Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json)
Hash identifier: ZkilmNtEuZFhBiDIL+r/fGDE/Byxfcz0nnvfTZlp160=
Subject key identifier: 0C:82:96:E9:F9:A0:42:CD:CB:0C:15:5E:BE:A9:7C:BC:31:39:3D:D9
Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Certificate serial: 019D26CD5908C3A2D468ED874C7D80CE0BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: E8lgvTK8iVuJuXJ4XgAZzM58IIwPD7f/PJ37DiU9qWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:59:08:c3:a2:d4:68:ed:87:4c:7d:80:ce:0b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=0c8296e9f9a042cdcb0c155ebea97cbc31393dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:f2:3a:85:7e:d6:75:7f:72:14:0f:9e:52:
9d:7b:b9:e9:6c:52:ed:7a:18:4d:b1:97:dd:cc:79:
fe:a6:e5:6c:d2:2a:3e:a7:15:87:4d:a2:81:fa:61:
71:5f:dc:91:b3:6f:e6:b3:d3:4c:e5:a6:a0:8b:8a:
3f:03:8b:4b:53:f8:60:b1:d0:ee:13:06:5e:f6:a7:
6c:d5:b6:63:5a:7c:9a:02:ec:40:06:e8:e2:b4:2e:
a6:03:90:24:a6:5b:41:04:1f:13:1c:b8:63:32:34:
ae:35:6b:f6:0a:87:b8:96:cb:b3:b1:b8:2f:e0:a5:
97:57:08:39:09:51:a9:5c:f1:54:53:44:1c:da:ba:
96:d7:ea:92:42:ed:d3:a4:83:c6:71:2d:a6:1e:7e:
90:3c:85:47:88:df:df:ea:ff:04:22:2e:ec:8d:25:
d7:6e:ec:40:81:b7:e1:be:fa:e5:11:98:41:8f:05:
b2:5f:d2:28:8b:c3:3a:01:e5:f7:b7:0d:b2:2d:80:
51:0b:2f:11:dd:3e:79:26:87:48:90:09:51:29:05:
51:2d:1d:63:ed:90:8e:0c:65:fc:90:55:61:ef:e0:
0d:f6:b0:59:ce:83:d0:7d:f2:7e:d9:91:06:78:68:
0c:c5:d5:1d:e2:09:de:86:e5:8d:c5:50:e6:11:9d:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:96:E9:F9:A0:42:CD:CB:0C:15:5E:BE:A9:7C:BC:31:39:3D:D9
X509v3 Authority Key Identifier:
keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8b:0c:b3:4d:42:78:da:ce:93:39:4d:36:be:46:06:b9:51:
c8:99:b4:b3:69:a5:73:0b:50:5d:4e:6d:83:d3:21:83:19:43:
97:89:60:f4:55:b0:b6:e7:6b:05:fa:2d:0c:25:f7:81:da:ed:
16:4b:d6:78:5e:b9:1a:13:df:9e:45:dd:cd:cc:16:90:6e:c6:
65:15:89:83:07:bc:b9:45:fe:9a:e0:05:17:7b:cd:e9:f9:36:
ac:61:18:94:dc:77:9d:2d:96:93:72:3b:3e:54:12:b4:57:73:
52:19:1f:ee:b3:34:d5:0a:fb:c5:52:da:a7:9c:d9:a1:1a:52:
96:a7:0d:28:15:97:d6:c1:41:bb:f0:82:a7:92:e9:e9:d5:b2:
44:77:39:a8:03:f5:95:cc:94:1f:5a:64:2e:ae:f3:41:cf:9d:
c2:c9:19:cb:f9:d3:4e:7b:2e:43:80:84:25:b6:e6:32:70:ea:
f8:6c:22:51:d6:1e:e1:91:f8:a9:4f:74:a0:68:40:b1:84:34:
23:74:89:56:46:31:b7:11:80:63:d9:56:c8:83:5a:ba:14:15:
ad:c3:bd:8e:23:c6:07:ed:47:ee:8f:8a:8d:ec:cc:15:df:68:
a9:2b:dd:52:47:db:c2:fa:25:c3:e6:e5:b9:18:89:78:f6:89:
29:30:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:21 2026 by rpki-client