Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier: OtgonAYQgCHHcK+QiKKSBBmFp/DUr2NtdgTh6PkjScE=
Subject key identifier: 3C:40:3A:25:F5:5A:1A:45:65:EB:17:BA:7B:7F:BA:C3:D7:63:24:F2
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer: /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial: 019D3A1C74DC2DDB84B6A0430120F249CAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number: 0782
Signing time: Sun 29 Mar 2026 15:00:36 +0000
Manifest this update: Sun 29 Mar 2026 15:00:36 +0000
Manifest next update: Mon 30 Mar 2026 15:00:36 +0000
Files and hashes: 1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: sj7KGq0tLsutSJWZEc2WTR8l2sFDt+7v0uv5towbkgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:74:dc:2d:db:84:b6:a0:43:01:20:f2:49:ca:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Validity
Not Before: Mar 29 15:00:36 2026 GMT
Not After : Mar 30 15:00:36 2026 GMT
Subject: CN=3c403a25f55a1a4565eb17ba7b7fbac3d76324f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:b2:27:a0:55:8c:ec:6e:6f:60:e5:bf:58:
f7:37:67:e0:19:89:b4:ad:be:31:46:69:97:29:ce:
d7:e9:76:42:a9:c9:a5:87:fd:ce:91:49:98:d2:fd:
22:7f:79:ff:3d:75:16:51:ac:da:eb:2d:56:1b:c6:
48:bc:68:50:ef:72:79:33:32:5a:19:44:f0:04:ae:
88:61:36:46:c9:c8:d4:64:03:1d:5c:49:b8:26:56:
fe:e9:ab:7e:5f:c1:ae:db:54:4c:0c:9d:70:17:3c:
c0:d6:9c:d6:4b:96:8b:01:bb:3f:a2:e5:18:d6:fb:
1a:4a:5b:67:1d:76:cf:78:d5:9e:47:78:5e:20:32:
bf:7e:b9:8d:44:35:76:21:40:a3:b3:7d:80:50:28:
98:71:ab:f1:52:85:69:ad:50:6b:93:25:35:67:4a:
b2:d6:9e:d3:48:02:ab:66:72:4f:53:41:d8:79:5a:
c4:c1:35:c7:0f:b4:47:66:69:e1:5c:21:c5:49:dd:
7f:2b:08:2d:db:d2:18:77:87:a0:57:5e:20:88:b8:
55:7f:a4:7f:81:38:9b:92:c8:5f:c2:73:09:76:f0:
b2:94:87:6d:af:07:e4:cc:c3:3c:c1:b5:8c:f0:58:
cf:3a:32:ac:30:0a:1f:a7:13:b1:86:1b:5c:05:46:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:40:3A:25:F5:5A:1A:45:65:EB:17:BA:7B:7F:BA:C3:D7:63:24:F2
X509v3 Authority Key Identifier:
keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a0:41:6d:2b:99:08:b9:9e:e8:5f:06:8b:ca:24:0a:72:a6:
24:a4:76:9f:3c:9a:d9:a0:b7:37:b1:81:a8:7f:f9:a6:29:00:
f7:d0:70:35:da:25:1a:fa:cd:fe:b1:ed:86:28:f8:cd:86:cb:
37:97:02:36:de:64:14:50:b2:93:e0:3b:a7:98:59:1c:b3:a4:
fa:88:7b:41:ae:e7:6a:4d:02:cd:e4:04:53:82:61:8e:39:b5:
89:25:c1:8c:d8:e5:bf:09:3a:9c:3c:48:c1:de:43:0f:9c:3d:
03:33:4a:36:e9:0c:84:96:df:97:56:d2:e4:e7:2a:3c:3a:1f:
58:3c:fd:1f:0d:c3:09:e4:d5:86:3c:f1:a0:6c:b5:cb:b4:50:
bb:1f:7d:43:85:9c:0c:c7:45:5b:17:e4:b7:a6:8f:3d:de:d7:
27:91:c5:42:57:b0:ea:1e:9d:cc:16:9e:d1:73:f3:24:af:f8:
42:48:7d:0d:25:cd:43:1b:55:31:8e:23:d2:15:cf:73:c1:c4:
30:91:ed:c8:9c:70:ae:90:4b:51:3a:02:b3:36:65:58:45:28:
e5:0a:fd:40:a2:0e:4e:e3:d5:30:a4:13:8e:7d:68:3b:31:80:
1c:d7:96:e3:76:17:27:ae:0b:1a:ca:d0:1c:9c:31:1b:83:c8:
aa:00:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:09 2026 by rpki-client