Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
File: MtYmm4lSBJZffsl_Gdi12ckwt40.mft (raw, json)
Hash identifier: JHeSRZ5voCdy1NHl0A61UnX+1WtF97KW7pz/SgeEK4c=
Subject key identifier: C9:CF:10:53:0F:18:8A:57:8D:87:3B:C1:B5:30:15:57:59:ED:77:77
Authority key identifier: 32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
Certificate issuer: /CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Certificate serial: 019D382E58C8B62E3360FD8772F9E8BE1FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: MtYmm4lSBJZffsl_Gdi12ckwt40.crl (hash: G770iOXp+h19w2SttAyOs3mUOJo5QoNkNm1E3yzApC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:58:c8:b6:2e:33:60:fd:87:72:f9:e8:be:1f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=c9cf10530f188a578d873bc1b530155759ed7777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:33:26:27:6e:c3:83:d0:0d:95:f1:52:b1:
49:2f:ec:89:8f:97:7c:44:83:b0:ad:e5:27:29:39:
2c:c4:25:5c:c7:91:4c:1a:7d:38:a6:eb:ba:68:c0:
43:92:3b:e6:04:9a:8d:91:be:6b:16:bb:d3:d6:96:
f7:c9:74:0d:c6:3c:61:fc:22:7e:fe:3e:68:5e:42:
c1:7e:c1:de:61:3c:74:a2:27:a0:ab:9d:3d:24:e6:
a6:7a:87:e9:f1:12:bc:2e:8d:1e:fd:cc:29:c6:e8:
5e:98:6c:86:39:fb:91:53:06:3d:5d:11:3d:89:df:
72:74:06:52:76:41:62:28:b9:86:c5:e9:82:5f:5a:
10:b8:90:bf:c9:2c:48:e3:c1:92:a9:44:1d:69:33:
da:0e:ff:db:7f:09:43:98:2f:c0:ea:ea:ff:ab:5d:
81:bf:d9:d8:da:8b:08:fc:02:17:f9:63:f1:36:29:
b3:76:83:06:9a:22:6f:3f:8f:22:c7:28:33:43:89:
31:68:28:f0:bc:80:a9:e5:d0:61:6c:68:e7:62:a8:
91:41:d3:cb:5c:76:fc:cc:48:15:f4:ea:6b:fd:ef:
77:aa:ce:42:40:55:57:f7:16:69:22:2a:66:12:23:
f5:e8:3a:a1:b9:7a:26:a6:57:cc:fe:7d:a1:6e:45:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:10:53:0F:18:8A:57:8D:87:3B:C1:B5:30:15:57:59:ED:77:77
X509v3 Authority Key Identifier:
keyid:32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5a:82:a3:1e:b2:d0:3b:91:3e:0e:b6:a9:74:3e:c2:c2:a3:
7d:fe:f8:12:39:94:33:49:96:23:d3:9a:28:4e:76:4e:2f:37:
2d:32:3c:05:14:57:43:47:89:17:4f:d5:7c:4e:39:02:91:4b:
5d:a5:2d:eb:a5:11:a5:44:65:45:ff:c2:af:a7:87:19:6b:df:
95:b8:4d:b1:21:d4:10:11:db:12:9c:fc:9b:ae:06:4e:42:5f:
2f:9d:c4:89:88:62:6e:ce:52:37:e8:54:4f:ee:71:33:51:96:
1a:c0:4a:85:47:b9:cb:c2:59:0a:e3:bf:00:fc:e5:10:a8:da:
2f:9c:03:d1:46:48:1d:40:d4:ca:34:47:ce:e8:d6:dd:2c:4e:
b5:da:75:a0:3d:2c:2e:57:1d:04:a8:70:23:54:4a:29:2c:f8:
f8:b1:8a:81:a7:35:84:88:19:11:ee:ce:ae:b2:91:f8:e9:9a:
84:3a:00:1d:0a:45:0a:18:71:e4:e8:a4:56:25:8a:57:0a:1f:
ca:1d:1c:96:b6:97:3f:87:2f:49:ed:ff:f3:d3:76:b7:68:16:
d9:f7:41:ac:1c:16:06:85:ae:a4:46:8e:28:57:2b:70:21:4c:
dc:00:57:02:7c:00:23:80:d9:2e:6b:77:87:ba:63:af:b4:64:
10:4d:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:32 2026 by rpki-client