Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier: ZaYsPlYf7MdvJKYulH5GjuLXVyQcjW177QTs5g4J9os=
Subject key identifier: 4D:78:18:FA:7E:93:D0:6E:F9:90:D1:96:18:39:80:F1:DC:89:9B:9E
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial: 019D2960DD1D0FEFEDD66F5E41258F046F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 09:01:47 +0000
Manifest this update: Thu 26 Mar 2026 09:01:47 +0000
Manifest next update: Fri 27 Mar 2026 09:01:47 +0000
Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: zU+RlxJqfsbWVyJ+YhqgvLVyF/2dJ4MMmlIVfJSVLoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:dd:1d:0f:ef:ed:d6:6f:5e:41:25:8f:04:6f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Validity
Not Before: Mar 26 09:01:47 2026 GMT
Not After : Mar 27 09:01:47 2026 GMT
Subject: CN=4d7818fa7e93d06ef990d196183980f1dc899b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:42:79:4f:5a:29:f9:8f:4c:72:bf:c8:cd:
3e:8a:8d:b4:29:94:87:04:3d:0d:f0:29:44:bb:1e:
13:e0:05:54:8d:62:4c:9d:d4:f7:b1:da:21:c0:2f:
21:11:ac:42:80:6f:dd:9c:c8:d4:b8:f9:64:c8:4d:
f4:c9:fd:65:87:7d:a3:22:47:04:42:d3:e0:2c:47:
b6:3c:b4:b7:0c:e4:be:16:95:39:0f:7c:00:9a:da:
91:45:a9:6e:e6:41:fd:89:cc:00:95:26:5f:88:cd:
cf:fb:ff:50:6f:93:3e:48:8d:ae:db:62:2b:65:c1:
33:82:87:f9:0f:53:7e:8a:df:b8:c2:47:5c:c4:37:
29:c3:a1:5d:f8:3f:e0:c6:00:fd:61:35:81:d3:e7:
07:cb:b1:0e:95:d5:02:17:e5:77:9c:76:9d:ba:d2:
3c:f4:38:0b:ed:4a:c7:ce:54:28:a0:27:55:89:b0:
bb:7e:56:71:bb:4a:de:55:17:50:17:5c:1a:20:7f:
9e:df:d1:06:b9:dc:80:c3:56:29:d3:ee:f6:41:f0:
6c:91:5d:82:47:a8:0f:43:8c:95:7c:19:c6:a8:1b:
d0:1b:9e:f6:2f:f9:77:f1:6b:84:6f:0b:16:70:ba:
dd:0a:57:0c:19:87:d6:47:d1:5c:22:5f:61:fe:d1:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:18:FA:7E:93:D0:6E:F9:90:D1:96:18:39:80:F1:DC:89:9B:9E
X509v3 Authority Key Identifier:
keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4f:89:f8:cd:48:97:20:cc:99:c2:2f:d4:2b:0d:05:2d:e0:
b9:e6:c5:30:d2:2b:10:55:b4:96:af:be:c2:bb:0d:87:9f:24:
ea:6a:5d:99:e4:7b:a1:c0:83:97:75:ff:d6:8e:88:68:55:4d:
f0:31:5b:91:f4:76:62:23:70:25:59:53:82:fb:fe:7d:2f:69:
fc:90:1c:6e:31:c6:31:65:99:d2:96:ac:32:c6:4d:58:90:3b:
e3:2a:aa:9c:cc:89:32:7b:bb:4b:bb:c5:06:3d:c7:3f:97:45:
53:cd:24:d2:28:5d:92:81:e0:43:66:7d:ca:b9:89:a4:3f:e0:
ba:01:df:a9:62:94:08:12:bb:1a:10:fb:d9:63:69:33:df:cd:
72:ad:2e:f8:73:18:d3:8d:22:fa:01:8d:42:cb:e9:29:bb:49:
47:f3:e7:8b:52:4f:ec:77:9a:01:e0:b5:a0:6d:d7:1d:e4:57:
2e:b0:db:52:94:f4:b0:a3:d2:01:bd:df:18:0d:5f:a5:2d:26:
e8:ed:26:7c:6b:9d:03:e4:0d:e3:9b:94:db:e1:49:4b:75:8d:
36:97:25:b3:53:20:2c:76:a8:d3:c2:0a:d3:ee:02:87:90:aa:
30:40:0f:32:3a:26:4e:f1:c9:58:3d:3f:b5:6d:09:cb:43:56:
9f:3e:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:29 2026 by rpki-client