Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
File: Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft (raw, json)
Hash identifier: Ahcdm3xPfKj+1vphiJ/tHdZbTnIKvh4ZDdv4SGLfm6U=
Subject key identifier: B6:27:37:15:AF:86:7A:B8:8D:CA:86:82:45:50:56:31:02:2D:AB:B5
Authority key identifier: 33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
Certificate issuer: /CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Certificate serial: 019D37C11825F96BF7EC4678CF889DDBD109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
Manifest number: 02B0
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl (hash: f+f3nu3teIAW963+CT1/A8uvF1xZiNekC9WaBcpPuaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:18:25:f9:6b:f7:ec:46:78:cf:88:9d:db:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=b6273715af867ab88dca868245505631022dabb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:93:f6:33:29:38:0a:a4:a9:66:f7:94:f0:
6a:34:e6:36:47:a6:f8:de:25:fa:e9:42:49:b5:d2:
ac:06:38:25:d6:61:67:85:95:8f:5b:5c:bd:72:d7:
16:74:c8:1c:f0:67:56:56:60:4b:54:9b:eb:e1:0b:
e2:c2:97:c8:0c:05:19:57:34:7f:10:cf:90:04:97:
ab:f4:64:47:b7:3c:13:50:00:56:b4:0b:21:d4:9e:
8d:d8:a4:37:2b:f4:ff:95:d4:19:b4:b5:d1:67:80:
bc:64:4e:b8:18:2c:55:8e:cb:b6:9c:61:c0:97:b4:
11:3f:c3:63:c8:42:87:48:41:84:0f:f7:f8:72:7a:
76:5b:de:2a:78:f3:42:1d:61:49:7e:e0:f9:a2:74:
dc:2d:7d:fd:a2:7a:c8:1b:fd:3e:2d:1d:60:ad:52:
60:17:4a:25:71:7c:b4:36:20:fb:44:0f:02:11:eb:
42:b3:26:40:28:ad:41:c2:b1:0f:a0:2d:46:9a:f3:
37:bc:b5:cc:f9:1f:53:d7:57:85:80:dd:f9:83:09:
b1:da:e4:b3:ba:b1:47:f7:c4:50:75:a8:27:fc:36:
4e:52:08:25:c2:d1:1a:f1:f2:32:89:2a:99:80:54:
b1:17:80:dc:28:5e:d2:2b:d6:ba:06:dd:6e:b4:7d:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:27:37:15:AF:86:7A:B8:8D:CA:86:82:45:50:56:31:02:2D:AB:B5
X509v3 Authority Key Identifier:
keyid:33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9b:cf:ea:55:57:dc:a9:2d:92:ee:0e:fb:d9:17:98:43:a3:
eb:df:25:7a:11:fb:e3:0a:f9:35:a3:a5:98:6f:63:17:ed:25:
06:0e:8b:16:f0:e3:87:b4:71:85:d0:d3:fe:9a:1d:10:09:ac:
ab:3e:25:8a:8e:2b:66:00:97:be:46:d2:6f:d0:91:55:71:0a:
79:09:51:73:68:77:18:0e:68:b8:30:bf:9c:4e:de:87:b6:4a:
6d:d2:18:82:f3:14:bf:00:a8:bc:6c:c9:fe:d5:a0:07:a9:2b:
19:40:e3:ab:84:aa:98:63:66:30:c8:91:8f:d7:c9:fe:42:c8:
37:7a:dd:53:e0:be:19:e8:45:75:e0:57:b5:fb:0c:27:43:29:
0c:18:df:a1:9b:c6:3b:12:2d:1a:0e:0f:86:dd:41:44:4d:e0:
43:2b:63:35:4a:e7:e1:43:52:ab:8c:92:05:bf:2b:dd:72:eb:
63:90:a5:83:f1:7f:7a:4f:44:96:0b:5a:fd:19:98:3e:00:ea:
87:3f:c2:a8:73:f1:39:44:cc:37:a5:5f:36:ed:9b:6e:9f:29:
53:aa:ff:a5:61:09:67:a3:48:2f:ba:90:96:08:e9:5c:d2:a9:
2e:42:d7:15:af:46:1d:56:6e:67:f1:f6:f8:12:95:39:c0:57:
c1:c0:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:15 2026 by rpki-client