Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: GIUvMFvJhdV4pooMnlpllFrLvx+JCZ8j0LOqBPFRPsg=
Subject key identifier: B3:24:73:26:41:F2:41:63:24:81:07:B3:3D:F1:A4:21:25:8D:DB:04
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 019D37522ABC5FD1944C07D1054898700120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 136F
Signing time: Sun 29 Mar 2026 02:00:24 +0000
Manifest this update: Sun 29 Mar 2026 02:00:24 +0000
Manifest next update: Mon 30 Mar 2026 02:00:24 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: XceJT5e/j12msCKkocn9lQTQSpdMg6lx47rzgfVNB3Q=)
2: Q4ow8LCimKzjYqCIeM6du1pQCj4.roa (hash: gGIn6jSJgA0OXpF2GsDtGiH/BCzdqF5tX7x9AZXnSTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2a:bc:5f:d1:94:4c:07:d1:05:48:98:70:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Mar 29 02:00:24 2026 GMT
Not After : Mar 30 02:00:24 2026 GMT
Subject: CN=b324732641f24163248107b33df1a421258ddb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:5d:6c:4f:c7:de:d6:30:38:61:5c:ea:f9:
4f:01:19:de:20:19:3f:3e:98:c3:f9:4b:57:bf:1f:
a3:9f:8f:36:ec:d0:35:40:2d:80:51:6c:f7:92:ae:
23:0d:b2:22:2b:de:0b:44:a2:1e:23:2d:ea:cf:14:
63:19:46:fd:2e:82:37:07:be:0c:a8:63:3b:39:db:
06:60:2b:0a:ff:81:07:9f:36:2f:52:61:da:c6:52:
47:04:4c:06:fa:55:9f:a5:ce:6d:2e:c1:94:81:eb:
c3:bf:e5:3f:81:e3:4d:cd:77:12:e0:01:0e:ce:5b:
46:17:f0:4c:40:a9:10:8e:4a:b5:f5:32:ef:c4:05:
55:66:4e:f7:db:50:a4:41:7d:c2:72:fb:54:fc:01:
7e:2d:77:98:47:39:cf:3f:02:41:20:64:fd:1c:38:
8a:77:9e:c8:9b:c6:ba:5c:77:ab:03:f3:33:f7:23:
09:6b:0b:1a:4e:7f:b8:d6:0f:54:f9:58:55:72:92:
86:13:ce:6f:c6:8e:b5:78:e9:13:14:a9:3d:be:ca:
24:fd:51:e6:a9:32:ae:dc:35:cc:6b:e5:fc:14:6b:
53:27:93:dc:7a:64:53:66:c8:3a:e7:f8:31:fd:b7:
36:80:c3:7c:97:15:01:b5:e4:2c:de:1a:94:37:e7:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:73:26:41:F2:41:63:24:81:07:B3:3D:F1:A4:21:25:8D:DB:04
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f7:60:16:35:7b:94:b5:51:42:b1:91:19:0c:b1:0d:2b:fe:
28:77:89:bb:75:c3:0e:a6:ac:fe:06:f7:4e:b1:94:73:64:45:
04:79:bc:c8:b0:92:2f:92:d3:dd:e5:31:ba:4a:58:5c:7d:71:
ed:ae:db:5d:40:12:7c:5a:a8:4b:34:9f:1b:f9:55:87:4e:c5:
9d:72:7c:fa:51:a8:d4:12:a3:b0:f3:55:48:86:2f:10:4f:d5:
b4:e7:29:f3:c3:02:5d:f7:4b:e1:50:cd:7a:e5:7f:e4:38:70:
4d:4a:05:f1:d8:8b:5e:94:14:df:c6:86:91:de:10:30:c5:75:
a4:82:82:b7:34:ad:b2:93:aa:b9:c9:54:1f:07:ee:d8:14:fe:
8c:8e:1a:70:e5:b1:5e:1e:68:6b:b7:41:c9:ad:35:6c:96:36:
c3:d3:f0:28:59:41:6b:32:ce:ab:9b:09:33:db:8b:0b:f7:56:
d9:52:06:b3:a0:31:24:f0:a3:21:ae:40:e5:ab:f2:d0:3d:94:
c0:29:60:60:9f:1b:04:27:de:2a:ab:87:21:1d:d5:0f:e8:56:
10:c7:50:28:2b:28:f8:db:95:67:59:b5:dd:69:f0:74:8c:8a:
1a:ba:58:cd:64:15:3d:46:a7:23:39:2a:68:ef:55:c0:c9:dd:
f2:d0:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client