Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: lBb5eplc053jf82ioPOOoZOOJjAHwMYb2HNRKb3G/PA=
Subject key identifier: 94:9B:25:8F:CB:43:DA:0E:6E:76:1D:7F:88:D0:10:FC:F5:44:87:F0
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 019D38660A316F8C1C8B46A32D9133663B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: G6Xnhgm7Qv41okiSnQP0yaTsB/xI/XjZEZFc6RuPHrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0a:31:6f:8c:1c:8b:46:a3:2d:91:33:66:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=949b258fcb43da0e6e761d7f88d010fcf54487f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:2a:9b:dc:62:71:67:99:72:f2:f4:7f:4f:
27:93:cf:e5:81:58:8f:9c:b0:82:3a:67:01:d6:8c:
6e:01:d7:6c:65:b6:0d:78:76:72:59:c0:e5:b9:b7:
9b:1b:81:da:bb:95:ec:6c:e2:66:d4:26:a6:f9:5c:
16:cb:81:9b:2e:d4:9b:5d:9c:d0:ef:2f:32:4a:4c:
a9:30:23:de:b6:e7:8e:3e:92:21:aa:60:9b:de:4d:
96:68:35:c0:ab:39:ee:37:75:74:7b:7e:87:fa:71:
3e:fd:f8:38:63:94:00:46:69:4e:c1:51:8b:a3:0a:
d5:2f:e3:a3:cf:01:d0:be:f4:a1:9e:b5:d3:4a:63:
26:07:5b:b0:32:90:0b:8f:dc:fc:53:4c:71:41:8a:
fc:5c:99:59:e3:92:68:94:b0:15:dc:d8:08:a1:1e:
5a:9d:a0:18:eb:70:8f:ee:c1:e0:28:0b:7d:7b:f9:
a2:09:30:d6:8f:ab:e7:fa:76:18:81:2d:3e:73:91:
be:2d:bc:80:59:07:77:43:91:16:7a:0a:36:75:91:
6a:5a:87:99:2e:96:5b:59:aa:7e:4c:a9:03:80:4d:
d1:ca:87:0a:27:a7:e3:fd:1c:23:dd:9f:32:90:26:
ef:b6:95:68:63:d8:3f:02:1d:2c:27:d8:52:ed:6a:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:25:8F:CB:43:DA:0E:6E:76:1D:7F:88:D0:10:FC:F5:44:87:F0
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7d:e1:e6:85:32:3c:5e:4c:12:41:6b:ff:4f:d0:7c:50:c1:
cb:1a:91:94:2d:d4:ac:84:3a:a0:b5:f7:66:0e:b9:c7:28:f0:
89:d9:54:b7:17:39:1a:59:bd:b2:42:81:d7:a0:94:7e:49:1b:
1f:6a:29:d4:cf:92:c1:d6:ba:79:80:ca:c3:f5:e4:fc:bd:c1:
5e:9a:d2:66:3c:78:1d:fb:79:0b:96:37:b3:d8:48:1a:eb:0d:
4d:01:a0:97:43:75:0a:33:4a:58:97:8d:aa:32:df:20:f3:1a:
0c:fc:8d:2b:88:d8:cf:d2:1f:ff:0f:1a:9e:4f:d4:f5:ac:b7:
96:2a:12:4e:a2:54:2c:5a:4b:46:29:25:e7:51:fd:c2:58:48:
5a:11:39:8f:42:8a:b7:0c:98:ea:89:22:aa:d3:41:f2:b6:6d:
54:3d:09:48:16:8c:d2:0c:94:7c:fd:a9:4e:18:d1:8a:62:03:
af:23:23:25:10:f4:f9:62:ed:2b:8d:5a:b3:e9:30:56:19:22:
7b:f7:e4:1b:71:47:71:49:d9:1c:36:83:2b:20:f6:c7:2f:d5:
b9:54:d8:ea:6d:a6:57:12:60:50:c1:b8:3f:2c:21:37:53:0f:
33:23:a2:f1:4a:58:b9:19:7f:fe:4d:8e:78:06:03:15:92:6a:
6b:68:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:35 2026 by rpki-client