Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: LaCbXqPpyLWEBLVBI45jSx07fxA6DoTRHax6M3TWwEE=
Subject key identifier: C5:77:56:B8:C3:85:86:B9:D9:1F:73:47:2E:04:F4:B9:EA:AD:B9:AD
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 019D39411876555B5146781BB2BBEA17BEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 044C
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: ZoHRC6oWf1GYeOlgvkN1F4lMdsCO3XWO9k33SIgnRe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:18:76:55:5b:51:46:78:1b:b2:bb:ea:17:be:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=c57756b8c38586b9d91f73472e04f4b9eaadb9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:27:84:f0:c6:42:87:bb:af:9f:4d:fe:1d:
0d:a0:9e:ad:c5:da:c4:db:6b:96:e8:23:0b:da:72:
28:55:ff:56:9d:7c:2d:65:3b:5a:c9:70:e0:5f:ba:
e0:b1:09:dd:e9:ce:f8:99:85:77:92:1b:4d:68:3a:
01:65:46:4f:8f:74:e8:4d:65:46:a5:2b:05:a1:78:
af:33:57:8c:9b:d2:ea:5b:72:d1:13:d4:66:3e:9a:
9f:37:9d:23:6d:cf:17:48:1a:44:15:57:e3:cd:a4:
1a:ea:95:55:0f:77:78:76:2a:7f:ff:d4:01:9d:12:
de:de:d7:12:ba:89:7e:d7:7c:a7:d1:cc:40:fd:71:
c8:ff:2f:b2:cb:22:14:1e:21:29:e4:5b:76:ff:cd:
01:a2:56:2c:30:ef:2e:3e:0d:2a:63:60:7a:ff:3b:
29:08:99:76:91:7d:6f:59:02:69:f8:42:e8:32:31:
30:7e:07:12:75:0f:65:b7:20:d7:79:7a:0d:6e:3b:
fe:5c:43:fc:4c:0e:6b:c0:28:8b:a8:0a:f5:0f:48:
8e:05:18:c7:d6:6a:b8:82:3b:56:41:3f:ff:14:be:
4b:87:c2:c0:5f:c2:e6:b5:67:17:78:b1:ed:b9:de:
5e:83:a7:53:20:0d:43:97:21:71:c2:07:44:9c:b7:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:56:B8:C3:85:86:B9:D9:1F:73:47:2E:04:F4:B9:EA:AD:B9:AD
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:75:ff:87:9e:33:cf:7f:7a:01:11:81:ae:39:00:31:3e:
e5:22:50:b6:66:c9:5d:4b:9b:45:4c:08:1b:85:7c:e5:81:e4:
79:89:06:20:65:30:c2:28:64:80:3d:51:f0:28:08:89:05:11:
c2:06:c2:9c:e2:9a:c7:34:cf:bb:60:5d:97:4f:fd:18:06:0e:
03:b5:fa:ff:b8:de:ca:4b:35:aa:21:e7:63:10:23:20:85:c2:
52:73:e6:ea:d3:ea:20:61:71:5d:9c:68:42:07:60:5d:35:39:
5c:e3:af:d6:53:3b:f5:d0:64:aa:22:ba:62:2c:e6:62:3a:36:
7f:24:1c:fe:33:3e:a7:c8:ea:6d:86:1d:5a:1b:cf:8d:60:e5:
5c:58:f1:28:6e:95:36:33:50:da:79:8a:93:6a:24:fa:89:a4:
f1:81:bd:1f:c2:86:38:63:1c:ad:03:99:d7:fc:41:4d:4b:51:
21:cf:fc:88:01:e1:c8:d3:47:55:a5:77:c4:72:3e:97:de:6b:
18:4e:87:1c:9e:47:7a:47:61:2d:f8:52:ad:c6:d9:5f:9d:81:
83:d8:94:e7:40:66:db:fe:37:f4:6f:31:b5:79:a2:19:53:f8:
3a:4e:6f:5d:f1:71:3e:aa:08:c7:e9:ad:3d:9a:39:8c:83:73:
4c:46:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:42 2026 by rpki-client