Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier: ULJEhxKrG0aUmcri1M9WrTUMokYReWkLjK5gqUDfA3o=
Subject key identifier: 97:01:BB:6D:8A:37:2D:7B:2C:0A:35:47:AC:99:EE:76:CF:9D:AB:10
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial: 019D3865993AFAEDECEE5EFDA04444B05758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: JO1IDs9Q5fSyiy/hV31oQz7/0kJk5+gUdsk3p0bkpzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:99:3a:fa:ed:ec:ee:5e:fd:a0:44:44:b0:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=9701bb6d8a372d7b2c0a3547ac99ee76cf9dab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:5f:43:ce:8f:81:00:ec:b9:96:86:6a:97:
06:95:a6:67:be:4d:12:d7:1c:2e:8a:85:1d:88:72:
45:83:65:e3:61:87:72:6b:a1:4a:23:0f:8e:59:03:
fd:8b:fe:30:68:22:a2:cc:7c:9a:55:2b:47:62:35:
72:49:15:24:38:6a:e3:70:41:9e:f8:95:99:32:a9:
07:d4:c8:6b:d0:ab:c5:33:1e:fb:6e:49:6d:90:8a:
5b:28:7d:ad:3e:ef:02:f5:74:4b:7a:70:c3:12:22:
59:e5:e5:1a:c5:cb:d8:50:88:d7:82:ea:ba:25:55:
d0:9e:90:cb:35:1f:b8:e7:f8:05:e2:5c:11:bf:96:
eb:af:0c:81:29:21:37:ec:81:6c:57:12:f2:c2:39:
20:b8:7b:5c:b8:f8:b8:e6:08:97:48:76:1f:81:db:
52:37:68:a3:fe:ae:22:87:a0:9b:8d:e8:31:bf:b7:
10:ea:c8:87:cd:df:69:68:21:f4:8c:a5:14:a1:fa:
4a:6d:dc:3e:f7:44:e3:eb:2f:71:00:65:fb:23:f4:
62:2d:74:81:1e:66:af:10:e9:9c:37:54:2e:a8:b1:
09:3c:04:60:f9:45:a1:f5:ec:73:0b:f2:35:31:28:
d3:9b:38:b2:f0:47:9b:8a:3c:b5:31:59:24:94:0f:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:BB:6D:8A:37:2D:7B:2C:0A:35:47:AC:99:EE:76:CF:9D:AB:10
X509v3 Authority Key Identifier:
keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c8:a6:89:14:ad:c4:b1:98:ee:62:3c:cc:e6:7d:7a:d5:7a:
6f:2d:e5:87:74:c6:c8:70:f9:b0:98:35:6e:9e:da:ea:ac:01:
4b:e4:4d:07:f3:10:c1:50:91:1c:87:fa:84:98:f0:21:ea:0a:
6b:af:db:7d:ce:c0:07:1b:4f:60:1b:97:88:2d:61:7e:9c:ef:
55:8f:25:b8:62:f9:5b:09:a9:ff:dd:53:44:c0:bb:d5:a4:23:
06:a5:e9:8d:90:4c:75:2b:e0:d4:30:55:8b:9d:87:79:9d:ee:
ce:92:28:65:99:90:62:36:0f:fd:e2:b3:b9:69:a8:84:f6:2f:
15:33:30:41:cd:95:89:3a:a6:d2:62:43:54:af:f2:83:99:35:
c5:22:76:64:d3:42:14:48:23:04:ce:ac:98:1e:ea:e9:1b:f4:
c0:c1:84:fa:bc:85:bf:22:36:f6:91:2e:6f:8b:c9:6f:9c:1d:
32:d4:cc:19:09:1c:71:c6:02:ca:a1:32:37:87:18:12:ed:2f:
a1:85:43:45:ab:16:ce:9b:bd:3c:bc:2a:2a:11:0e:86:50:fe:
f0:88:c0:7f:3a:52:4a:8c:a6:1b:dc:d4:f6:a6:a7:97:fb:66:
9a:09:ef:fe:fc:c6:3a:fd:96:3e:6a:5a:c1:3c:31:7f:79:ea:
5c:db:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:37 2026 by rpki-client