Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
File: mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json)
Hash identifier: anIg9bYqOYoi0ZMs6d+Qpi3w58LDAZuaZrUbqZLImbE=
Subject key identifier: D8:BA:24:AE:8A:1A:68:3C:51:8D:B7:62:E4:80:34:D6:A8:BB:B2:FB
Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
Certificate issuer: /CN=9a351493af887e544dcc01a113b77528bc987bce
Certificate serial: 019D38D33D6ECEB1CF5479BDE5C7D58FA92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
Manifest number: 120B
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: xnzSmbUcJD+zRc9IyAqdSqaCkFBjEYyk7fpUD3xkYq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3d:6e:ce:b1:cf:54:79:bd:e5:c7:d5:8f:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=d8ba24ae8a1a683c518db762e48034d6a8bbb2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:11:0d:c0:13:9f:d1:64:fd:f2:b2:e2:fc:
91:9d:47:80:ad:15:a0:f9:61:3b:74:6d:dd:4c:d8:
d4:d4:27:88:79:bb:d5:93:3e:60:11:c9:60:fd:88:
b1:57:f1:a6:99:c8:92:16:4c:5f:44:87:93:a5:15:
d3:c0:76:ce:90:bd:a4:0c:eb:50:f4:8c:72:57:5f:
c5:69:82:5a:b2:8c:23:66:39:8f:ba:f3:cb:f5:3c:
ba:b8:93:02:d4:78:d2:0e:ef:77:6c:d7:49:63:46:
07:36:c3:09:ab:bb:a2:73:c1:b4:12:b8:a4:70:5b:
12:23:fe:6c:80:95:4e:da:c6:86:6d:45:a9:d2:a5:
87:02:82:b0:fa:0b:d6:16:ac:f9:7e:39:0f:e7:1d:
7b:e5:a3:42:3f:c2:f6:ef:03:03:64:2a:c6:bc:0e:
bb:a7:98:6f:fc:1d:8b:58:fe:14:01:84:2f:b3:52:
1a:d5:eb:37:74:81:f8:31:7a:31:62:40:a0:0f:12:
d8:53:d7:b8:95:f7:70:1b:75:d9:27:21:e5:7b:fc:
7c:62:84:df:b4:03:1d:d2:7e:09:f2:1e:8c:fa:df:
4f:27:81:c9:5f:01:3b:d3:37:54:73:c4:6a:e5:94:
29:02:db:a6:ab:69:4d:ba:05:26:4c:9a:8e:5c:f0:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:24:AE:8A:1A:68:3C:51:8D:B7:62:E4:80:34:D6:A8:BB:B2:FB
X509v3 Authority Key Identifier:
keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c3:b2:dd:ef:f4:54:ee:e4:ee:64:03:b6:17:9d:59:69:1b:
12:58:fb:43:8f:6f:5d:d2:88:72:65:cd:ba:be:0d:af:1e:2e:
39:80:74:5a:b4:c6:c4:f8:01:da:76:dc:27:0c:bb:5b:d6:43:
f6:6c:36:5f:3c:5d:8b:97:27:5b:25:bb:91:60:dd:8b:d5:c1:
c7:f2:4d:b3:fa:6b:90:5b:bf:51:36:9e:2e:3c:c8:1e:87:fc:
6e:6f:56:fe:c7:34:71:29:8d:00:03:30:7f:5a:c4:46:fa:e8:
42:ed:3d:d5:26:ff:f8:3b:74:c2:55:ad:70:98:3b:1e:b6:42:
4d:33:e4:15:ed:39:1f:98:5f:10:40:9a:6a:86:43:4b:cf:85:
21:2c:b0:cb:1f:75:86:07:39:8f:e1:60:84:e2:b4:68:e9:f9:
0b:82:f3:b1:4f:67:8b:89:93:b7:a4:07:b5:17:4d:de:c5:18:
5e:e7:1c:1a:14:0e:68:4b:b9:75:d4:45:f0:45:83:45:4a:29:
71:10:dd:17:2c:a3:3c:5d:2a:7e:69:d3:11:93:0f:a5:ee:8c:
ba:c9:25:30:a8:8b:92:fd:f8:6e:fd:be:c6:13:b9:d3:24:32:
a6:3b:ee:6d:b2:fb:77:6a:79:57:5f:84:0f:4a:89:67:62:96:
18:6d:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:04 2026 by rpki-client