Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File: MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier: l1v0GyrkQ9oM3bnoS5vAF6U7AZfB5/p7GnUkcwRmUW4=
Subject key identifier: 95:4A:CD:D0:C5:45:C2:82:4B:F2:53:93:00:23:EE:FC:F4:22:02:FC
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer: /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial: 019D38665A049AEF49DA9A6587373BB78841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number: 17EF
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: N6kOzVBBip0Il/5BTeIUpVS0FqifTaUh7MMHlgT1O8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5a:04:9a:ef:49:da:9a:65:87:37:3b:b7:88:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=954acdd0c545c2824bf253930023eefcf42202fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:c6:1e:9c:e2:19:f8:ff:4e:ac:58:88:a1:
b9:65:b6:1a:85:88:c5:fa:fb:d3:14:2a:ba:f8:bb:
dc:5f:99:f1:20:f7:c5:a7:f2:34:d0:f5:bc:39:55:
21:84:9c:41:67:b8:0f:88:d7:c2:0c:6a:43:19:1c:
be:15:3d:67:69:0b:2a:ed:87:d0:65:a5:d2:c2:86:
49:c2:d7:80:f7:42:ee:34:7d:e4:2c:5b:7b:29:b7:
ac:e8:61:15:ae:86:aa:da:f8:26:bd:01:18:40:eb:
c3:5a:be:37:ac:ad:95:9a:46:02:5d:f9:8e:70:76:
36:f5:e9:11:72:d0:b8:ad:41:24:29:6d:77:5c:27:
1a:1c:2d:50:d7:46:05:48:1f:85:f8:30:d0:f0:bd:
99:8f:ea:e5:b8:ec:a8:be:8a:60:28:db:69:bd:17:
d9:a9:84:42:c2:9c:40:6f:32:ad:6f:48:ee:8f:be:
9a:28:64:db:84:41:67:b9:bb:9a:4c:5f:b4:0d:9f:
8e:a0:b6:7e:9a:4c:5e:7f:19:12:fb:c0:bc:8f:ee:
f0:4b:bb:f3:07:f5:4b:f0:ed:14:21:8e:5c:5b:e1:
77:f7:8f:d2:0e:c8:8a:08:bc:e5:df:e1:67:2f:7b:
76:f8:29:df:50:d5:ea:94:cc:5f:57:7f:40:ec:44:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:CD:D0:C5:45:C2:82:4B:F2:53:93:00:23:EE:FC:F4:22:02:FC
X509v3 Authority Key Identifier:
keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:50:ad:2c:57:3a:af:e4:a5:b2:9f:96:50:d5:c6:a1:9a:
34:e5:a6:72:d7:9d:30:cc:ca:db:d6:98:21:f5:3a:3c:d9:25:
d8:da:c2:72:3b:67:63:6c:37:91:cb:d7:f6:29:21:2c:2d:c9:
31:13:3c:f7:61:bd:1d:f0:27:34:73:bb:ae:3e:65:90:0a:66:
d9:5f:b0:bf:5c:65:8b:9f:cd:1d:3e:b0:0f:2f:e6:d4:61:76:
3c:05:5e:e9:76:2f:a2:e6:ae:6b:e6:e7:03:7e:d1:21:6e:86:
24:9e:d8:cd:67:13:b8:ff:36:01:4d:f4:c0:3d:29:d5:5e:5d:
53:a5:d0:84:dc:a0:07:b3:86:3b:a6:2f:b7:60:13:90:74:46:
46:4b:43:e2:74:d7:a9:c1:59:4c:7f:23:4e:34:c7:62:2d:31:
34:dc:6d:92:c7:00:79:9b:96:a1:98:84:5d:fe:89:99:57:3b:
21:86:24:47:e7:fc:a7:85:c3:98:3a:fe:2a:97:b2:db:ad:77:
07:d1:b8:73:c6:b7:1f:9c:f6:23:09:90:11:a9:2c:01:be:7b:
74:6b:85:0f:9b:1e:3a:2b:b1:94:26:7f:d4:d5:b4:5a:c1:d4:
f5:ae:7a:cb:6f:2a:82:2a:ec:38:ab:f3:d0:c1:66:2a:26:4d:
0a:ab:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:05 2026 by rpki-client