:16:b4:07:2a:
1c:8b:be:3e:70:f2:5d:18:45:c6:d4:b4:f0:d5:f9:af:a1:4a:
86:18:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:55 2026 by rpki-client