Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: MKOVts2GlpZZaWLh0st4Ga4I9Dfxwa1+JjS9jrm9Q4o=
Subject key identifier: 3C:01:B8:34:21:9D:5B:B7:D1:0A:06:D5:9B:50:2E:D9:DE:41:80:EF
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 019D37C0FA1EE0BC96CE401144ABEA2D6A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 06D6
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: M5KZ0wUJEoegaeZoC+3X4Kn4MRUeY64UGmnqYBf32HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fa:1e:e0:bc:96:ce:40:11:44:ab:ea:2d:6a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=3c01b834219d5bb7d10a06d59b502ed9de4180ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:6a:c6:42:41:17:ef:f1:c1:4b:e0:e2:eb:
ce:a2:97:f2:7c:a2:6f:ea:19:fb:9a:bc:88:4a:a8:
f7:c0:87:38:50:16:89:c6:39:c8:c9:c0:c7:1f:0b:
56:7d:c9:4f:1f:52:49:cf:55:67:41:40:8a:88:ba:
70:03:c9:07:20:ae:3d:3a:b2:21:ed:9a:6a:b8:69:
0c:2a:7a:1c:dd:5c:1a:56:b8:22:9a:b1:7c:d1:6e:
a4:73:16:ea:c0:8d:4d:44:29:25:94:3c:b9:e9:5c:
cc:15:9e:0b:fc:33:63:88:ac:27:dc:06:97:2d:93:
7b:ed:1d:02:9a:52:33:8e:f1:47:26:dd:f3:f2:03:
f2:10:e7:7b:22:d1:9e:7d:af:b3:5f:11:ce:b2:da:
e1:51:68:23:4b:29:5d:95:63:5c:1e:a4:68:b4:dd:
a8:5b:d1:4a:01:ac:42:57:d9:75:ba:db:32:71:f7:
72:67:c2:cf:92:42:c4:c5:ee:93:9d:f4:1e:68:29:
46:93:6f:41:b8:a1:c8:3b:7e:6d:1f:fd:40:c3:de:
8c:62:be:54:9c:87:06:05:28:43:a8:4f:47:15:0f:
86:03:53:48:f0:ad:e4:c6:05:ec:1a:ec:0c:51:5e:
04:4b:08:bd:7d:71:38:a6:31:eb:4f:0f:37:d8:94:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:01:B8:34:21:9D:5B:B7:D1:0A:06:D5:9B:50:2E:D9:DE:41:80:EF
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c2:91:ed:3e:c8:cd:f6:5e:1b:f7:9e:0d:67:65:3d:40:2c:
6d:a6:35:01:3b:e7:55:45:e2:cd:f0:0e:3b:74:71:02:05:99:
d7:a6:87:37:ea:34:97:ab:10:d8:67:27:76:ee:c4:e9:b2:e7:
5e:5f:8b:ee:f2:3f:66:f3:d2:42:96:9d:d6:64:af:9c:44:22:
a4:02:7d:39:78:59:a8:97:3e:1f:d1:7e:e9:45:9e:25:c5:e1:
dc:4f:61:c9:a1:18:74:75:b2:d1:65:4a:f6:7e:ff:b2:e3:2d:
9b:92:04:4d:b9:9e:d5:57:29:9a:51:30:29:79:f7:52:84:d3:
fd:e5:c2:f0:c4:72:5d:3d:74:fa:d4:bd:75:f0:de:23:b6:2e:
0c:51:0f:59:bd:52:72:4d:fd:62:be:97:a8:13:26:36:54:cf:
1a:6e:fb:98:55:be:ca:d8:5f:b0:73:cd:c0:fe:d3:c5:ef:71:
98:33:19:e3:81:b9:9a:5e:0d:a9:7b:01:dd:cc:21:ab:0f:4d:
c9:a8:52:e8:4a:7e:d3:51:4a:ec:d3:1e:ce:b5:be:84:40:10:
d7:c1:71:9f:05:68:86:b4:3b:6d:a2:a6:b3:f8:67:76:d3:48:
6d:5f:de:d0:1a:d7:2b:29:87:35:07:d7:76:a8:7d:0d:2e:f1:
d7:80:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:50 2026 by rpki-client