Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File: MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier: lys23JfINBJarpg7pvdFujRhgFmZVKec40uMqlWxtCA=
Subject key identifier: 89:12:EB:EA:2A:2A:17:D2:55:57:DB:8E:2A:1B:B2:43:36:15:EC:7C
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer: /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial: 019D39AF26D9861D3A102572B59D494EA12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number: 02AB
Signing time: Sun 29 Mar 2026 13:01:13 +0000
Manifest this update: Sun 29 Mar 2026 13:01:13 +0000
Manifest next update: Mon 30 Mar 2026 13:01:13 +0000
Files and hashes: 1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: KhVh7wxfyubvUYvmjqLSlWx4sODxZZe2Dgy1J9L27cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:26:d9:86:1d:3a:10:25:72:b5:9d:49:4e:a1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Validity
Not Before: Mar 29 13:01:13 2026 GMT
Not After : Mar 30 13:01:13 2026 GMT
Subject: CN=8912ebea2a2a17d25557db8e2a1bb2433615ec7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:8f:56:0a:bb:de:f5:4f:5c:4a:db:10:d5:
23:7b:31:ae:3c:a1:13:82:c4:7b:70:e6:4c:5a:95:
5d:bf:cd:32:aa:b6:09:0a:10:0d:1c:50:c3:cd:01:
04:ee:51:b3:5b:28:31:8e:a2:bf:ac:a9:fa:75:cb:
37:ef:34:2d:3b:1d:68:9c:17:22:8a:f2:89:0b:f8:
db:ad:18:1b:fe:3e:16:2c:86:5b:da:2a:14:63:e8:
21:4d:08:32:79:c4:78:86:ad:70:a8:79:e3:a6:20:
24:a1:f8:dc:e0:f6:92:52:15:ab:38:c8:9d:2e:36:
8d:38:b9:9b:5e:e7:03:4a:5e:57:b8:0a:98:94:0e:
9d:7a:47:da:f3:f3:d7:79:e1:92:b4:ce:a0:c4:bb:
f1:83:fd:d3:c9:28:1a:9c:a6:29:bf:1e:3d:39:5f:
08:05:54:c1:84:15:c7:59:62:89:35:d0:fa:55:39:
30:33:0a:56:3c:7f:f4:0a:18:8b:80:7d:9b:f4:49:
3e:e6:05:40:dd:28:34:c0:90:85:b6:e5:3e:d6:d1:
85:09:16:75:55:58:9a:c3:2c:c3:10:17:a4:4f:6c:
6b:ac:75:2e:73:38:c1:4e:e9:8b:82:57:8c:b7:7d:
45:6c:ab:53:0a:bf:91:f7:91:3e:23:c2:b6:2d:55:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:EB:EA:2A:2A:17:D2:55:57:DB:8E:2A:1B:B2:43:36:15:EC:7C
X509v3 Authority Key Identifier:
keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:87:8f:5a:85:69:58:dd:c5:1f:cd:91:b1:6f:50:6a:1a:d1:
ba:c8:d0:92:66:9b:d7:92:1b:7b:74:48:f5:16:0b:66:a5:d8:
01:58:0b:da:1f:c9:63:b3:b8:a1:c7:3a:71:c7:cb:b4:64:d6:
ac:94:c8:25:db:4a:95:e5:c2:f2:f9:73:b8:40:a2:44:57:b9:
a7:d4:88:7a:fc:77:6c:3e:7d:59:36:4b:46:b6:d3:81:a7:cd:
5f:21:7a:b7:51:7b:e7:53:cc:c7:fd:59:70:e4:df:6e:3e:c0:
d3:d3:63:a5:47:5e:d6:69:7b:58:d7:0c:c3:bc:be:4d:bf:a8:
b9:8c:8a:c8:59:1f:fb:e1:0c:df:b6:35:14:c9:a8:c1:ff:ba:
83:c0:28:89:c2:5a:32:76:27:5c:dd:aa:10:65:fa:02:89:42:
b4:d6:21:96:93:3d:8a:cd:ff:30:f8:04:91:46:19:38:aa:d0:
37:09:30:a5:7a:96:e1:ef:6d:99:0e:b0:6b:ef:53:ca:2f:eb:
70:df:27:e6:5e:59:a6:c4:06:b3:d2:ab:11:e2:01:61:34:40:
6d:b0:b1:fa:91:a3:08:c1:a1:69:65:5a:ab:f3:0c:2d:1b:d9:
95:d0:cd:db:1d:61:4d:af:c9:40:23:68:24:2e:b4:8b:3a:64:
03:a1:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:30 2026 by rpki-client