Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: N7Mzo632ljNu+GrjoFIc/sTJC2qqY3mbNQTb0SEt/tM=
Subject key identifier: 52:45:A5:6F:99:85:16:16:40:B0:C0:3D:D7:4A:AA:3D:C9:9C:D6:F1
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 019D38D2EDFD6E33C40563FC618E8CF3A0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 0884
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: o4MGCRk/SQLvIuCM4Ixvarf/4WVVgkR8r6q4MSPtgfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ed:fd:6e:33:c4:05:63:fc:61:8e:8c:f3:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=5245a56f9985161640b0c03dd74aaa3dc99cd6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c0:ac:8e:6c:ff:43:82:49:b4:d5:b7:3b:27:
c7:b0:b9:97:ce:7a:2c:d9:2b:4b:24:13:91:8f:90:
86:90:0f:13:dd:7a:9e:1f:16:dd:6b:6b:2c:27:73:
d2:cb:a1:99:9e:96:bd:23:db:f5:89:10:8e:38:97:
ca:ed:56:af:f5:e8:89:78:e7:77:1a:c2:2b:44:5f:
8c:71:2c:4b:3d:2f:b7:9b:90:ad:27:ee:ca:d5:60:
b1:27:9e:3c:5b:84:00:80:e2:16:17:d8:99:7b:73:
24:a7:92:77:04:a5:6b:bd:bc:93:b4:a1:ad:d2:07:
aa:ef:d6:13:68:93:bd:16:fc:db:5b:82:5b:49:e6:
45:79:de:bd:b2:26:2d:09:8c:f3:ab:85:e9:48:2b:
3d:64:33:5a:1d:54:bb:8c:cb:aa:df:35:19:cd:53:
2b:4a:38:da:32:69:06:9f:fb:c0:92:0c:d9:35:83:
b0:57:35:8b:a3:4f:70:69:c7:24:28:54:36:35:2a:
03:bd:fe:51:38:56:71:48:1b:6c:56:b3:cc:b7:7a:
d9:61:02:30:c6:05:5d:a5:8b:47:82:09:66:c9:52:
41:66:c8:3b:d8:01:8e:22:b5:f0:bc:c9:ea:9e:42:
f1:f0:14:77:18:62:05:36:b4:f3:82:83:c0:fd:19:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:A5:6F:99:85:16:16:40:B0:C0:3D:D7:4A:AA:3D:C9:9C:D6:F1
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bc:67:1d:38:db:ec:e3:19:02:cd:44:22:7e:de:a6:c4:4f:
60:79:d4:f0:d6:86:1e:2c:9a:77:fd:6a:2b:54:91:0a:76:21:
0b:bc:28:03:7e:22:6a:e8:3a:8d:34:2d:b7:37:2e:c7:98:21:
7d:d0:d3:17:f0:40:bb:c8:f2:c2:a3:8a:50:c5:ad:6d:08:ba:
be:88:05:cc:24:65:73:2b:76:8e:c7:45:47:4f:5c:a8:26:ef:
66:0a:2f:ba:65:8a:ff:61:9e:3d:98:9d:bd:14:ce:b0:27:93:
45:da:3d:f3:8e:cc:98:0b:76:67:91:fe:6d:27:b7:a5:13:6d:
71:ee:8f:5d:dc:4d:11:d8:ba:3c:fa:42:aa:37:fb:d2:2e:f8:
ac:a6:ba:c1:e1:36:68:6c:5b:05:cc:5d:ef:33:67:0b:b4:83:
cf:aa:2e:2a:04:fa:03:8a:6a:19:5e:47:88:4c:15:e1:51:34:
c0:90:22:8c:ef:04:7e:fa:97:cf:9b:fa:19:39:9d:5b:0b:e3:
45:93:c1:e5:1b:f6:9a:a6:f4:0c:68:32:23:30:fe:3c:b8:bd:
70:40:e5:3c:1a:2f:4b:4d:21:29:ff:5f:c4:84:fb:6e:14:05:
e7:0d:d4:e1:7e:1a:13:77:96:67:a0:fe:06:6b:0e:6d:fd:ea:
f0:53:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:06 2026 by rpki-client