Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json)
Hash identifier: U6HW4TMqfx9MneE485+nXApbQZ+T3aYR9EB4AIzV0b8=
Subject key identifier: 01:99:D6:76:E7:4E:8F:B1:84:19:97:2B:3D:A4:BD:D2:7B:86:22:F9
Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54
Certificate serial: 019D27043B09D15144854987C287FD76C6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
Manifest number: 06ED
Signing time: Wed 25 Mar 2026 22:01:21 +0000
Manifest this update: Wed 25 Mar 2026 22:01:21 +0000
Manifest next update: Thu 26 Mar 2026 22:01:21 +0000
Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: 7E03+KDSLdVxMtFNE0bekSnTVn3nYGcq3Zm31PuzUFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3b:09:d1:51:44:85:49:87:c2:87:fd:76:c6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54
Validity
Not Before: Mar 25 22:01:21 2026 GMT
Not After : Mar 26 22:01:21 2026 GMT
Subject: CN=0199d676e74e8fb18419972b3da4bdd27b8622f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:85:2e:5a:e4:83:20:12:13:27:12:4d:1f:
54:e5:4f:e7:e3:e7:d3:7c:6e:72:8f:6a:d8:c1:1a:
a0:77:1b:27:c1:a1:e1:94:b7:06:c1:ff:a6:ff:88:
09:50:06:6a:1c:a1:83:a6:7b:36:15:6c:69:5e:b4:
47:2f:1c:df:1d:12:55:bd:ae:7e:a8:49:56:ea:ab:
9b:27:21:31:39:45:32:5e:d8:c3:64:7e:44:33:9e:
c4:a4:c3:58:a8:2a:24:ce:8d:08:ed:b5:7a:16:b9:
f6:25:73:13:6a:38:9c:2d:71:4c:97:1a:22:1d:f4:
7c:d6:a6:35:8a:89:e3:4f:c7:87:a9:11:20:4a:69:
20:0f:47:28:a4:89:5c:7a:e9:29:0b:8c:a3:a6:57:
e9:9d:3b:85:31:ee:60:4c:dd:05:e2:41:28:ad:25:
93:e7:6b:a9:d4:2a:c8:90:dd:cf:5a:e5:c0:a4:81:
78:0d:30:c6:c6:18:db:5a:82:39:65:31:05:b4:0c:
68:2b:aa:da:2a:bb:d7:fa:c6:90:85:5b:db:2d:89:
27:87:56:3e:fb:19:eb:19:33:b2:e0:6e:01:a0:db:
9c:49:0d:77:58:78:27:4d:d8:2d:1b:0b:01:b3:fe:
36:74:fe:f4:e3:21:64:78:f0:18:d7:2d:17:35:c7:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:D6:76:E7:4E:8F:B1:84:19:97:2B:3D:A4:BD:D2:7B:86:22:F9
X509v3 Authority Key Identifier:
keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:26:8a:67:09:a6:40:f2:af:b6:3e:f2:37:6a:18:04:c3:67:
36:32:ab:42:01:2e:fb:98:44:cc:c7:d4:2e:d9:dc:c9:56:60:
70:0b:82:a9:e4:d0:20:5f:17:52:72:e7:89:2c:29:54:96:2d:
4f:c6:f6:9c:a7:1a:9e:57:ca:0f:b9:cc:bd:f5:50:6d:78:b8:
58:d0:2e:ce:12:08:5c:df:ac:bf:d4:2a:c4:3f:11:8a:60:57:
9e:1e:ca:7c:7f:68:47:37:2a:36:24:69:78:a6:c0:ea:bf:ac:
9c:43:04:08:cf:c9:92:a5:3a:5d:4b:c8:7e:01:2d:25:14:5d:
ce:b6:2b:c0:ed:4e:ba:90:f4:1b:ba:c5:80:03:a2:08:fa:3e:
e4:f1:88:f0:1f:da:32:f5:d1:6a:76:01:8b:49:d9:f7:83:44:
e9:85:2f:83:b7:48:ff:0a:0d:a4:36:9a:28:65:45:7c:5a:80:
f5:a4:fd:a9:33:ca:c3:34:ff:f8:85:cc:8b:b6:00:00:16:41:
32:16:b3:0e:95:db:19:46:c3:49:4a:9b:2d:f0:2c:28:f9:4e:
99:26:57:18:1d:c1:55:63:21:9d:09:7f:f0:2d:35:6d:f1:99:
e3:6b:98:7d:4a:22:4b:ed:92:dd:ef:d7:51:ed:78:95:63:ed:
d7:5a:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:34 2026 by rpki-client