
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
File: mJtzAF6_GeDG34diTlXwcnr0P_U.mft (raw, json)
Hash identifier: 5PQ1ehM0uskDTlX/cdNVP2vSXp2ofw96LBWqsdsnZgQ=
Subject key identifier: F3:02:80:05:9E:B2:15:2D:80:C9:B5:39:76:C8:EB:6D:1B:79:7A:09
Authority key identifier: 98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5
Certificate issuer: /CN=989b73005ebf19e0c6df87624e55f0727af43ff5
Certificate serial: 019D371BDF176E4858D5FD3C68646E615C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
Manifest number: FD
Signing time: Sun 29 Mar 2026 01:01:06 +0000
Manifest this update: Sun 29 Mar 2026 01:01:06 +0000
Manifest next update: Mon 30 Mar 2026 01:01:06 +0000
Files and hashes: 1: mJtzAF6_GeDG34diTlXwcnr0P_U.crl (hash: dRTywO4MiLlj7ctxqd3RlC38676TVzHSCgAhkQ+G348=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:df:17:6e:48:58:d5:fd:3c:68:64:6e:61:5c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989b73005ebf19e0c6df87624e55f0727af43ff5
Validity
Not Before: Mar 29 01:01:06 2026 GMT
Not After : Mar 30 01:01:06 2026 GMT
Subject: CN=f30280059eb2152d80c9b53976c8eb6d1b797a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:8c:e0:12:47:81:86:f1:90:ab:43:d8:3f:
1e:f4:24:3a:6c:30:04:33:0d:36:1d:43:c7:08:17:
ea:28:39:8e:d8:fa:a4:47:a2:36:85:32:1c:10:2b:
1d:4e:d1:52:54:c4:24:f8:3c:49:05:b9:0e:aa:89:
36:18:58:cb:0b:cc:a9:27:cf:6f:4c:4f:c8:54:f7:
c1:85:21:0e:f4:d3:be:07:1a:18:ff:5f:0b:57:3e:
65:81:0e:89:a1:b8:dd:ce:bb:c8:98:f4:d4:03:20:
16:8b:09:71:b9:8d:6d:dd:e2:c7:c9:56:02:df:c1:
77:c4:68:25:d2:80:43:0f:87:dc:67:ab:51:ca:ff:
12:45:b8:a4:89:5a:fe:e9:38:48:b5:08:3c:ba:fa:
21:75:e1:b4:53:50:e0:42:da:ef:10:3e:91:86:f6:
3c:72:93:e5:99:12:5f:62:55:9d:4c:65:07:6f:0f:
62:72:96:a8:a4:68:92:4b:c9:ac:d6:95:3c:14:18:
e1:e2:64:d6:bd:dc:5f:9c:cf:ef:31:1e:25:65:32:
d5:ec:ec:39:e3:20:d4:ae:46:0a:1d:90:9b:c2:e1:
fb:02:38:66:3c:b0:08:4c:95:71:a5:57:9f:3f:64:
91:db:ca:ce:bd:8d:6f:10:86:20:50:73:30:f2:ea:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:80:05:9E:B2:15:2D:80:C9:B5:39:76:C8:EB:6D:1B:79:7A:09
X509v3 Authority Key Identifier:
keyid:98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d0:ba:64:e3:06:f4:36:64:1f:8f:f0:09:29:f1:78:e2:8b:
3c:d0:e9:20:9c:7f:10:1d:04:64:a7:d1:e8:0f:ee:8f:61:9c:
42:d9:ae:5e:db:ba:fa:d3:c4:31:a1:1f:5b:60:f2:d1:65:2f:
42:54:9c:78:43:a5:6c:73:8d:38:9c:23:f9:ca:1f:43:27:a3:
93:6f:94:09:2d:33:5a:3d:79:10:c2:d0:dd:13:26:54:85:28:
48:ca:c4:d2:82:c1:3b:61:0f:7a:53:c3:45:43:57:97:6c:7a:
f1:21:9c:e4:8f:e5:3d:30:e7:9a:ad:74:db:a4:d7:80:ed:00:
a3:fe:d8:c5:ef:9e:f6:4a:1b:f9:ba:bb:cd:74:0a:6e:08:9e:
3d:21:b1:91:25:d3:36:eb:b7:d9:4e:c4:90:a7:e5:c8:5b:8f:
28:be:c3:86:63:08:5c:aa:72:dc:fb:6d:9b:4b:de:86:51:68:
11:b2:18:df:eb:35:13:9e:ec:52:d8:59:3e:b7:04:11:be:0f:
6c:36:b8:1b:4b:b0:85:e8:c8:f8:e4:c5:f0:50:41:aa:46:f0:
f2:48:34:26:ba:d5:99:23:52:fc:4f:4b:28:b2:9d:04:8d:a3:
1b:91:a1:ab:cb:3c:e9:58:e5:88:79:14:55:2f:cd:7a:70:2e:
d4:5b:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:43 2026 by rpki-client