Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: 9EuLFB3QpkuuCCaW2jDmmnHqHZ6TSboS9SjOl8iXHkI=
Subject key identifier: AF:66:CE:EA:29:ED:A8:B4:B2:B0:17:2A:F0:82:A0:BC:96:8D:35:48
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 019D3940D89E3A67F4683D76569FD1A38DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 06B0
Signing time: Sun 29 Mar 2026 11:00:44 +0000
Manifest this update: Sun 29 Mar 2026 11:00:44 +0000
Manifest next update: Mon 30 Mar 2026 11:00:44 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: U2yfg+2dTRLiKXwNlVp4sOI7m9mKjc/63tIugqIYTjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d8:9e:3a:67:f4:68:3d:76:56:9f:d1:a3:8d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Mar 29 11:00:44 2026 GMT
Not After : Mar 30 11:00:44 2026 GMT
Subject: CN=af66ceea29eda8b4b2b0172af082a0bc968d3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:64:80:f4:a7:5a:9a:bd:9c:95:03:be:55:
2a:31:32:77:59:1c:44:b1:60:e7:11:34:a8:49:45:
f4:57:a1:59:4e:93:1a:0b:73:7b:91:6a:50:4a:b7:
ed:70:91:38:73:74:91:74:e5:53:b0:60:3d:22:41:
95:5b:57:d9:0e:e2:ad:16:df:97:1f:46:a8:51:74:
e2:98:31:fc:d8:31:28:31:2a:da:f4:f5:ba:aa:ab:
81:92:07:06:b8:fa:4c:48:ec:87:fb:53:bf:fb:44:
2c:8b:4e:eb:9d:d4:5f:c1:83:fb:c8:9b:4f:0d:84:
67:44:56:73:a8:9f:78:1f:12:b8:70:a9:b6:60:10:
79:96:4d:8a:2b:72:9b:91:aa:a0:15:92:e0:d7:b9:
6f:90:a0:99:65:31:3d:5a:d2:be:d1:3b:3e:f2:ec:
52:5f:cd:14:b2:16:d2:e0:8d:4c:f0:00:a0:72:16:
a0:32:62:d0:7d:8f:eb:a6:83:08:a0:c4:76:52:bf:
4f:89:05:9b:a6:50:8b:01:25:a8:99:07:4c:f7:33:
14:36:52:72:38:69:3f:a5:71:15:3e:1d:df:55:97:
dc:bf:75:e2:17:9c:7b:ab:91:8c:20:50:14:10:58:
e9:9c:3a:03:75:f6:bf:c7:f3:6c:a3:7f:17:88:96:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:CE:EA:29:ED:A8:B4:B2:B0:17:2A:F0:82:A0:BC:96:8D:35:48
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c6:7b:fd:9a:eb:9d:66:46:f2:d3:86:9f:10:8e:52:c2:33:
48:46:36:31:25:bb:13:86:48:82:0d:99:d2:57:ec:3f:d9:dc:
c6:07:ac:b4:5f:78:5f:7d:4d:b4:7c:d9:32:a6:66:f9:d7:ba:
8b:81:1c:ed:df:c1:c4:ab:19:a1:e8:a4:d5:b7:f3:c1:0e:c6:
69:56:ea:eb:ab:77:12:96:88:00:f5:c2:6a:92:5d:69:3c:06:
0e:4b:2a:0e:a5:11:37:5e:5d:09:fe:8b:c2:7c:03:1d:c4:de:
e4:16:a2:05:a6:e9:d4:dd:69:8a:ff:e6:eb:24:3b:a9:ff:e1:
93:3a:0a:3f:39:34:9f:41:28:52:39:35:d7:2e:12:c3:d0:72:
23:9e:97:81:81:39:f9:8c:20:59:5f:43:18:a8:93:a0:3d:ad:
f1:60:0a:ed:02:4a:0a:79:b3:79:e0:28:f0:53:ed:3d:d3:94:
ed:c3:a6:53:2b:90:3c:77:94:99:c5:a6:6e:60:40:e9:e3:a6:
b0:b6:24:a3:21:4e:e2:ba:80:cf:85:30:b4:d7:45:81:3b:e1:
10:e7:ca:e9:cf:e5:04:98:a5:62:2a:2c:b1:3f:11:d4:45:2f:
55:6e:fc:f2:bb:dd:4b:f0:12:5c:f0:cd:65:b9:fc:19:ab:43:
cd:ca:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:07 2026 by rpki-client