Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: kPfBG2UYWAjlQDwcrRkvQdemcwbamyjxJm13V493XYk=
Subject key identifier: 6D:5C:1C:95:B9:36:37:AA:EF:6A:EE:77:F4:8C:2A:56:DE:62:E0:96
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 019D2704B60F06D8380024F3DD2AED1F3089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 15BE
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: 5cl2NK9UOvYShoX4n++ajZfbard166X0z1QDX3DiTBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b6:0f:06:d8:38:00:24:f3:dd:2a:ed:1f:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=6d5c1c95b93637aaef6aee77f48c2a56de62e096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:48:ee:3e:4b:f8:28:9e:a2:ba:20:da:1f:
a5:e4:de:0e:40:67:ee:b8:1e:ad:2c:39:a4:30:c4:
ff:70:63:5a:97:3f:8d:21:04:3e:58:c6:2f:d4:bd:
b8:18:99:12:3c:17:ca:82:a7:ed:a8:16:9a:0e:a3:
12:79:63:ac:9f:fa:2e:8a:72:66:cd:2b:40:9f:b8:
dd:25:cd:87:45:fd:52:f6:b1:a3:e2:54:21:12:50:
63:57:8a:91:9c:1e:88:c0:95:6d:f5:a6:e6:b5:c6:
4b:58:7c:fb:a1:57:5e:f7:a9:88:70:81:7a:0f:24:
16:42:59:3d:fa:b8:25:75:40:49:e6:66:d0:6d:e8:
f2:ef:32:23:9a:d9:78:64:6b:a5:ba:eb:7a:c0:55:
fd:ea:1a:b6:f0:39:4f:c9:f4:17:4d:d9:91:46:bf:
93:17:2c:58:91:fe:0d:4e:34:fc:13:97:58:b6:bb:
7f:4d:46:59:2f:4e:26:ba:8e:d0:66:ca:10:d8:7a:
57:55:ee:37:62:4e:71:f1:03:6e:8b:14:c5:4b:76:
2f:1c:22:a3:cf:3c:a3:3b:3f:5d:d4:1e:30:3c:9b:
f9:c5:f4:aa:a3:68:ae:0f:52:45:bb:21:0d:17:38:
34:c7:11:b7:8d:1c:35:44:a7:be:ff:82:c1:a9:82:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:1C:95:B9:36:37:AA:EF:6A:EE:77:F4:8C:2A:56:DE:62:E0:96
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c6:05:1a:05:bc:54:5a:a9:11:d6:0a:b8:8a:e0:41:b2:6f:
bf:bf:42:53:f4:44:47:47:63:8f:c3:f1:cf:7f:64:2c:90:d5:
37:6a:39:05:36:b2:78:d7:9a:1d:46:49:90:81:11:c2:75:5b:
82:cb:b2:f7:88:d9:7c:5f:53:2c:6c:cc:06:e9:1e:3f:4f:35:
da:fb:fa:c8:cd:9b:72:91:18:37:0a:8e:e7:c7:ec:f6:ec:a0:
eb:ba:92:15:39:71:35:f2:21:14:e2:57:73:48:5e:eb:a3:38:
8c:b6:7d:30:b2:f1:ed:3f:a4:da:1a:20:90:8d:e3:90:d3:28:
9c:d4:d4:91:ef:e5:b1:f1:f9:09:0e:45:c1:4d:a2:ad:a5:e3:
e9:a3:51:af:7d:d3:b6:d9:2f:15:90:46:fd:37:cb:51:a4:5f:
c2:fd:81:69:4f:61:0b:2b:13:b9:fc:cb:65:db:07:46:3e:8f:
23:56:7d:f1:04:f8:d4:eb:61:ca:23:12:ac:25:66:2a:d0:70:
2c:07:a6:e9:b9:06:bc:27:5c:11:ff:32:5f:1d:f5:ba:d7:c7:
98:c2:ed:ee:cd:94:69:07:e9:cc:4c:78:21:a9:3f:ce:50:04:
6f:4a:e8:d3:ac:a3:58:af:b7:e8:13:22:af:b4:ac:81:60:5d:
c4:40:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:54 2026 by rpki-client