Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File: MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier: UEH5sRdbQfxEU9A5wuYAlH2HjtLhfNSSY5dWkFQakDw=
Subject key identifier: 57:11:C1:E7:A1:AB:6C:E5:60:E8:C0:05:7D:F9:94:DF:A8:83:B4:DF
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer: /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial: 019D3A1C51EA2A27305659CF823A08C3AB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 15:00:27 +0000
Manifest this update: Sun 29 Mar 2026 15:00:27 +0000
Manifest next update: Mon 30 Mar 2026 15:00:27 +0000
Files and hashes: 1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: YYATzuTgieDJdtovVMjwhU08MMfm/jyaxPIDhGMExdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:51:ea:2a:27:30:56:59:cf:82:3a:08:c3:ab:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Validity
Not Before: Mar 29 15:00:27 2026 GMT
Not After : Mar 30 15:00:27 2026 GMT
Subject: CN=5711c1e7a1ab6ce560e8c0057df994dfa883b4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:76:98:a4:8f:a1:d2:65:62:1b:16:9f:23:
4d:77:d6:bc:04:83:1c:a3:bf:fc:f8:3c:af:7a:48:
ac:a3:aa:1e:8a:1a:03:86:ca:2a:2e:90:c8:23:0a:
c8:8e:b0:49:cb:ae:64:82:63:2c:28:44:ae:1e:a2:
8c:a9:51:f5:b6:69:3e:d8:40:00:87:3a:b0:34:c9:
cc:a1:8d:75:da:c0:3d:05:a1:f9:eb:9e:69:b8:48:
d1:77:6e:4b:61:1d:71:45:33:e0:b5:d4:40:83:1d:
74:7b:10:9a:8e:b2:de:b7:ab:ab:93:82:69:f0:4d:
c2:11:f8:3d:ca:7a:ad:03:78:00:20:ec:20:20:f8:
b2:45:29:8f:3a:5c:61:df:af:4b:45:85:69:35:fc:
11:cf:a3:62:9c:eb:c1:6d:83:bd:b0:af:ab:8d:8d:
7d:8d:22:a0:69:f7:b0:cd:2f:97:f9:ba:7c:5d:53:
55:85:5a:f0:b0:57:12:9e:ee:8f:57:7e:fa:be:1c:
d4:f2:e3:7d:7a:20:a3:d9:4a:15:fa:a9:55:aa:36:
09:9d:b8:66:7a:29:b2:33:80:24:41:3d:0a:26:2a:
94:8d:c5:4f:5f:49:45:9c:d3:bd:45:e2:89:e9:d0:
4d:ff:b9:3d:99:4e:1d:49:58:66:f3:f4:85:00:3c:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:C1:E7:A1:AB:6C:E5:60:E8:C0:05:7D:F9:94:DF:A8:83:B4:DF
X509v3 Authority Key Identifier:
keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6d:b1:14:72:74:7b:7e:3f:89:0b:b3:1f:62:fc:c8:46:c5:
45:be:de:b9:23:6c:5c:2b:fd:75:c3:ac:56:66:f4:ec:bc:41:
03:db:a1:57:db:65:e4:6c:0b:00:f1:ca:e8:80:0d:7b:89:ac:
b8:9d:07:b3:f5:52:91:60:8e:c0:b8:be:9f:02:ba:ac:21:bc:
8b:b4:6c:d9:58:9b:6c:91:ff:4b:72:89:94:c9:98:11:20:c0:
37:3f:3f:0a:34:63:35:f1:82:06:f1:b3:09:aa:bd:60:b0:6b:
5e:51:44:87:6c:ec:58:f2:46:13:d6:85:3f:5f:32:2d:4e:94:
71:5d:a2:f2:2b:95:8e:4e:db:ec:8c:60:4d:88:33:f0:41:7b:
11:f7:8f:03:f4:f9:6f:e8:a0:b4:c8:3b:4c:5f:33:a4:c2:c5:
22:16:a6:38:0a:19:aa:eb:23:6f:17:12:3c:fe:47:11:e9:c0:
5d:01:73:e6:ee:79:8c:76:05:1b:34:0e:7a:73:ad:b4:f4:64:
b3:dd:e6:34:a7:54:7d:f1:40:54:4d:e1:be:74:0d:79:d0:8c:
e8:31:d1:79:83:c6:4f:02:30:eb:06:54:85:af:05:df:d2:86:
bf:fa:bc:d5:31:61:a2:dd:60:34:63:8a:0e:af:99:5d:d4:a7:
2d:8b:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:02 2026 by rpki-client