Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier: 3N6TJJvyFQQu9wHGeB0J/ldqXL6dJDe1ZP7D7jbgtnI=
Subject key identifier: 8C:B0:16:51:DE:69:B0:5F:5E:6A:B9:D3:1F:4C:23:9A:5C:E0:50:5B
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial: 019D3866651FEB855D4B035A0E9545C968AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number: 0DC7
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: VVmtVFI52SP1cZB3Z3fu2U0zX0zNcMA1DSojMuaE73M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:65:1f:eb:85:5d:4b:03:5a:0e:95:45:c9:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=8cb01651de69b05f5e6ab9d31f4c239a5ce0505b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:85:24:39:35:e3:bb:d4:04:bd:ec:8e:2f:
5c:e7:ee:fb:c8:de:ca:f0:03:46:ac:2f:6f:05:d5:
ad:61:de:47:28:c9:b3:b9:2a:3d:80:b6:42:76:44:
0c:0b:02:7a:39:ff:b2:bd:40:2a:6f:f9:2c:15:66:
18:2f:5f:98:7c:07:02:11:eb:64:fb:d8:e6:aa:6a:
9c:10:cc:12:cc:4d:b3:75:55:d9:ff:b4:17:47:be:
fe:0a:95:b1:c7:8a:04:fb:f4:9c:55:07:ad:e9:f9:
35:c9:bd:e1:1a:76:34:b4:78:b2:d2:dc:8a:fb:30:
c4:e2:c1:0e:2d:69:88:e6:cf:cd:aa:97:62:b8:94:
34:50:34:75:35:a1:2d:04:5e:61:f1:02:81:18:50:
8f:d7:4e:e1:9b:f6:f6:a0:ea:1a:5a:4d:90:b1:bc:
6a:7d:6b:6a:73:56:53:f3:7b:77:49:1e:0e:43:df:
a5:0b:c8:1a:a9:00:06:e4:d9:ac:f6:3c:af:35:5a:
9f:b6:a1:e1:09:f6:66:9f:a6:dc:6e:3e:e4:c3:4a:
a0:25:75:a7:5e:1c:4e:81:81:53:2a:2d:0e:4b:f3:
b1:6e:91:96:c1:a1:70:4a:32:87:d2:b7:6c:78:f8:
c5:ec:6e:ce:78:2d:c2:11:95:f5:a2:40:1d:5b:49:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:16:51:DE:69:B0:5F:5E:6A:B9:D3:1F:4C:23:9A:5C:E0:50:5B
X509v3 Authority Key Identifier:
keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:41:ed:14:1d:9b:0d:8c:26:9f:48:cf:10:cb:e2:a3:e7:23:
e0:a3:b8:37:e9:a6:1d:df:17:69:87:98:a6:ec:db:5d:bf:9e:
0e:ad:fa:48:db:ff:f4:bf:a8:f8:47:c5:e1:ac:42:a0:c5:dd:
1e:0f:46:c8:97:6d:61:1c:de:87:83:da:ff:14:b9:6e:5d:83:
55:ea:62:47:04:3c:db:77:33:7c:d8:e6:20:ad:a3:a8:6a:25:
2b:3d:ce:c7:b6:11:11:ba:0a:e4:52:80:99:dc:31:59:7a:8c:
14:de:81:3d:a9:99:c8:3a:7f:1d:1a:bd:0f:0d:7c:a6:8f:87:
d7:22:50:40:cc:b2:70:08:99:c3:e7:65:49:69:c2:dc:ce:e8:
bf:38:02:00:ff:c7:04:cb:7f:f3:52:a0:22:66:aa:cf:ec:96:
ce:ff:ef:9e:d0:5a:77:17:e5:52:42:6a:16:19:a2:5f:e1:f3:
32:e6:40:85:85:53:ec:65:c6:bc:07:9a:be:b4:c0:93:d0:35:
07:dc:82:44:ac:71:15:88:ed:f6:11:f3:ba:24:0a:bc:a4:48:
58:25:36:e7:a1:31:6d:e9:4d:45:e1:99:5d:4d:2c:d9:57:25:
69:b4:4f:cc:a9:e3:d8:c3:20:3f:76:b8:07:a7:31:34:8d:11:
0c:90:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:39 2026 by rpki-client