Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: 1+Id04FWbAzYMdf5H07TnbBSO64PjwUPly4oYPt6v1M=
Subject key identifier: B5:BF:4B:97:F5:84:50:E5:1E:B1:C3:62:62:D8:A2:AB:E7:2A:06:66
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 019EFC15C8553011BC3BBAA1917D305A62F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 0119
Signing time: Thu 25 Jun 2026 00:02:26 +0000
Manifest this update: Thu 25 Jun 2026 00:02:26 +0000
Manifest next update: Fri 26 Jun 2026 00:02:26 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: UXFCh2njBcFC6qh61ucwTumYlKsMoEZoVzZnpikrRRQ=)
2: gledw4240Dyd4ySNd3EiBGN_CT4.asa (hash: M04U7guZmUOlclnnZ5JAo58CmLjMUZmoOonluYoN36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:15:c8:55:30:11:bc:3b:ba:a1:91:7d:30:5a:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Jun 25 00:02:26 2026 GMT
Not After : Jun 26 00:02:26 2026 GMT
Subject: CN=b5bf4b97f58450e51eb1c36262d8a2abe72a0666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:6e:16:0e:96:38:a5:9e:9b:17:84:44:4f:
7a:ff:46:e1:a3:ce:89:35:62:1d:2e:60:99:12:36:
5d:35:2c:6a:35:e7:f5:f1:fc:09:61:3a:f4:24:83:
d8:16:5d:b5:06:a2:7d:42:5e:a3:62:01:b7:14:20:
44:e4:85:4a:f8:50:d3:0e:a5:b0:fd:61:37:12:e8:
67:73:d4:58:f4:f3:6c:65:18:63:46:2f:69:28:54:
1b:b5:10:a8:b0:55:2d:77:4f:71:94:7d:8c:c1:c1:
d8:76:c8:ac:4c:03:22:b5:a1:b4:a2:8a:a7:83:fe:
69:56:f2:9b:f4:c3:3b:fb:b7:e7:15:bf:e6:c6:51:
87:c6:ce:af:71:d3:f0:c5:d9:1d:4f:42:8a:4a:2b:
85:4a:11:1b:c5:15:5d:9c:ed:74:2e:e9:f5:89:85:
d5:b9:b5:c5:9d:64:be:45:ad:79:f8:93:d2:3c:fe:
b1:bf:0b:d3:a0:30:68:2c:84:6b:31:ae:04:49:3f:
bd:eb:e9:8b:e3:1d:ce:fb:14:c7:0b:fa:0a:a4:72:
5e:0a:23:b8:b6:f4:23:cd:e2:cc:45:d7:5c:f0:f3:
43:54:48:9c:7a:8a:59:bd:e1:81:ae:e5:b2:43:e8:
08:11:a4:54:5a:0c:1a:3a:60:44:65:da:fd:fa:ee:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:4B:97:F5:84:50:E5:1E:B1:C3:62:62:D8:A2:AB:E7:2A:06:66
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:4a:de:54:5b:08:46:80:a1:2f:8f:3d:f1:21:cc:85:73:
07:15:79:18:1d:71:7c:cd:9b:c2:14:85:e3:96:a0:ed:aa:73:
b3:75:57:2a:99:f3:43:6d:e9:d4:c4:71:a6:b1:9f:bd:1e:44:
94:bc:72:1d:83:f5:f9:5f:a3:75:da:35:a9:7d:df:7f:e2:59:
4a:28:5a:a4:aa:66:c9:43:d9:f5:d6:6f:89:a9:05:8b:a6:00:
ad:8c:4c:cf:f4:0d:a9:08:87:9f:ed:ea:3f:1e:65:33:2e:b7:
51:d2:c6:e0:3d:84:7a:e1:97:43:9a:fa:be:32:2e:65:e1:8d:
ef:1d:b5:d7:b2:54:8e:ef:b5:bd:b9:2d:6f:82:0b:bf:0e:34:
f5:82:0c:94:89:98:79:0f:38:44:6f:30:59:3b:c4:cb:29:d3:
b4:c7:60:eb:c0:83:f0:f9:43:13:88:2b:18:fe:29:f5:e8:58:
87:77:8a:e5:c7:c8:a3:a0:75:44:22:85:6e:11:5e:d7:91:04:
12:fe:b5:db:2c:55:33:1c:2b:18:84:17:ed:c1:24:22:a4:88:
b2:c7:2b:4e:1e:25:71:d1:b7:29:a3:55:39:d0:f5:c3:df:15:
87:a1:48:17:52:72:c0:c6:20:32:36:c8:fe:fc:a0:41:c8:0c:
bd:27:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:41:08 2026 by rpki-client