Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft
File: MxSDS__K3sS4kl2gQu8N6YmYBFY.mft (raw, json)
Hash identifier: gil2io76TPig1y6HVeX1eO8goHXZHYPHsfVynFqY3IY=
Subject key identifier: 4A:B0:A9:64:23:BF:C9:6D:20:68:3D:E3:7A:7F:18:BC:53:30:03:C6
Authority key identifier: 33:14:83:4B:FF:CA:DE:C4:B8:92:5D:A0:42:EF:0D:E9:89:98:04:56
Certificate issuer: /CN=3314834bffcadec4b8925da042ef0de989980456
Certificate serial: 019D27DFA60FC8C460020BD05AF3A2CAC3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxSDS__K3sS4kl2gQu8N6YmYBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft
Manifest number: 012B
Signing time: Thu 26 Mar 2026 02:01:01 +0000
Manifest this update: Thu 26 Mar 2026 02:01:01 +0000
Manifest next update: Fri 27 Mar 2026 02:01:01 +0000
Files and hashes: 1: MxSDS__K3sS4kl2gQu8N6YmYBFY.crl (hash: RSJLus7RVnpwDNZl0muKuMNP5LmE6pOlahXo0qI7zbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxSDS__K3sS4kl2gQu8N6YmYBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a6:0f:c8:c4:60:02:0b:d0:5a:f3:a2:ca:c3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3314834bffcadec4b8925da042ef0de989980456
Validity
Not Before: Mar 26 02:01:01 2026 GMT
Not After : Mar 27 02:01:01 2026 GMT
Subject: CN=4ab0a96423bfc96d20683de37a7f18bc533003c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:16:45:0d:57:99:8f:b5:5a:0d:db:46:1f:
e7:5e:0d:6b:1d:7f:ea:68:a7:b4:d2:87:ed:b2:2c:
b1:df:56:ff:f1:5c:9b:33:52:5c:7a:9c:aa:b2:b6:
56:35:51:5a:76:7e:b6:5c:4b:20:89:f0:da:39:bd:
c5:3a:60:d0:12:38:18:74:e8:2d:9a:b0:f5:38:44:
8d:96:1b:23:bf:09:fb:61:d7:65:69:28:7d:ca:7b:
39:2b:fe:b5:74:3b:89:31:b0:ec:c4:18:19:c9:d3:
fa:2a:fd:65:19:64:d0:ce:96:d4:ff:32:8a:78:99:
a9:9a:79:95:30:60:7b:7e:f1:b7:a5:5b:52:00:88:
d9:aa:0b:7d:66:2d:dc:2e:f9:e2:f0:6d:88:c0:28:
b1:0d:1e:05:c6:eb:c9:66:a4:f0:b1:e1:f8:56:28:
74:81:37:16:2b:9b:71:75:f3:44:1e:a2:1b:40:59:
b3:a7:1c:02:8d:06:1f:d2:f1:f8:9a:2a:7e:a2:f0:
6a:cd:49:03:fe:c9:2b:6e:03:7f:e7:b2:ed:a5:93:
b4:04:c8:72:74:6c:c7:d9:84:14:ff:e9:ea:63:ac:
14:92:c0:65:74:b8:cd:74:bc:9f:f1:28:f4:c8:17:
ef:1e:f3:83:25:34:00:96:57:17:a3:20:4f:84:2c:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:A9:64:23:BF:C9:6D:20:68:3D:E3:7A:7F:18:BC:53:30:03:C6
X509v3 Authority Key Identifier:
keyid:33:14:83:4B:FF:CA:DE:C4:B8:92:5D:A0:42:EF:0D:E9:89:98:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxSDS__K3sS4kl2gQu8N6YmYBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:eb:1d:9a:8c:df:11:dd:18:e9:48:1d:06:25:52:1b:60:5f:
4b:da:9d:7c:ab:83:ff:91:82:56:51:da:b3:c5:ea:04:99:4f:
50:ed:9c:5b:dc:1e:5d:93:41:9c:8e:7e:eb:79:74:7a:d5:64:
54:b2:21:7e:bd:96:a8:a7:74:f5:a5:79:b9:3f:46:ce:40:6c:
97:03:31:49:00:a7:c2:f9:b8:16:d9:ea:2b:0a:04:39:ec:48:
69:84:6f:c1:ff:cb:63:c8:81:66:11:e8:5d:60:df:e3:d0:62:
c6:c3:7e:18:96:d3:a6:db:dc:14:de:b7:bb:0c:88:9b:41:d3:
0c:4e:03:76:9c:c0:86:14:48:de:63:a5:72:33:9a:2a:ab:51:
cc:71:1e:b9:84:dc:90:da:84:66:cd:7d:27:83:fe:18:11:a5:
7a:6e:25:b4:9d:81:8e:44:7c:5d:79:9f:72:9d:32:77:08:60:
c7:f3:43:6f:84:77:4b:05:98:5e:9c:aa:8a:e4:41:7b:af:aa:
95:82:80:56:66:cd:fd:de:4d:44:59:29:7f:9d:e9:d6:23:8a:
f7:b8:b3:80:e7:79:09:92:ba:53:32:92:6a:38:27:96:3a:62:
88:2f:bf:86:81:e0:57:70:ba:a6:09:d7:7f:5f:e4:b1:3f:7b:
5b:0d:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:29 2026 by rpki-client