Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: KiTPnDrPhLv44YzRhygDTCgOoKo0teVk/SOa7MR2nI4=
Subject key identifier: F2:E9:73:84:12:4E:21:C4:D7:3D:68:21:13:59:0C:A9:56:05:F6:B9
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019D394186E64A8D3A311C76E65DA5C65290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: hRpqTLsAMvuMXdlCfEzokRPPmrSnwmPB1dlQ1QHBVyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:86:e6:4a:8d:3a:31:1c:76:e6:5d:a5:c6:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=f2e97384124e21c4d73d682113590ca95605f6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:7f:2e:77:a8:c1:9e:6e:74:0f:88:6c:8f:
2a:a1:ad:ca:f6:2e:c2:b2:da:5e:82:43:0d:4d:8b:
87:73:d8:ae:23:af:19:76:84:92:f6:2f:de:82:7b:
45:95:a4:66:0b:79:b7:5a:07:6c:3e:4b:62:bc:f0:
be:75:a0:20:b6:92:e1:7e:99:14:7f:42:0f:95:8b:
37:61:7c:e3:32:67:63:1f:b9:c9:a0:6c:d4:c2:88:
45:ef:34:9a:77:72:6e:f9:b0:e3:e8:6a:5d:64:85:
f8:9b:a0:f7:99:c8:b7:98:64:4c:75:65:f5:0c:40:
1a:45:42:e1:73:0a:de:34:be:b8:d8:2d:b2:fd:a7:
69:fb:ce:69:87:e6:5e:e5:b8:e4:9d:d9:1c:4a:16:
5a:62:f8:b1:4d:5f:02:f0:16:95:12:6c:44:0d:9f:
4f:cf:25:b6:92:91:10:ed:83:ce:41:e2:79:86:96:
e3:cd:75:bd:e6:3a:3b:a7:ec:a3:4e:c5:ae:4d:f1:
c8:bc:f0:1f:3f:6b:21:a9:d6:ab:1e:21:74:fc:d0:
ec:76:98:bf:4b:5e:04:59:51:9f:79:a8:bd:c5:1c:
e0:a4:c9:6b:c6:87:70:94:4b:6d:43:09:6d:78:b7:
77:f9:54:9d:e5:f3:60:5c:9f:10:5f:ff:ab:57:85:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:73:84:12:4E:21:C4:D7:3D:68:21:13:59:0C:A9:56:05:F6:B9
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d6:e9:31:de:86:e3:f8:68:a0:a3:c2:de:fc:fe:15:81:18:
c2:a2:7c:c7:12:70:24:1c:32:7d:e5:62:87:c9:3d:3c:4d:c4:
a7:b1:2f:b0:4a:c5:1b:cc:2b:bd:72:7b:f0:8a:1b:cb:3e:d2:
3a:f7:17:0a:5d:4e:75:25:99:56:f8:38:25:d9:6f:e2:84:42:
77:06:1c:35:d6:c4:26:66:42:06:5b:0b:59:2d:07:eb:4f:e4:
4c:72:0b:67:3d:e1:8c:dd:c0:ea:25:60:b1:b8:e8:5a:c7:9c:
ce:2d:5e:4b:96:73:8f:92:33:ed:9f:09:91:3f:4b:ec:8a:a9:
50:8e:63:55:2b:93:7c:70:16:52:0b:a3:0e:2c:23:59:1c:cc:
37:b6:9f:a0:e7:50:a0:b3:48:9b:7f:7e:b5:dc:c9:93:12:be:
f1:26:f3:ef:c1:68:8f:4c:ba:f5:7f:0e:e0:37:71:d0:1d:4c:
a1:dd:95:52:a1:55:9c:f1:3e:e1:fe:54:ac:75:00:93:fb:52:
55:2b:93:22:27:1f:51:9d:4d:3d:03:de:fc:b5:2b:9f:bc:e8:
ac:a4:58:29:aa:c4:33:eb:cc:49:df:e0:63:e8:63:58:aa:ae:
c6:47:7e:f0:c7:ef:38:ad:0b:0e:ef:73:e3:a0:a3:d6:6b:f5:
5d:d4:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:15 2026 by rpki-client