Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File: MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier: peVIgt4FgjYYOSTdckfai8i7WkLV/gyavWvJQnNmKu4=
Subject key identifier: C4:7D:1C:67:B5:4C:18:12:28:B5:53:95:D8:0D:13:10:1E:8D:40:4C
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial: 019D37C0DF6F38C353ED37700E4BF05D66CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number: 0F43
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: PWD21s8VALU5rKCp/R1zjvt+zTVN4VqIKknpdK7VsIY=)
2: wHtvJqmwNCY-vCxa2otVGROt_P4.roa (hash: aFdCOkuMBYohLf36Al1bb/5mWntH9RuXNV5T0j1Zh/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:df:6f:38:c3:53:ed:37:70:0e:4b:f0:5d:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=c47d1c67b54c181228b55395d80d13101e8d404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:9e:58:27:47:e3:9a:0e:22:e6:0f:bf:a3:
e6:1a:89:01:5d:e3:5c:69:7f:c6:91:ef:37:de:c8:
43:4a:e6:09:40:8b:b3:f3:38:90:79:3f:42:b8:66:
b8:7c:dd:d7:ae:a7:44:c4:cb:b5:9d:30:1e:71:8a:
46:95:f4:2b:11:53:9b:87:ad:19:8f:4c:0f:89:a8:
ca:17:48:8d:99:6b:c4:8e:da:9e:9e:52:21:11:66:
6d:fc:18:fd:6a:4e:34:2c:be:af:39:29:35:69:96:
8b:e9:9c:54:c5:ea:7c:aa:f3:97:52:5e:83:cd:7f:
f4:86:3e:ee:62:2a:f3:8d:72:6d:67:0a:d5:61:1a:
37:5c:91:4c:32:b1:91:dd:4b:f8:25:52:a2:3d:6a:
5f:ac:76:e8:7f:5b:0a:25:6e:0a:20:a7:e6:9b:89:
b0:0f:9c:a7:cd:e9:03:7f:9d:af:ba:47:5a:fc:c5:
98:b6:5b:ba:3d:d2:bd:62:6a:49:2b:12:69:f8:d8:
c2:c8:56:5e:29:79:c8:c4:2c:4b:14:81:70:1f:5e:
ee:a6:12:df:95:c5:83:7f:0c:e9:78:d3:14:61:08:
66:81:da:cd:c9:95:ba:02:0f:eb:c3:3a:4c:4f:a5:
9f:b2:90:92:3e:6e:05:b1:95:33:20:d9:1e:17:86:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7D:1C:67:B5:4C:18:12:28:B5:53:95:D8:0D:13:10:1E:8D:40:4C
X509v3 Authority Key Identifier:
keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0b:de:5c:ba:69:7f:8b:c1:c9:01:bc:bf:22:14:2e:89:19:
4a:35:c6:d2:50:56:fd:c6:de:f1:45:8b:af:58:72:f7:85:a3:
25:bc:0a:3e:78:2b:6f:e5:95:a6:ff:c3:e8:71:87:d2:f3:02:
5d:b1:b1:f9:fe:5d:fa:fe:f7:8b:31:f3:58:e9:31:ad:85:ca:
7f:70:3d:cc:16:9c:09:63:fd:ed:c3:01:a7:58:32:95:87:d9:
7a:82:ea:e3:a2:00:a5:cc:7b:31:57:fc:cb:39:bb:88:0f:98:
6d:cb:e3:bb:7e:e3:31:9a:93:3d:df:c8:7f:69:6a:78:2b:8e:
6c:a8:93:47:93:a0:53:57:1f:75:e0:07:4a:75:9f:82:62:67:
a8:99:b0:38:09:86:28:4a:3f:d6:32:88:c1:46:69:f9:c3:fd:
f7:28:39:d2:3e:f1:ca:ca:7d:99:6b:59:91:10:bc:4e:cb:91:
5d:20:98:98:26:0e:b0:c7:97:61:10:93:c1:07:08:73:20:24:
45:4e:11:54:b2:aa:af:a9:fa:8c:20:2f:c2:53:e0:9f:a2:dc:
c2:82:e4:97:bf:b6:5e:51:af:71:6d:f9:52:12:c0:b8:36:3d:
0e:16:0e:f6:3e:a6:29:13:c1:e8:74:1e:23:62:86:2d:f0:4e:
00:4c:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:03 2026 by rpki-client