Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier: 8dMu3JV8M4Nkit9pAha113AlLFVx6kfEm8Eqcrm3jc0=
Subject key identifier: 46:0D:2B:59:6F:73:EF:9C:20:A2:CB:E8:E7:2B:46:E1:F2:92:E0:D4
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 019D38661CAC3C3DACE4814E2DA3840FE5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number: 0E31
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: 1J6l3cMSnuIcTlRK3pecYgH4jLFs9u2pY5+7WI2dH2I=)
2: xTiLnHWcIQBHKnAP3nk781_h0ew.roa (hash: mpbRYgyuoRfIkLm2Fm4iWJpaOkfkeiX8G2PJJeVWGQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1c:ac:3c:3d:ac:e4:81:4e:2d:a3:84:0f:e5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=460d2b596f73ef9c20a2cbe8e72b46e1f292e0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:8d:da:40:2a:3f:43:61:c5:c6:3b:6e:a4:
66:f0:3c:90:6f:5a:22:1b:26:71:72:94:51:c6:70:
76:41:b3:40:13:10:4c:b6:69:03:0b:b2:ce:70:6a:
14:f8:0f:f2:e5:82:90:25:0c:3e:f0:d9:d0:33:fa:
73:17:91:e4:8a:da:01:69:7e:e6:48:9c:45:fe:88:
c6:d5:9a:30:ab:64:80:90:e7:91:59:9a:1c:b2:21:
9d:6f:86:73:06:b7:7a:f1:0c:05:ae:f8:b4:58:0c:
35:58:81:be:56:f5:39:b3:24:01:b5:8b:c2:74:d4:
1b:b5:f1:d5:66:b3:db:ef:46:23:df:89:7d:5f:88:
b6:be:fe:54:2d:90:dd:32:14:9f:b1:98:5c:80:9a:
7a:ee:ef:45:81:55:2c:cf:7c:b0:d0:21:e2:a2:27:
df:0a:05:41:0c:d7:b8:6a:e6:65:8e:87:89:18:17:
8a:c5:9f:d5:01:5c:57:ce:7a:1e:e2:49:6c:c9:7a:
2f:60:e8:8d:41:54:d8:81:2b:23:f1:77:7c:c4:7b:
fe:e0:89:e3:87:71:79:61:ba:ef:71:b4:45:2e:c2:
42:11:d0:25:87:e6:99:ec:46:2c:21:e0:70:c7:35:
88:6b:e4:fa:33:c5:ee:a9:5f:d2:ca:f5:df:1f:97:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:2B:59:6F:73:EF:9C:20:A2:CB:E8:E7:2B:46:E1:F2:92:E0:D4
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5c:88:b7:4e:25:87:ee:5c:aa:fa:56:55:bd:50:49:1d:a7:
f6:d9:ba:e8:c8:8d:34:09:1b:9a:cc:dd:81:f2:20:42:c0:19:
1b:c4:2a:e6:41:73:fc:ba:16:71:10:35:f7:a8:ce:e3:74:1d:
dd:fe:83:19:12:bf:7e:49:a7:f3:30:58:32:b8:f0:fd:3d:68:
b4:ec:52:9c:ff:d8:1c:78:d2:49:c5:1a:b7:53:63:3a:67:cc:
b0:96:73:5e:a6:95:17:09:9f:84:bf:7f:88:ff:8c:69:aa:9e:
9a:89:ce:da:f9:a4:62:08:0f:ae:09:d7:19:bb:52:8c:5d:96:
e5:54:3b:56:7a:5f:b9:20:bf:da:97:96:a1:86:14:98:f8:4b:
b5:25:f0:d2:93:62:9b:3a:a5:4d:ef:e7:28:2c:da:d5:90:bf:
cc:4d:c8:ed:d9:b9:e5:d9:5b:0a:f3:2b:46:03:e0:ec:93:12:
0a:1f:ff:47:31:31:ce:e7:90:9d:fa:f1:0e:ae:28:18:38:73:
75:55:8c:65:6a:f6:fa:81:68:93:2f:c3:be:b6:a9:1c:f8:fc:
3b:ff:c6:b3:c6:b1:27:e1:a7:5f:f9:44:ab:2c:bd:5c:cd:72:
96:74:96:83:a7:20:b7:dc:18:b2:02:c2:b6:3a:3a:cd:e1:ea:
24:69:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:24 2026 by rpki-client