Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
File: mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json)
Hash identifier: lOFf+BzJ9gE/bDBRZ4VlbVaSAkzabfzAVMUk2bqZlvI=
Subject key identifier: CE:B9:18:A4:2D:0B:DF:A6:B7:B6:31:FC:04:8F:C3:D2:1B:E9:FD:EB
Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Certificate issuer: /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Certificate serial: 019D386616A90DA333BB1199DE0705D7963E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
Manifest number: 0595
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: 97zcXohsYi8roa/KXK2pc3jZn3f3Pc7WziO1UqzPcnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:16:a9:0d:a3:33:bb:11:99:de:07:05:d7:96:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=ceb918a42d0bdfa6b7b631fc048fc3d21be9fdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:a8:e9:ad:30:84:03:4a:f8:04:cd:d4:8e:
f1:70:6f:34:46:31:c0:8e:7b:f3:eb:db:b4:66:be:
5d:cc:a7:76:55:6b:3d:ac:17:f1:12:17:30:a2:94:
8e:73:27:a6:34:1b:f3:d9:43:11:40:4d:f6:a5:fd:
d1:df:c8:68:96:ac:41:0c:5c:20:b7:35:cd:db:cb:
a1:13:78:2f:84:a3:df:7a:ab:16:29:15:6d:61:a7:
f3:ad:5f:d2:89:7b:60:7b:7d:23:f3:f7:f2:44:92:
da:83:ff:d6:e6:ee:ce:36:56:ca:9a:bd:a1:88:13:
70:0f:45:a6:0b:4e:c9:b2:c8:77:6d:3e:67:5c:94:
cc:35:44:b2:e6:50:1e:98:68:45:83:5d:66:6d:05:
fd:40:e8:8c:fd:f5:f9:12:3c:e1:d5:04:ac:e8:3e:
0b:d3:9f:40:35:7f:2a:bc:03:16:a9:e9:1f:3c:cb:
22:ba:ad:f9:34:d5:2c:76:07:2d:32:46:22:97:e8:
6c:fc:ab:ff:d5:e1:8d:17:6c:fd:7f:e7:5d:7f:95:
3e:17:8f:50:4f:51:bf:49:cc:a4:22:d9:1c:d9:18:
c1:e2:05:2d:4b:27:90:f0:d1:71:3b:75:f5:a6:9a:
35:ca:bd:34:23:5e:c2:1e:fd:05:ed:28:1f:47:e5:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:18:A4:2D:0B:DF:A6:B7:B6:31:FC:04:8F:C3:D2:1B:E9:FD:EB
X509v3 Authority Key Identifier:
keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ec:34:a9:61:ce:ed:15:de:ab:ac:b4:8e:6e:04:b0:47:95:
d0:86:f9:c8:6e:e0:f5:83:24:a1:00:87:b5:84:6d:05:80:32:
6b:c9:a1:5f:97:30:5a:94:c9:46:2d:51:ae:6a:86:03:8d:22:
59:8d:bf:49:5c:24:26:d7:76:8d:fd:8b:b3:0d:31:80:29:b2:
04:91:1f:72:19:02:61:3c:18:8c:e8:b2:e1:da:f3:6c:7b:8b:
d9:6a:84:f0:8b:3f:03:d6:ee:1f:74:47:4b:82:85:89:96:12:
74:69:ff:3e:8f:f4:6e:8f:ba:b8:af:a4:2c:bf:6e:a1:4a:b0:
d6:d0:89:de:03:82:81:40:03:04:b8:be:87:3d:ab:a9:16:06:
c0:ef:6e:3a:f5:a7:8f:04:f6:40:20:16:71:2b:a5:3d:4f:e4:
b1:f4:5d:55:fd:6a:e1:16:36:80:9a:a8:a8:cc:bd:46:9c:fb:
2a:4d:f7:d2:c9:94:97:1c:71:1b:81:42:92:53:48:d2:d5:8b:
7b:ae:88:3a:08:11:d3:cd:f6:1c:53:0a:de:26:ee:98:cd:fa:
44:0a:2c:d9:69:e9:c5:c1:0b:59:7d:53:12:50:a7:be:8b:c8:
1d:23:45:52:80:36:61:12:cf:b7:17:8f:1e:8f:d6:14:96:8b:
a6:d7:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:36 2026 by rpki-client