Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: LYX17rpttWunh5g/Ru/9M2FgI/rY4ppHfwujJSNMQVk=
Subject key identifier: A3:F6:49:BE:A3:4A:27:CE:7A:3E:45:34:20:84:A3:2B:B6:1B:CF:6A
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 019D38656A6C8B704C62B71BB0BDFC1CBDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 15C7
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: byLLc7ehf8LKgzL8gyyLkWO/UvW5IieBOiZ1UutQuls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6a:6c:8b:70:4c:62:b7:1b:b0:bd:fc:1c:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=a3f649bea34a27ce7a3e45342084a32bb61bcf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:5a:bc:25:f0:c2:37:7b:f1:3e:78:f9:44:
55:a6:6d:37:d2:52:52:97:49:78:98:2c:31:30:1f:
06:ac:82:66:7b:b8:31:7f:d8:2e:1e:b8:69:0f:ce:
fe:59:88:f5:77:57:39:22:61:2e:12:ae:2c:de:aa:
ec:09:da:47:9a:56:de:52:cd:b9:1c:57:d0:1a:1d:
20:90:3b:56:36:51:d3:fb:e9:94:9b:38:d4:f4:02:
9b:92:b0:52:bf:42:38:3b:77:a4:92:80:f2:85:ad:
8b:fa:07:9d:54:2a:a8:ea:e6:32:6a:06:f1:15:a3:
32:a6:ca:12:d2:68:ec:95:d3:ec:e7:1f:eb:5e:71:
18:7c:ac:70:92:bb:3b:0c:95:dc:75:27:ae:5b:5f:
28:df:87:54:85:0a:d1:05:14:23:84:5d:61:a2:2b:
07:f3:68:7a:8d:99:9f:c4:13:df:48:f2:f3:c0:78:
6a:68:8f:75:ce:79:c2:f7:18:18:3c:75:96:15:4d:
d1:4d:24:23:e9:ca:12:36:b3:1b:1c:71:8f:c3:70:
36:a8:95:3c:fa:79:10:98:ba:ef:35:6a:ab:81:4e:
de:3a:6c:08:54:71:11:99:c2:b5:34:e0:d7:2f:99:
c1:d2:68:fb:ad:65:2a:39:7b:d0:40:d6:3c:be:4a:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:49:BE:A3:4A:27:CE:7A:3E:45:34:20:84:A3:2B:B6:1B:CF:6A
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c6:c9:85:42:63:a6:07:3a:17:31:03:17:d9:d6:50:22:57:
aa:9f:7e:cf:b3:c6:72:1e:0e:24:fb:6f:52:7e:e0:2d:aa:33:
83:1d:6f:00:12:aa:cf:4e:e3:6a:f3:e7:81:b8:3d:6b:a3:10:
b3:88:f1:c6:d6:ef:50:f6:e4:21:f0:81:bc:41:b7:a9:7e:01:
3e:38:bb:c8:99:ba:c9:75:fb:a8:62:cd:e4:92:93:3f:31:9d:
2a:2e:44:6c:53:c5:08:03:ea:15:6c:04:0b:31:93:db:fb:71:
27:6b:db:65:6d:cf:39:da:84:e9:e9:b9:96:86:ef:65:7d:b9:
c6:a4:8c:97:bd:62:c7:0a:97:25:74:f3:a4:df:2b:7b:0f:a3:
09:28:74:24:5a:fd:96:43:f5:91:58:68:55:5f:10:b9:31:3d:
fa:94:f7:03:09:b3:e2:6d:6a:84:1c:6d:93:81:ce:ad:66:ea:
b5:97:56:6a:9c:42:1f:c1:9b:c3:4a:8e:ae:4e:a3:9f:d3:bc:
85:d0:5c:3d:00:6d:24:af:16:fd:c0:d7:aa:6e:a6:e0:28:ec:
96:9f:6f:b3:77:36:c0:fb:78:11:b0:7d:ab:61:a1:05:60:86:
9a:bd:9a:90:9e:2f:05:ac:c6:df:f4:ad:22:17:57:b2:b0:58:
15:45:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:13 2026 by rpki-client