Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: aCMT1qlmgDaiUI94WsN34PQJX5V2IF1VmtsrAHfM5zE=
Subject key identifier: 34:61:D7:5F:F4:EA:4A:09:81:38:63:99:B8:B1:70:EE:A8:01:B3:33
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019D39E57ECF5A1BF29A2CF00EE116E535AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:34 +0000
Manifest this update: Sun 29 Mar 2026 14:00:34 +0000
Manifest next update: Mon 30 Mar 2026 14:00:34 +0000
Files and hashes: 1: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: qSkcgItVn0ZcSQA+lDVNr4m0GQFECzt6X/KFJLpDYyE=)
2: Y4Ztj_LvVduFmJe-S8DAGQ8C-Xw.roa (hash: PnJYtORtq7q9TMkof+95kidGWv4p60mPQyI6Q4NduWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:7e:cf:5a:1b:f2:9a:2c:f0:0e:e1:16:e5:35:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Mar 29 14:00:34 2026 GMT
Not After : Mar 30 14:00:34 2026 GMT
Subject: CN=3461d75ff4ea4a0981386399b8b170eea801b333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:d5:12:f3:f1:e0:b9:96:46:51:0b:0d:70:
da:95:dd:52:df:53:5e:06:73:a8:6b:ac:91:c7:f2:
36:73:12:c0:e7:84:c9:1b:3d:df:46:81:2a:fd:50:
28:49:78:05:8b:89:85:7e:05:37:5d:64:ac:98:bd:
cd:38:fa:50:05:a9:36:8d:3b:da:57:f5:77:b2:bd:
db:ed:1d:db:ad:50:56:e8:7e:18:f1:b2:72:d2:6f:
c5:1b:4e:97:19:25:0a:c4:a6:bc:42:d2:d0:18:4e:
0b:40:6b:c2:f1:f1:84:31:d2:67:3d:ef:cf:0f:da:
c0:96:03:83:a1:65:57:11:a8:d7:2e:e6:5a:79:d6:
17:95:ca:26:23:4a:1a:29:16:fa:e8:7c:5e:7e:a7:
6f:7a:03:6a:de:82:78:68:0e:f0:aa:ce:3d:d4:45:
91:92:44:dd:77:65:97:ce:82:cd:8f:9e:26:6d:bd:
d7:54:4c:4c:27:b6:9a:b8:41:86:09:14:be:83:ea:
c3:dc:26:53:21:e1:c4:e8:e2:bc:f0:4c:0d:9e:94:
9d:aa:4b:81:23:47:90:6b:6e:66:29:12:04:1f:ab:
56:da:4e:d1:d0:38:cf:a3:fd:a4:f0:93:d4:12:6b:
e3:77:05:b3:b7:85:23:5a:2b:fa:df:b2:da:19:d1:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:D7:5F:F4:EA:4A:09:81:38:63:99:B8:B1:70:EE:A8:01:B3:33
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c3:34:73:3e:80:bd:c4:c8:91:06:d4:a3:96:90:58:28:60:
2e:c2:c0:36:d9:ab:3f:22:26:59:d2:97:f1:7c:29:51:7f:ca:
dd:3e:f9:47:fe:d1:b3:54:c2:5f:4b:e2:44:b4:b8:89:d5:18:
af:21:53:f4:47:1b:1e:7e:0d:95:a7:d5:28:2e:fe:a4:70:2b:
63:b4:4e:87:89:88:5e:b2:14:e1:48:8e:97:d2:d7:94:02:fa:
e3:08:2b:bc:6b:45:e3:3d:b3:01:c4:07:25:dc:0e:c3:92:1b:
95:b8:36:a5:9a:49:a8:dd:fc:47:6a:ee:8d:c2:05:c5:91:1b:
14:90:b1:39:1e:d9:4b:c4:cf:f4:f0:77:f2:04:82:90:c5:99:
11:b4:31:a9:99:e3:4c:ef:d7:75:b9:80:c7:d1:de:1f:f7:e6:
6e:88:69:71:f9:51:ef:9e:1e:26:ed:33:98:2f:84:07:5f:53:
f2:42:15:7b:aa:91:14:23:67:a9:38:2d:2e:e5:e6:c1:5f:54:
8f:53:d5:82:b3:23:42:35:de:11:f0:88:ef:ae:cd:d0:08:34:
2a:20:d1:bf:cb:23:f3:b9:9d:11:9d:e2:84:2f:b7:df:e1:90:
08:88:91:05:99:68:c2:26:64:73:47:17:27:af:c5:97:94:98:
2a:f3:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:45 2026 by rpki-client