Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: AkZW4jR2gUo37t7/YEcTvC9dp+VdGACXK1jaYqw87bg=
Subject key identifier: C3:54:88:2D:81:90:9D:F9:36:2F:D7:47:69:D1:C3:71:47:3F:5B:C4
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019D37C0FFB3AE97D41E1CCF8046D603852D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 0ADD
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: SaHWgTQ+sQy4tfjz2Yi5rp1lo65tGOlqMrjm0qD4IiE=)
2: _2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa (hash: TYooW/gUsVFWHXthOPEQi5a4rd+m2KssG9xszmHlKRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ff:b3:ae:97:d4:1e:1c:cf:80:46:d6:03:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=c354882d81909df9362fd74769d1c371473f5bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:45:28:20:91:16:57:78:87:c7:f6:ba:2a:
ef:00:6b:22:b9:f9:53:12:24:81:7e:b8:86:b3:0e:
c5:6e:a6:af:e4:f5:6a:b0:66:12:4e:14:52:d0:db:
ce:e3:52:49:13:60:e3:ae:bd:9b:f1:07:43:e0:c6:
11:44:89:0c:08:6b:8c:26:99:76:5b:be:e7:a4:a6:
d2:f9:40:cd:bc:79:d0:08:2b:38:81:50:8e:1c:91:
c6:8a:47:fe:14:b6:42:9d:8f:b0:02:e5:cc:f3:e7:
48:cc:c9:3c:03:95:6a:47:86:34:36:0a:d6:5a:87:
63:44:24:69:05:c5:fe:f4:d1:b9:27:83:e3:d1:17:
eb:06:29:be:35:43:8a:3a:2e:8b:43:58:7f:8a:66:
c2:25:b7:de:ef:50:50:be:e3:7f:bd:90:d2:f4:b0:
7e:f1:34:bf:f2:b2:87:44:4a:72:17:d5:d5:95:24:
90:8d:b7:7a:7f:76:2c:f3:02:42:5a:7e:75:95:6a:
80:41:46:3d:42:e4:d0:b9:a6:a2:65:45:9a:80:02:
3d:b4:65:1a:08:a0:f9:a6:95:48:91:8e:17:8f:84:
cb:44:ae:c1:19:c4:5d:26:86:31:29:09:55:e3:3a:
28:48:8b:6c:6d:4c:a2:bc:18:d3:bc:d6:b9:88:11:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:88:2D:81:90:9D:F9:36:2F:D7:47:69:D1:C3:71:47:3F:5B:C4
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fd:54:43:ed:78:b1:82:94:29:59:58:d8:19:c3:91:a7:48:
79:02:de:0a:06:b3:2b:4e:59:17:dd:5f:50:13:09:dc:64:33:
f5:ba:ee:0e:0b:cb:05:f1:79:fe:0f:47:ab:31:7a:cb:1b:f9:
75:06:44:03:6d:dd:cd:e4:25:53:94:87:e3:08:c1:cf:d3:fd:
ad:ad:ec:bd:92:bb:59:23:29:ac:44:be:3d:15:ce:3c:bf:9c:
4b:36:c3:6e:c1:f2:65:f2:42:23:97:b2:2f:c7:2e:2d:1a:86:
a5:1f:f5:60:44:69:ee:d0:04:89:c0:8a:9c:0d:a7:fa:01:0c:
eb:19:b1:11:c3:7d:bd:e6:d3:ea:5b:45:35:84:db:27:4f:54:
70:65:42:5a:71:f8:bd:23:50:b7:38:f6:8d:15:bd:fc:ce:4a:
31:38:20:99:b2:ae:05:18:c1:75:f1:cf:da:cc:e8:c9:81:6d:
18:95:24:be:70:73:41:e9:6e:0d:84:09:c3:0b:39:fc:86:fd:
5e:0b:af:0a:7a:91:12:56:74:48:65:7e:4a:bc:11:47:62:e7:
c5:d2:e2:4d:cd:01:15:43:19:2e:6e:2f:76:81:62:23:e1:33:
45:f6:f8:40:af:ad:0b:20:19:a0:43:11:ee:ab:d8:f5:f4:c3:
cd:23:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:21 2026 by rpki-client