Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: NxqQVAqNwtjggN1pmUX0d/h2Zc0h/BT0CFn4brUN4Yc=
Subject key identifier: 99:49:DB:5F:28:2D:0B:CF:CC:E3:02:3E:3E:3C:F7:21:FD:08:48:F4
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 019D3AF7F1E65EDACA8BFDD890DFAE2FC5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 15D5
Signing time: Sun 29 Mar 2026 19:00:20 +0000
Manifest this update: Sun 29 Mar 2026 19:00:20 +0000
Manifest next update: Mon 30 Mar 2026 19:00:20 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: OS5R4WRRRrmpNjQDEz6AvfXH2I0ZdlKCnIo3QzK6mJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f7:f1:e6:5e:da:ca:8b:fd:d8:90:df:ae:2f:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Mar 29 19:00:20 2026 GMT
Not After : Mar 30 19:00:20 2026 GMT
Subject: CN=9949db5f282d0bcfcce3023e3e3cf721fd0848f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:e7:b1:54:21:da:81:3b:34:cd:9c:34:0b:
20:c8:d1:c6:75:93:04:0f:23:3c:81:b7:e5:69:b7:
e8:d2:b4:bd:ab:69:27:25:76:90:a0:ad:d2:aa:ff:
3a:bc:07:a5:d8:b2:66:79:a4:74:df:e7:6c:9f:46:
70:f9:7c:4b:a4:7e:74:01:19:ed:17:67:e1:7b:b5:
00:ab:a7:8f:ff:6f:cd:19:d3:5f:38:78:86:81:74:
66:16:da:04:b2:ed:9e:73:db:90:98:7b:89:e2:60:
6e:00:f9:79:74:83:8f:94:ff:15:ff:84:39:03:83:
4c:37:b8:d9:7e:d2:86:73:e4:ba:ea:9e:f8:b6:d7:
0c:4b:fb:09:0b:2a:42:08:f3:d8:62:77:40:3c:85:
15:c0:c4:34:5b:5e:ce:26:20:da:74:08:6a:f2:dd:
3b:37:1b:03:37:de:72:79:23:f3:36:d3:d0:46:ea:
63:d6:9f:bc:d1:e7:43:54:94:28:73:83:33:04:92:
d6:d4:71:40:df:6d:bc:62:2c:37:f5:4e:18:fe:41:
e3:3f:d5:7a:be:86:9b:d2:3d:ef:18:9e:c5:b6:03:
71:65:3c:35:81:82:59:15:d9:85:1a:1f:7c:19:c8:
f0:f3:0d:33:24:48:8e:10:a8:0d:06:e5:e5:58:1a:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:DB:5F:28:2D:0B:CF:CC:E3:02:3E:3E:3C:F7:21:FD:08:48:F4
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0e:78:5a:96:bc:05:78:8d:4b:d4:9a:d3:42:ee:dd:4b:d0:
ef:f8:c9:c3:3f:e1:81:05:db:36:e4:67:ed:b0:76:62:77:7a:
7d:17:95:06:e4:94:af:cb:da:c4:16:00:d8:cd:fd:58:2a:cc:
19:94:5e:fd:ca:72:77:17:78:c1:ba:58:87:18:90:8d:ab:29:
6d:85:df:9a:44:9f:f3:68:59:7b:29:36:fc:2f:73:c2:17:21:
c0:f2:e2:86:89:45:36:b0:6c:50:a7:70:5f:e6:a5:d3:ef:ee:
88:22:8d:94:06:e5:8f:68:04:24:bc:e2:57:e8:34:49:45:9f:
ab:63:cb:9f:b6:17:81:06:3f:d1:ec:60:0d:08:c3:32:90:ab:
63:50:1a:f9:4f:76:a6:90:5d:c6:5f:c3:dd:58:9e:c0:61:f6:
1d:be:bd:e0:cd:d5:dc:5d:9c:9d:23:91:f0:f8:ef:53:be:ac:
7d:9a:72:e3:2e:e9:67:c0:66:11:e5:10:ba:d2:ce:cc:79:b3:
2d:aa:14:ac:9b:cf:9e:05:f3:5c:2a:5f:cd:2c:f1:9d:d7:ce:
fd:fe:56:27:89:39:0e:21:3c:dd:46:18:8c:ea:4e:89:3e:5d:
d5:32:7b:a3:66:2c:82:4d:ef:8b:f3:12:9a:3f:bf:44:b4:80:
85:61:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:53 2026 by rpki-client