Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
File: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft (raw, json)
Hash identifier: hMW/xgi4wt/rgIETV0Qs/sdQAV+jLEIjDsuHAMDe/ww=
Subject key identifier: 8A:EE:D9:C2:0F:AC:E8:70:31:16:F1:59:E2:CC:2A:69:19:37:CC:B2
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 019D28BBB9FFE1DACD67ECCFEEB262D80296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
Manifest number: 38
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl (hash: +aF8kjmQZPzC4FZDmoWrCiK9YIuli/qRJdxKtcq+Mvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b9:ff:e1:da:cd:67:ec:cf:ee:b2:62:d8:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=8aeed9c20face8703116f159e2cc2a691937ccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:b3:2d:a5:7f:e7:95:42:07:1a:5e:73:79:
b3:36:2f:93:e7:60:fe:32:e3:ef:46:7b:da:ba:cf:
03:34:15:8a:e3:f3:7d:a7:c7:c0:c3:02:63:5b:27:
05:a3:6b:b6:96:61:53:d2:7a:0a:be:28:8f:fb:a9:
25:8e:51:39:d1:8c:ea:d4:f6:18:27:be:23:72:63:
87:25:ed:07:68:39:b6:7a:78:04:be:8a:37:b5:b7:
3b:52:6c:9a:1d:05:01:6e:16:c6:f2:50:9e:4d:1d:
1f:93:eb:0e:a8:a6:64:81:7d:a3:58:98:ee:5c:c0:
f9:ac:48:8a:3a:e7:2a:21:87:1b:98:11:4f:0e:a5:
61:70:cc:11:fc:99:e5:c6:f8:c0:f3:c0:31:77:a7:
9b:81:03:3b:ed:66:11:fd:68:77:50:70:d5:2e:21:
c5:dd:f4:fe:a6:24:6c:29:3f:db:5d:75:65:88:08:
f9:c8:2e:63:01:d7:f4:75:91:1a:39:33:ed:2b:f3:
71:4e:87:7a:2a:4b:db:4b:e3:22:a5:bf:48:04:ad:
31:fb:c1:3b:bd:47:72:5b:11:ee:08:55:33:1d:c9:
2a:bf:3c:12:f8:08:97:85:f5:81:83:77:26:9a:49:
54:bc:9f:f6:e3:8a:b1:b1:e7:01:4e:0f:f2:aa:af:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EE:D9:C2:0F:AC:E8:70:31:16:F1:59:E2:CC:2A:69:19:37:CC:B2
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4c:1a:7f:33:ff:70:77:86:23:90:eb:cd:86:21:ac:73:5d:
a2:8b:95:7c:0f:8a:96:af:aa:ff:1e:eb:d0:db:87:cc:9f:c9:
31:43:b9:dc:b8:5b:39:59:dd:ae:e9:d4:3c:fc:9e:4d:33:16:
b3:10:3f:57:e6:0a:ce:6d:dc:85:11:dc:3e:8f:c4:43:9e:3a:
b2:5e:07:05:71:28:52:71:b8:cc:c1:c8:1f:a7:25:0e:8b:bd:
16:4e:5d:83:a3:0b:39:99:24:fe:67:07:52:c7:3f:2e:bb:0f:
7d:18:cf:80:c4:cb:2f:50:5d:c8:3d:0f:31:9c:cf:d0:8d:29:
46:80:27:a3:a6:26:83:96:56:2a:5e:29:14:22:5d:08:ef:01:
81:61:9d:45:1b:de:25:f1:9f:c9:98:84:6c:58:7e:ba:5d:3d:
de:65:38:2d:7f:71:75:c8:03:d3:f7:70:e0:77:bd:fe:98:47:
33:12:c1:54:b4:9c:3a:7a:64:06:0f:f8:24:af:eb:66:ab:78:
3e:5d:a1:92:ee:59:24:6c:19:0c:d6:d3:a6:8a:5b:a3:3c:6d:
72:2a:65:fd:23:63:2a:e0:48:df:c1:db:e7:79:16:00:96:60:
d6:39:2c:7a:35:c8:e4:57:83:41:7d:b2:15:c1:4b:8d:6c:42:
01:f5:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:18 2026 by rpki-client