Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: 7xInCqi4zckX0wxdfjJPxQDrKMgQN/lPeGkj0P5jo3I=
Subject key identifier: B3:BC:73:DD:ED:AF:0D:57:C9:79:64:69:93:CC:20:CD:9B:2A:F0:96
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 019D32D119B8942ED59C7326760893C5E4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 159A
Signing time: Sat 28 Mar 2026 05:00:57 +0000
Manifest this update: Sat 28 Mar 2026 05:00:57 +0000
Manifest next update: Sun 29 Mar 2026 05:00:57 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: V0H2qxSflvDBKzEeyp8cckMoS2NzvXeg3b8e9QV77Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:19:b8:94:2e:d5:9c:73:26:76:08:93:c5:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Mar 28 05:00:57 2026 GMT
Not After : Mar 29 05:00:57 2026 GMT
Subject: CN=b3bc73ddedaf0d57c979646993cc20cd9b2af096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:28:a6:e8:54:2d:77:b5:15:8b:82:75:57:
5a:f4:10:20:9f:19:3b:fe:e7:9e:86:a8:ca:3e:50:
47:c7:60:7d:4f:96:42:58:4f:46:49:e1:7a:32:de:
b5:71:1e:7f:e1:ef:23:bd:fb:7e:de:1a:da:e8:a4:
83:22:9a:a4:b8:52:6d:af:90:47:ff:ea:c2:7c:26:
11:2b:6a:49:a8:6f:0d:ae:3c:8e:c3:fd:f3:4a:60:
9f:1f:7e:c3:7f:14:da:eb:8f:35:e6:5d:a9:48:42:
64:48:d2:88:5c:a4:38:8c:c9:38:f6:89:0e:b6:64:
77:8c:b0:20:f4:c3:d6:7a:56:3a:f8:b5:14:2e:a8:
51:cf:58:7d:dc:49:36:4e:81:61:fa:82:5e:f0:22:
42:7b:04:bf:8c:23:3f:f5:48:23:f6:66:9d:1a:89:
19:4a:25:4f:b0:41:2b:8e:c9:db:6f:de:fa:e2:2f:
13:2c:f5:a3:33:3d:f3:4b:c3:fe:a7:41:b4:77:e4:
d4:62:67:71:9e:07:7c:3c:45:82:ff:74:08:ca:10:
15:b6:df:3e:60:6f:74:80:87:51:59:1d:1c:b9:8e:
18:82:a0:61:83:19:ac:7e:e4:c8:19:a0:0c:8f:d4:
5b:af:6f:3e:00:d6:20:12:9c:34:c4:4a:0e:28:87:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:73:DD:ED:AF:0D:57:C9:79:64:69:93:CC:20:CD:9B:2A:F0:96
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:63:a4:23:cd:52:ae:cc:0a:18:ba:be:2d:5b:00:12:e2:37:
10:28:cd:af:7f:b7:85:36:fe:65:a1:03:83:8f:67:52:29:ba:
5d:c9:b3:d6:76:d2:9e:a0:7b:43:5f:18:58:f3:b2:31:8c:d2:
8f:1a:dc:d2:14:75:4d:8b:61:19:47:87:67:8b:2f:f2:24:cf:
b1:82:a5:2b:ef:4a:cc:2d:9c:75:fd:8a:15:79:45:ce:74:2d:
9a:53:0e:d6:b5:ba:65:85:aa:0e:16:1d:69:2d:d3:bb:48:ce:
a4:bc:ce:98:89:48:eb:cc:7f:89:b2:9d:fd:26:51:e8:a2:c2:
25:ac:d2:5b:22:dd:ef:a0:bc:67:fa:fc:f4:9b:39:60:82:a3:
a9:03:2f:a0:8a:46:34:b1:3b:91:99:c9:31:d6:0d:0c:2e:45:
6f:ae:0d:5e:de:f4:34:54:0f:9e:50:09:5c:4b:29:96:19:68:
ce:b7:7a:13:69:db:4d:4b:e9:aa:2b:8f:dc:f3:fe:f2:7c:e7:
a3:6d:da:20:b1:b8:f6:4d:43:76:6d:23:f7:ab:04:e6:80:2f:
b6:ec:48:c0:9d:83:2a:61:d7:65:df:0a:9d:36:ba:84:40:05:
c4:69:1e:28:d2:2d:a9:59:d7:56:d9:ac:e7:84:4f:26:c2:4c:
e9:2b:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:08 2026 by rpki-client