Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: xeyn+VuHvK3yEWR1bgCCsRppYZ4tagGuU7Yi/DvENa4=
Subject key identifier: 49:F5:E9:77:55:94:EE:33:19:54:00:40:4E:43:7F:00:E0:92:8F:DC
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 019D3865D30ED7C1E9DC0E044ABE5BCD63D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0C75
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: pSpihCUZqgR9ekjhDMiN+oxX3LqMBIjudJYkNGgPYWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d3:0e:d7:c1:e9:dc:0e:04:4a:be:5b:cd:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=49f5e9775594ee33195400404e437f00e0928fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:d3:6d:2b:81:01:3b:95:8f:75:00:fa:94:
34:24:f6:86:71:c1:9f:38:21:59:94:6d:cd:f6:b3:
c2:5e:49:fc:6e:a1:8e:d3:d1:20:8f:58:7a:01:17:
54:e9:67:f8:3e:cb:e8:10:2b:72:89:d6:64:51:4a:
01:50:77:ed:64:b6:bd:ac:4d:1d:e9:c9:95:34:a9:
a2:56:74:0c:6c:f5:d9:61:1a:4f:c7:d4:94:eb:1b:
4f:fa:03:41:eb:ed:f9:4b:6e:9a:35:b7:c7:ed:c7:
c4:e5:36:63:92:18:08:b9:5a:76:3e:5a:24:9e:b0:
f0:2f:f2:78:7e:18:fb:65:92:28:c6:5a:7a:f3:60:
bd:b9:05:1f:b8:0b:96:d8:18:6d:f8:7a:41:0c:c3:
f3:14:8f:bf:d5:8d:06:b2:c0:98:af:15:f6:29:d1:
75:64:f1:c3:94:bf:2b:58:ce:6d:2e:d4:c5:33:f0:
a3:2b:01:f9:25:8c:93:35:e3:ba:a3:8c:f1:39:11:
29:b1:f3:86:e4:42:a1:37:45:46:b1:e5:f5:ae:0b:
e2:37:87:42:52:5d:c2:46:2c:5b:cf:8f:86:f6:14:
b0:c5:ad:4d:07:9d:36:21:4c:6c:9a:ed:55:d0:d4:
80:c2:56:bc:c7:fe:59:3e:e1:46:07:0f:04:d4:20:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F5:E9:77:55:94:EE:33:19:54:00:40:4E:43:7F:00:E0:92:8F:DC
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7f:04:04:66:28:3f:e2:3f:79:fa:bb:22:65:7a:bd:6e:bd:
9b:81:ac:f5:92:01:d3:51:86:6e:d0:8e:21:b8:04:58:07:9d:
c3:46:8c:a7:aa:bf:7e:c8:ab:d0:19:8d:2f:58:ee:e9:41:47:
80:29:95:b9:ab:d7:f0:6f:03:99:b0:dc:04:d1:cc:4f:14:05:
b9:e1:c1:7e:fd:d2:cd:f9:53:ff:ff:ed:0e:8f:4e:47:bb:b7:
dd:fe:13:34:94:4a:75:34:73:9f:c3:0a:09:1b:1f:3a:5e:b5:
0b:52:8c:ac:55:08:4f:d7:b7:38:ed:ba:7f:70:e8:fd:e1:fc:
fe:af:23:ac:cc:eb:14:b7:4e:80:b2:45:21:99:ab:18:dc:e8:
f8:b6:0a:34:d5:95:97:b5:97:e3:8b:3a:47:97:1b:f2:f7:cc:
51:2f:99:15:c9:49:93:72:3b:23:eb:01:12:96:a4:ef:0e:71:
36:4a:57:c5:fd:27:28:a3:ec:ac:0c:2a:38:7f:68:1b:63:e1:
21:79:3a:44:d3:86:a5:62:e0:b7:3c:47:93:6d:12:4e:05:87:
22:a0:e7:ec:40:6f:20:59:19:df:53:3a:ea:2b:bf:2d:19:6c:
9d:e4:40:69:29:9e:1a:d5:a8:7f:f9:0a:a1:48:ea:a6:05:11:
6b:cb:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:34 2026 by rpki-client