Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: tvc5foIWvFUAR2O4WDfK9x5EV4CzyruS8mu749sAvF8=
Subject key identifier: 4D:C3:43:93:BC:D7:24:97:C7:9D:43:17:EA:83:27:22:E1:8A:0E:9B
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 019CF4975ADACE0AAD7D839836A31879EC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 0C
Signing time: Mon 16 Mar 2026 03:01:25 +0000
Manifest this update: Mon 16 Mar 2026 03:01:25 +0000
Manifest next update: Tue 17 Mar 2026 03:01:25 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: cnr4IfPDemzd40lozRISF65gfK9OCQEROIJcSAoPs9w=)
2: gledw4240Dyd4ySNd3EiBGN_CT4.asa (hash: M04U7guZmUOlclnnZ5JAo58CmLjMUZmoOonluYoN36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:97:5a:da:ce:0a:ad:7d:83:98:36:a3:18:79:ec:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Mar 16 03:01:25 2026 GMT
Not After : Mar 17 03:01:25 2026 GMT
Subject: CN=4dc34393bcd72497c79d4317ea832722e18a0e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:81:18:56:1e:68:ab:5c:a3:5d:d1:35:1a:
ed:94:46:13:18:81:24:15:32:dd:45:74:8a:d7:79:
ec:4d:8f:c7:92:c4:84:7c:56:19:96:21:42:48:79:
42:a3:ab:32:94:fb:45:c9:45:49:fb:b8:6f:e0:bd:
dd:56:f1:8f:d5:2f:63:2d:27:48:15:c4:a7:4b:4d:
da:5a:56:3f:ab:ab:17:e2:8e:53:f3:39:2a:87:29:
d1:8e:9a:10:2f:39:07:36:3f:a5:ef:d0:97:12:14:
a8:79:fb:08:2b:cb:25:f1:cf:03:e8:8d:13:12:57:
d5:c0:d4:01:19:c4:93:f2:6b:c5:4e:ae:f4:33:bc:
12:cf:7a:40:00:34:30:1c:77:db:6b:ca:bc:0f:aa:
2d:07:17:15:ee:e5:f3:4f:1c:df:22:55:46:2d:8a:
2a:bb:01:0e:6a:f1:8f:5f:09:aa:f8:6b:a9:ed:0d:
aa:4b:53:94:00:79:44:dd:e8:de:57:2f:e5:90:34:
3e:a7:69:9d:cc:ae:14:50:e9:e2:34:c9:f6:38:98:
4b:81:12:cb:9c:c3:f2:43:26:d1:6c:ff:60:ba:ea:
73:01:8e:47:50:43:b0:12:bd:13:5a:c5:97:d5:53:
67:e3:52:68:45:95:4f:c8:d4:93:d6:db:35:67:da:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:43:93:BC:D7:24:97:C7:9D:43:17:EA:83:27:22:E1:8A:0E:9B
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:79:c4:41:6f:d4:c9:ba:36:2b:83:48:42:56:d8:ca:71:f9:
08:14:d1:ce:7e:4a:bd:14:85:90:d4:aa:6b:98:6e:d3:3a:15:
bf:8d:4b:f3:74:22:fb:6c:3e:97:dd:7d:27:45:3f:d8:a9:9e:
e1:31:34:a1:bf:cb:a2:f0:54:e3:e8:a8:e7:dd:0e:85:e0:a7:
ce:b8:be:43:df:bf:1e:de:f7:73:dc:62:8e:1e:4b:a7:b4:bf:
d6:ac:63:0a:ec:93:25:9f:6a:b0:e9:d6:5a:d5:4c:f2:50:3c:
78:03:6c:e8:d3:c8:cf:ed:66:d4:7f:2b:e3:4e:17:fb:c6:3c:
e0:8e:07:71:82:28:d3:67:3f:28:9c:76:36:9a:bc:bf:c8:e1:
9c:f9:aa:99:b8:f1:66:32:74:14:a4:2a:27:4e:d1:e6:62:e3:
6c:70:9f:df:c4:7d:06:43:90:f9:44:43:5f:01:64:10:a1:23:
2e:46:cd:ae:f1:f5:31:a8:6c:12:f2:96:f3:97:07:48:fb:1e:
74:c8:66:d0:51:32:a5:83:45:75:3a:c5:b6:d3:7e:f7:06:eb:
fc:1c:57:d0:32:db:dc:33:ea:36:8b:fb:b0:f8:43:cd:ad:0a:
69:81:59:44:8c:bd:3d:32:9d:12:63:07:b0:20:47:26:8b:27:
7e:ec:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:06:57 2026 by rpki-client