Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: nRiO1DYjBt8Eao/7YC2kBC3NQhtmmO0ow123eaKThKo=
Subject key identifier: 37:CE:C5:05:0A:82:09:F3:4C:7C:D6:4A:B6:D9:CB:3B:9A:09:34:AF
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 019D389C2337B36E6377DDC7682479DEE7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 159D
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: FUrjigYRQiJkSgrmYPsnK+piIAtGB5Nmtu30gnkYuCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:23:37:b3:6e:63:77:dd:c7:68:24:79:de:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=37cec5050a8209f34c7cd64ab6d9cb3b9a0934af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:99:db:1c:7a:89:6e:84:56:46:e2:97:4d:
6f:77:a4:07:7d:7f:3e:21:be:7e:cf:f2:5c:d5:9a:
75:1c:5b:59:07:d1:b0:af:13:a0:5d:68:3e:54:70:
4b:19:9c:70:ca:b6:54:a0:4f:df:ed:d2:5b:cd:2c:
34:71:81:e9:b2:49:c0:8e:f5:12:5c:6a:2d:ed:7f:
77:58:fd:cc:a7:6d:a4:d0:b0:04:30:f3:17:03:e4:
a8:9a:54:8b:8f:3e:1b:45:59:6e:f7:6b:6b:57:3a:
16:b5:0d:3b:49:bd:d7:b5:b9:d0:f4:2a:a7:53:b9:
52:ce:52:ad:20:e1:92:46:27:a9:87:b7:1f:c6:60:
35:e9:97:33:c4:a9:d8:c7:9b:02:da:55:8f:7a:28:
16:5a:5e:d6:fd:9e:7a:22:5a:6a:18:06:ae:e6:5b:
d2:82:6a:fe:3c:9e:68:0c:7b:4d:1d:fd:17:ca:9e:
88:13:0f:e3:e7:d0:de:ed:17:02:14:82:19:63:09:
71:a8:4c:0c:4d:e4:ad:e0:cd:34:cc:f9:51:3c:0e:
40:3b:09:ae:13:e2:85:4f:20:2b:3e:8b:74:f2:08:
34:f6:68:07:49:e0:5c:a3:56:12:8e:75:72:13:34:
1c:ca:ca:82:d7:46:61:09:84:cd:e7:1b:5e:f6:d7:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:C5:05:0A:82:09:F3:4C:7C:D6:4A:B6:D9:CB:3B:9A:09:34:AF
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:7a:33:87:16:85:10:85:d0:db:58:84:c0:c9:01:26:e0:
a0:3a:98:71:96:8c:38:35:d4:d6:e0:a9:68:94:20:95:b7:91:
c8:15:4b:23:05:e3:86:e1:6c:d9:eb:1c:6d:72:73:21:8c:fd:
95:19:f1:e1:1c:95:23:fa:80:40:e3:65:58:f3:dd:ba:67:20:
fd:fe:c4:f2:ae:eb:4b:f5:45:80:2c:e8:9d:d9:8d:67:27:81:
4c:fb:7b:a9:70:79:5c:e2:db:02:be:43:30:fd:12:2e:ff:65:
47:60:8d:8f:4f:10:02:88:cc:18:ec:99:9a:fd:01:96:12:ba:
42:78:55:8e:d1:cd:1c:b3:51:1f:56:ec:8b:c9:04:67:6e:d4:
b9:52:24:0c:aa:f9:c0:db:b4:d7:48:59:35:f5:da:14:f4:b3:
8b:fc:b5:7c:c8:14:d1:92:d0:41:80:cf:ac:6c:e3:b7:89:2f:
a5:0c:43:e3:0e:b1:49:70:b5:15:c0:0b:46:c2:04:18:12:e1:
39:78:de:f5:54:87:11:32:bd:7c:3b:75:fa:28:3d:ea:54:97:
e4:df:ad:44:2a:2a:f5:22:e0:61:a3:d6:96:2d:66:6f:fb:b2:
af:cd:ac:de:42:a4:78:1d:29:59:e7:0c:40:02:6b:8b:5f:d3:
e4:1c:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:53 2026 by rpki-client