Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: uiYwzxtauRMMBn7VLzQTIjzZyvkpq7MUPWzASYY7gPc=
Subject key identifier: 3A:6D:79:96:0A:41:7B:44:7A:A9:74:67:9D:B3:26:65:BF:95:4C:A7
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019D3865A515352A3B2587BB3BE41D0AEC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0A8A
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: yH7aoAYjLreQrWMVNgg/Lc8DTcEjkNs/24+AQYriukk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a5:15:35:2a:3b:25:87:bb:3b:e4:1d:0a:ec:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=3a6d79960a417b447aa974679db32665bf954ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:29:bb:92:1d:b7:14:e1:07:02:55:93:f7:
5c:18:a1:fc:0d:64:04:c0:b9:3b:52:fe:a5:d0:15:
52:3a:9d:68:47:87:10:9b:f3:8b:c4:0d:36:f7:c3:
d7:e5:5c:3d:f2:1e:e1:ad:14:01:67:da:60:99:60:
62:32:1a:2a:ac:14:c1:44:43:18:65:23:1f:ac:bb:
d3:aa:55:ed:41:fc:67:52:34:00:7a:de:94:36:e0:
85:ed:a2:a9:86:72:56:7a:ea:51:a8:da:c4:dd:89:
88:a0:d5:a4:dd:42:24:04:9c:dc:49:bd:a3:b7:81:
ec:86:b3:30:a3:5c:e3:9e:e6:16:7b:34:13:5e:34:
f6:96:92:a5:9f:ae:a8:aa:09:38:02:28:b3:05:df:
0a:74:2b:9d:eb:d0:e6:1d:0c:36:d3:14:17:bd:dc:
80:4f:da:b4:88:fc:ee:e1:43:3e:10:6d:1e:a5:7e:
33:dd:87:b2:8c:8c:24:e4:f4:e3:c7:4d:ae:85:e1:
47:0d:48:be:98:a8:9f:5b:f0:62:5f:2c:b8:26:9c:
b2:d4:fc:c8:20:b0:31:39:ac:59:3e:8e:62:2b:d2:
b5:c9:3e:ae:ea:2b:17:15:dd:cf:7b:a4:80:e6:c2:
6a:ac:c4:c0:9f:7e:97:1a:5e:43:25:43:86:99:43:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:79:96:0A:41:7B:44:7A:A9:74:67:9D:B3:26:65:BF:95:4C:A7
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0c:4a:50:f8:f0:5a:fa:b1:8e:0b:5a:c8:94:fa:a8:1a:84:
03:0a:54:5e:22:4c:4e:69:fb:e7:50:ac:c8:95:a4:4e:a3:64:
e8:21:a0:47:42:69:85:6f:21:6f:0d:fc:4d:86:41:06:05:21:
c5:80:6a:d5:4b:15:f3:0a:8d:1b:8d:71:a9:9c:6a:7d:f4:37:
14:c3:4f:f3:4d:ad:33:e9:c9:76:98:37:33:f7:22:b2:23:23:
ca:24:19:2f:5b:ee:ec:08:e3:4f:76:e5:a3:a7:a7:73:d7:24:
da:ee:24:ca:71:05:0b:e9:ca:70:72:79:4d:d5:f9:d8:c5:b2:
43:7c:c6:7f:38:f9:d7:7d:11:2a:ec:b2:37:72:35:1c:a5:e2:
08:dd:06:ac:86:09:aa:4b:33:a5:23:5f:77:d4:6a:41:39:b2:
ab:ef:8c:76:2f:f1:02:4b:4b:95:58:85:40:7a:30:8a:93:9b:
19:ed:e8:4c:ef:9e:ba:61:f3:a8:3f:50:91:e8:d3:50:a7:00:
88:51:95:d1:9e:0c:22:c9:29:e7:19:12:75:29:bc:33:6c:3a:
01:41:3d:01:6d:e8:94:aa:0b:21:a8:df:aa:15:bd:bb:f4:c9:
f8:75:39:ac:4f:a8:f8:27:0a:06:96:d9:7f:d2:3b:02:e2:b9:
bc:8c:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:50 2026 by rpki-client