Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: IZG5Upds6+c7j1iLfiuRpv/Guz2ysXjKScd9opuPw0A=
Subject key identifier: FE:08:3A:38:C0:2A:B2:8A:25:B1:9F:C5:F2:CD:F0:2B:8E:DD:61:7A
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 019D371BAB6EBAD79E6E61E32EFFF8050F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 1739
Signing time: Sun 29 Mar 2026 01:00:53 +0000
Manifest this update: Sun 29 Mar 2026 01:00:53 +0000
Manifest next update: Mon 30 Mar 2026 01:00:53 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: 2DqMP085r3fWf6ok2QPjbeDW3JtZeC/EZDL3bQIf8Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ab:6e:ba:d7:9e:6e:61:e3:2e:ff:f8:05:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Mar 29 01:00:53 2026 GMT
Not After : Mar 30 01:00:53 2026 GMT
Subject: CN=fe083a38c02ab28a25b19fc5f2cdf02b8edd617a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:78:09:8f:95:e1:b9:c0:1e:54:6c:4e:de:
26:19:d1:96:50:6e:38:47:0e:e1:a5:1a:53:fb:b3:
d9:a1:4c:bb:dd:08:94:c3:b8:d1:16:70:ae:2c:3f:
17:52:8d:96:da:2b:70:74:fd:d1:c0:f9:05:8d:0c:
99:ad:64:d5:44:48:45:4f:b3:e9:1b:cf:4e:57:67:
9e:48:3c:b6:e3:3d:e4:31:62:9e:9f:fd:f4:6c:e8:
4e:c9:5c:52:68:81:65:20:9f:5b:6c:ff:d9:29:9d:
bc:45:11:87:ca:94:7f:eb:14:9f:b4:2f:53:08:02:
1e:bb:df:cf:1d:32:00:d3:44:c0:3a:ab:46:13:1b:
b4:f2:f0:ea:c6:52:51:77:82:48:ca:83:6b:bf:e3:
55:64:97:ee:76:b6:d2:50:90:b3:91:47:f6:2c:49:
64:37:b6:68:30:bf:ed:47:d6:43:ec:da:f3:4a:97:
c1:93:9b:ba:83:e6:da:2b:6c:c8:0c:63:63:b2:04:
8c:98:37:30:cc:01:92:8b:f6:03:70:11:94:13:6b:
a9:01:e1:f4:82:ee:ec:75:6d:d0:33:ce:68:fa:75:
ff:24:e6:4a:e7:c0:ff:8d:5d:3f:34:a2:77:1c:58:
e9:a2:22:97:63:19:42:d8:9c:76:d1:c2:4b:6a:31:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:08:3A:38:C0:2A:B2:8A:25:B1:9F:C5:F2:CD:F0:2B:8E:DD:61:7A
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:fe:d8:26:46:50:ab:4f:00:da:95:82:19:ff:f5:a1:3b:
5b:35:ac:b8:27:cb:88:ae:42:d8:d0:89:1a:af:eb:74:bd:3a:
01:16:cb:88:ac:69:f6:43:97:36:58:30:9f:75:e0:9a:70:96:
a1:71:6e:8f:7f:88:73:c6:14:4e:88:e4:0e:8f:30:be:13:8d:
5f:0e:a7:1d:c7:61:89:3a:da:44:f8:7c:6f:5f:27:d6:1a:a0:
7c:fc:f9:8e:b2:4f:9a:39:ca:70:e5:b7:6b:19:d5:f5:60:d0:
25:ff:60:3c:ef:2d:d6:6e:87:e9:4b:7e:1b:ad:04:62:6d:1c:
44:ee:01:0d:f8:fd:07:c5:fe:bb:fb:47:f0:eb:75:d2:23:61:
cf:3c:12:32:26:a4:fa:9b:9c:91:97:81:49:06:fe:6f:8f:da:
f5:a3:80:5f:99:8a:1b:11:de:c7:e6:da:a1:d9:1e:40:ed:a3:
22:6f:d6:4d:84:00:93:31:35:07:7e:62:d2:85:f5:53:c6:80:
40:f5:ac:af:13:1a:da:88:4b:aa:63:d1:d6:3c:07:40:f8:e3:
1b:1d:12:3d:4e:62:a3:c4:71:c8:d5:13:84:65:94:2c:c9:f4:
b8:87:95:19:01:60:c1:44:35:b4:c8:e8:7b:0c:72:16:65:16:
86:17:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:16 2026 by rpki-client