Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier: 5HXRC7JKKH0R3Tpvuhw8m212tV6ULr3jHwxtLiu1/pw=
Subject key identifier: 7D:C6:78:41:5C:CF:A1:5D:36:99:20:07:8C:DB:07:1F:EE:7B:2A:FF
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 019D390A1387CC72D40F821BF5CFF1BDD189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: KzBUS6ySFmC8tr87j/gUWVkY1lfOB4P/oGhqtETPu6I=)
2: too8MzrLoxWwRK6makJS99rB6yo.roa (hash: z1yewE9kqsod23GpqibQgcZfH3oS6cUzSRIIJbdvj3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:13:87:cc:72:d4:0f:82:1b:f5:cf:f1:bd:d1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=7dc678415ccfa15d369920078cdb071fee7b2aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:21:33:e4:db:75:b6:08:b9:be:ed:ab:fc:
04:3f:48:12:d7:eb:c2:71:5d:9e:04:f7:e7:15:04:
c1:c3:37:3a:6f:68:31:b5:1b:bd:d0:e4:3a:8a:01:
21:87:64:9c:67:cd:ff:68:1e:8d:e8:a1:8b:1c:f6:
74:6b:fa:fd:13:c1:d0:cb:7e:e5:fb:88:44:7e:83:
ba:11:f2:14:e9:3f:cc:07:69:11:27:e5:07:97:9b:
56:e9:bb:a8:4e:43:b7:47:e2:54:8e:43:f8:94:d6:
e3:f6:ee:38:91:84:c6:f5:ee:a3:e5:fa:e4:de:34:
1a:63:b2:4f:2a:62:e9:3b:1a:98:00:03:16:52:cf:
7d:9a:18:96:3e:61:13:93:6c:27:8c:10:2c:18:b0:
73:4f:2d:97:4e:5b:a0:8c:e3:ca:d0:d9:53:f3:53:
11:b0:97:3e:b1:81:96:a1:b3:da:ec:5a:50:b2:52:
10:9f:77:2c:18:89:e2:64:43:7c:56:73:f4:02:ca:
41:37:1e:17:0b:9c:7d:0d:d2:c0:e1:20:62:65:ec:
dc:93:29:71:02:cb:ad:a6:e9:17:f3:3d:19:21:5a:
03:63:e5:e1:9f:db:11:a7:be:4b:05:09:93:8b:b5:
c9:fd:22:01:2f:1c:8b:53:1c:5c:9e:d6:6f:46:3e:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:78:41:5C:CF:A1:5D:36:99:20:07:8C:DB:07:1F:EE:7B:2A:FF
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dc:a1:3e:d3:48:49:b4:7f:9c:ce:0c:9e:8e:a9:9d:33:b7:
a0:61:55:2b:97:53:40:80:4a:fb:e9:08:4b:6c:b1:86:60:5d:
76:47:57:d8:ef:8b:b4:60:e8:4b:6e:5d:1a:e3:10:eb:50:1d:
6e:26:71:e9:b7:c0:16:1b:38:f5:e8:96:97:76:25:4f:9f:12:
d1:9f:dc:ad:ac:f3:ac:4d:b4:0a:48:24:9b:c4:b4:1f:bf:a5:
65:cb:f1:2e:93:ac:10:10:40:3d:29:f4:09:99:29:cf:5e:0f:
ab:26:81:6c:dc:9e:99:55:55:6e:11:ff:b2:ee:f6:7d:22:df:
3d:9a:37:d6:e9:c2:d2:96:0b:ab:9b:1a:b7:79:d4:74:04:f5:
6f:46:d3:4d:5f:73:4d:9f:2b:1f:2f:5c:b5:13:87:15:b1:b8:
a0:75:cc:9e:8c:9e:57:02:45:0d:6d:c0:b9:39:13:fa:e0:d9:
82:db:a0:fa:fe:55:c7:31:60:2b:df:fc:af:08:a8:2c:47:b6:
63:ce:f8:ac:91:a0:ff:0c:d6:d5:73:bc:e6:0a:4b:04:1b:16:
b9:9b:fa:29:9b:63:b1:19:2c:cb:f9:93:68:37:32:50:44:1c:
ba:a6:94:24:21:9c:71:fb:b4:77:1b:9e:58:91:48:b1:77:f0:
81:5b:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:36 2026 by rpki-client