Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: uh0T2fwc+v3QRcF14fDUQTq3YnPPBeo1OB06UBUmTOg=
Subject key identifier: 12:89:98:50:91:81:67:E7:D0:A8:1C:6A:8E:62:1D:D8:2D:1A:DD:32
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 019DDC54F7E9CAA95224A50ED60C4EE3CA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 84
Signing time: Thu 30 Apr 2026 03:00:49 +0000
Manifest this update: Thu 30 Apr 2026 03:00:49 +0000
Manifest next update: Fri 01 May 2026 03:00:49 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: J+fDleK93UZQoXE04IOZZ4iaGB9SuCIuk8bXh1DB/xs=)
2: gledw4240Dyd4ySNd3EiBGN_CT4.asa (hash: M04U7guZmUOlclnnZ5JAo58CmLjMUZmoOonluYoN36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:54:f7:e9:ca:a9:52:24:a5:0e:d6:0c:4e:e3:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Apr 30 03:00:49 2026 GMT
Not After : May 1 03:00:49 2026 GMT
Subject: CN=12899850918167e7d0a81c6a8e621dd82d1add32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:cd:4d:87:75:31:ec:d5:35:35:67:34:6b:
eb:a8:1d:98:07:d7:ad:26:cf:13:fe:e1:00:4f:e2:
6d:7e:2e:8c:20:98:70:29:60:d5:e5:2a:5e:da:37:
21:6e:4a:b1:50:b5:80:af:f3:47:69:ce:2c:7e:5c:
dd:5b:d0:6e:83:0c:ef:17:c9:a6:84:f6:88:de:dd:
16:b2:6f:bd:52:24:5e:d0:6f:1b:b0:e7:69:9a:ff:
8b:fa:92:9a:26:21:32:cc:48:53:c1:1e:ae:7a:5f:
a7:41:64:c4:64:66:88:b9:f2:bb:9c:be:d5:01:1e:
cc:9a:65:19:72:77:84:cc:f8:0b:cd:2b:59:7e:b7:
f8:9b:0b:5d:64:d0:37:e7:98:c8:2e:af:9a:a6:c9:
9a:f6:30:12:7f:ce:96:53:8e:67:cc:82:38:13:60:
7d:34:1f:2c:53:2a:75:4e:a7:2c:b9:36:cf:ec:01:
67:78:1a:5c:1a:58:ef:15:dc:65:33:97:de:f1:1c:
62:25:7b:7e:ac:5f:16:51:ca:66:fd:4c:82:d7:f4:
85:16:f4:b4:f1:98:45:21:d5:fb:d0:1e:43:57:ef:
d0:8b:6e:f8:f0:0c:9f:82:69:7f:4d:73:60:60:64:
94:17:62:47:97:6e:0c:14:45:68:50:33:f6:8c:fe:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:89:98:50:91:81:67:E7:D0:A8:1C:6A:8E:62:1D:D8:2D:1A:DD:32
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:0f:ff:a3:f8:32:7f:1b:f1:5c:c3:9e:97:d4:cd:20:62:
b8:fe:df:b5:e3:12:1b:a6:d8:aa:db:dd:75:ef:dd:61:65:23:
17:4f:d3:fd:ad:d0:f7:95:ea:77:a4:fc:55:87:16:4f:4b:02:
bc:5c:48:dd:d6:88:b7:cd:56:5f:a7:bf:71:50:75:0c:a0:90:
d8:ac:c3:ad:2b:56:3a:e7:84:bc:f6:2e:0d:dc:0a:e5:ba:17:
da:77:80:93:d7:8a:55:49:0a:62:c2:3c:e9:cf:38:21:5a:a5:
d2:65:67:cc:e6:ea:26:2a:20:da:ec:67:a9:96:56:8a:24:0b:
29:c9:68:68:75:a4:a9:a7:af:24:51:79:34:1b:d4:18:c6:ad:
98:95:e0:9d:94:d9:49:51:c8:ec:1e:df:6d:49:6c:ab:99:14:
4b:4b:ec:58:6e:c5:51:13:1f:02:4c:66:db:03:5a:73:a8:bc:
f5:96:a5:6f:99:67:87:84:e9:7e:4c:ba:e2:f3:e3:02:f5:82:
d4:e5:0a:d5:56:b5:59:b4:90:15:90:3d:72:fc:d5:c3:a9:be:
27:07:5e:02:55:31:40:e1:b3:b1:e6:e9:85:ac:98:9f:9c:09:
19:28:4f:82:40:fa:56:0d:0c:b4:06:96:c7:a8:c5:9a:18:5e:
79:c1:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:57:12 2026 by rpki-client