Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier: RtixU2TzebRcfs3cB8Cku9FVeDA7y4aMC3IVYWgXsrI=
Subject key identifier: CF:8F:1F:79:BF:06:1E:05:F7:57:33:4E:A9:4C:AD:A4:D1:F0:58:AE
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial: 019D386646AEEEE60702B6420B6579120FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number: 07F9
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: GdWv8/UNSzWsuSZNUA2PGgLf559CLBV1fVvTBLUxPbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:46:ae:ee:e6:07:02:b6:42:0b:65:79:12:0f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=cf8f1f79bf061e05f757334ea94cada4d1f058ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:a5:d7:1f:a7:40:98:65:cd:d3:8b:89:41:
0c:d6:56:70:a6:34:54:a2:71:14:24:6b:3e:fe:84:
d3:fa:65:d8:c2:53:91:3d:73:2b:a1:61:7e:1b:e0:
8b:1e:14:93:53:dc:a6:b1:cc:8b:ba:8a:6e:d3:27:
32:0f:39:cb:01:c0:a1:53:e8:5e:20:db:4a:27:97:
fe:75:40:49:e0:7f:5c:bb:7c:f1:76:d6:70:9b:3f:
9a:27:e8:11:75:b9:af:66:a5:96:33:c2:f9:4e:46:
f7:20:5e:38:9c:ca:2d:05:62:57:12:46:d5:51:3f:
7d:65:33:d2:13:d3:7e:71:b7:b2:7b:6a:ec:16:4b:
dc:11:c1:3d:3e:15:30:bd:df:fe:5d:65:e9:f2:88:
c4:65:48:66:f0:11:d1:22:5b:f5:5b:71:f8:a0:11:
5c:7b:61:b2:09:82:a0:91:2c:c8:69:6a:75:0d:26:
8c:8e:8d:c7:96:35:b6:ac:5a:58:7c:34:47:96:59:
d9:62:45:5b:4a:22:00:a0:98:87:c5:b3:39:65:d1:
7e:8b:2b:f3:94:cd:f7:ca:0d:be:56:c7:75:db:88:
7a:e4:63:7e:22:de:84:68:d3:c5:0c:4c:58:7c:39:
0a:db:ac:01:31:9f:b3:ef:b0:51:91:89:40:b7:85:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:1F:79:BF:06:1E:05:F7:57:33:4E:A9:4C:AD:A4:D1:F0:58:AE
X509v3 Authority Key Identifier:
keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:01:85:16:47:6e:8a:21:54:bf:f2:5f:90:54:ea:37:4d:d2:
bd:84:1e:93:f1:25:1b:c7:58:48:a9:12:72:66:ea:35:25:16:
fe:71:36:db:45:7b:80:55:77:36:2a:e2:cf:79:b5:fa:f5:a0:
9c:cb:3c:12:bc:9d:8f:c0:b8:f6:d3:7e:28:db:d2:e9:d8:a8:
1e:ef:66:39:13:fe:7d:49:dc:d6:7b:14:fd:a7:7f:34:e9:9f:
df:c0:15:6a:12:f0:c1:e2:eb:7b:60:8a:4a:a9:24:94:5a:7a:
05:bd:33:ff:41:b2:e2:a6:06:1d:b8:c9:b7:67:54:15:05:aa:
18:8a:93:a4:21:c3:3c:68:37:ae:32:22:0e:01:0c:53:31:bb:
cf:08:b5:fa:bb:a8:05:2f:3d:89:b0:6e:e7:1c:c2:e8:d4:a6:
bf:52:4d:50:2a:6c:15:a1:fe:df:be:77:2b:f5:39:0d:2f:22:
cb:95:c7:86:0e:aa:cd:a3:f6:87:43:59:d3:74:cf:9c:05:d6:
32:b8:9a:7d:04:6a:81:37:85:b3:0c:db:a2:cd:34:ea:7b:85:
4b:ad:8e:98:c3:31:00:a0:f5:39:d6:19:61:70:c1:2a:b5:e2:
34:1e:3b:d1:eb:88:0d:6f:f1:a9:a6:e3:d1:91:2e:e3:15:34:
c2:99:b1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:02 2026 by rpki-client