Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: rLBc1C6aviY6rCKh4l4tKTu2EKLD+a4e8/F7UozIYjU=
Subject key identifier: 0D:8B:80:C4:E8:EB:E7:6D:05:28:7D:66:55:D5:70:E5:EB:F8:F5:C0
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 019D394189939BF9DCCA6F160A9118E35729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 1560
Signing time: Sun 29 Mar 2026 11:01:29 +0000
Manifest this update: Sun 29 Mar 2026 11:01:29 +0000
Manifest next update: Mon 30 Mar 2026 11:01:29 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: QwSw5uyoBAJQwdXT37ntZStsgvBrTFzApRAXa5Vquis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:89:93:9b:f9:dc:ca:6f:16:0a:91:18:e3:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Mar 29 11:01:29 2026 GMT
Not After : Mar 30 11:01:29 2026 GMT
Subject: CN=0d8b80c4e8ebe76d05287d6655d570e5ebf8f5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:b2:bf:89:cb:10:4c:6e:39:8d:4d:6b:39:
0d:da:1c:92:b7:fd:10:19:d4:8e:aa:e5:11:72:a1:
ad:27:bc:5c:e4:6a:6c:e8:65:b6:cb:ef:a8:d8:84:
93:0b:5d:13:bf:c3:33:42:c1:02:f4:72:e7:43:2b:
7a:24:b3:fa:09:e4:11:e2:39:04:89:b8:03:b8:34:
db:13:67:04:18:e5:91:6d:bc:b4:fe:e8:72:b0:86:
5c:8b:d3:a3:a1:66:d3:05:33:cd:d9:8d:0d:d4:7d:
f9:66:2c:6b:61:25:fb:20:88:0e:91:84:2e:d9:55:
e1:af:0f:73:0a:28:e1:39:cf:48:90:70:f3:fe:83:
66:51:cb:bd:7a:86:8e:4b:36:ac:9d:f2:bb:e8:64:
71:2e:63:89:a7:86:bc:9a:21:5a:ef:f3:a1:d5:c1:
bb:4c:7b:78:34:18:a6:d8:6f:3b:f9:6f:24:9a:2c:
cc:26:c4:12:16:9d:19:53:50:bc:2c:bb:9d:4e:d5:
dc:c0:4c:88:4f:d4:0b:7a:3f:d0:1c:12:b6:9b:db:
a2:2b:48:aa:15:5c:87:92:41:24:74:46:02:41:e5:
a4:22:93:85:14:37:d6:26:ac:3b:bb:ba:fc:7d:c8:
f0:54:ac:ee:8f:5e:fe:1e:7e:06:dd:e1:4a:b3:76:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:80:C4:E8:EB:E7:6D:05:28:7D:66:55:D5:70:E5:EB:F8:F5:C0
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5f:41:cc:ba:c7:b9:85:f6:77:ea:ca:26:20:6b:6f:74:e0:
22:6e:90:19:c0:20:cf:b1:51:65:74:48:2a:c6:4f:6b:99:7b:
36:3a:1c:06:5e:e6:f8:bc:98:4b:5a:92:86:b5:66:3c:ab:0a:
0a:32:82:8c:aa:89:3b:62:c3:6c:16:78:80:62:91:4a:15:45:
58:02:7f:c4:98:b8:62:48:74:db:f5:03:b5:49:13:f2:ee:ad:
3b:0a:59:3b:94:a9:1a:01:08:11:d5:88:43:ab:00:26:0b:92:
0f:ca:b8:fb:ee:10:e7:04:07:1f:b1:f9:6f:77:fa:24:e8:d1:
72:f4:71:be:d4:47:be:3a:2f:2d:1c:05:18:8b:28:29:d9:fa:
99:26:d4:2a:f6:75:77:1b:99:46:f3:53:0c:b0:5d:fc:c8:29:
df:ca:46:22:fa:1e:23:c3:2a:c5:73:36:bd:47:0a:e3:9d:da:
c8:28:39:0f:96:8c:b1:e0:ea:cc:00:7c:82:66:ec:09:7c:0b:
5c:50:62:64:fb:86:6e:39:0c:f1:2d:12:28:6e:32:d6:5a:fa:
43:6a:50:84:f0:69:0f:ae:53:0a:4f:43:e3:ee:8d:e7:55:49:
80:44:8f:ff:3b:3d:44:ca:9e:81:32:c2:49:12:67:af:30:87:
3f:ee:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:13 2026 by rpki-client