Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: 1GzJ6m6bcddwwsIPaO4yWm0nyX3LHvx3Hb+DICXfHP0=
Subject key identifier: D0:49:3B:0E:1C:1C:0E:0B:A2:A4:33:7E:99:2F:72:E9:2D:94:02:77
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 019D28F2D3FC9E50D75CB1579242F73389DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:35 +0000
Manifest this update: Thu 26 Mar 2026 07:01:35 +0000
Manifest next update: Fri 27 Mar 2026 07:01:35 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: 7yK4i1LeQEh/HtzWN5U3BvlzeiGWjZi3BeM2+xXBQIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d3:fc:9e:50:d7:5c:b1:57:92:42:f7:33:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Mar 26 07:01:35 2026 GMT
Not After : Mar 27 07:01:35 2026 GMT
Subject: CN=d0493b0e1c1c0e0ba2a4337e992f72e92d940277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:c5:1e:89:e3:29:ed:f5:7d:67:ee:e1:23:
6d:dd:78:6d:65:7a:5e:7e:88:1e:3f:23:19:ca:2b:
5b:f7:0e:0e:7a:00:21:b9:0f:2c:7c:d2:ab:09:97:
94:76:1a:65:ac:64:f6:89:ab:c3:22:78:98:a2:a1:
b4:75:1f:92:a7:15:3b:52:f6:9e:dd:69:17:d8:0d:
d5:68:99:b7:2c:09:30:27:82:7c:b9:38:e1:80:0c:
7b:77:8b:bd:4a:e3:9b:14:08:b6:18:af:06:f3:11:
12:ac:98:e7:26:d4:40:48:a6:df:45:71:3f:b3:5a:
6e:b0:5e:23:39:d5:d1:20:fe:5a:e0:32:c5:e4:36:
14:16:e4:d4:38:f9:f0:67:0c:04:c4:4c:e5:79:f7:
cd:be:3a:a7:fe:3b:a7:79:73:7d:43:36:57:3b:dd:
be:32:1c:ff:48:96:95:e1:1a:26:3a:8e:26:d9:f2:
0e:f2:b7:e0:f9:94:61:6d:b1:bf:4e:eb:8c:6b:de:
26:b4:49:a0:7b:2e:87:ec:7e:69:93:39:ba:b1:ac:
c8:3c:e9:3b:65:a2:29:5c:c7:fa:c2:02:67:29:65:
fa:c8:ed:30:42:2e:d4:fe:38:ea:b8:fc:26:67:d5:
db:10:7d:b4:66:ad:de:df:8b:07:0e:12:ea:d6:23:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:3B:0E:1C:1C:0E:0B:A2:A4:33:7E:99:2F:72:E9:2D:94:02:77
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:ae:36:19:d7:11:30:4b:c7:82:c6:be:3b:7b:24:88:df:
f5:62:2f:d4:26:23:45:e9:fa:07:7f:52:6f:2b:ad:93:27:a9:
a5:d3:99:fd:f6:2b:28:6b:31:5c:bd:a0:ad:f3:6c:1b:9c:12:
3b:bb:67:bd:f8:e0:84:f7:cc:80:f8:f2:dc:ff:d5:75:bb:7b:
18:f0:45:27:8c:75:a6:03:fd:d2:af:44:1a:02:6c:7d:ad:f6:
ee:25:b0:71:4a:1e:19:b3:89:ee:53:ce:50:f7:45:fe:8f:6a:
06:fe:6e:ad:e4:b5:4a:ad:dc:bc:26:e4:e8:ea:f4:0a:aa:c8:
ad:d8:69:e5:42:d3:cf:65:4a:21:c9:21:50:7a:72:da:c8:62:
c7:29:e3:b2:6c:d9:1d:0d:89:6a:7a:8c:2f:82:84:82:eb:39:
8e:16:9a:2a:76:03:7b:c8:69:c8:03:79:8e:a0:c8:34:06:dc:
9f:ff:a5:66:dc:5e:84:0a:99:25:17:a9:08:45:68:6b:71:c2:
9e:c1:7c:21:9f:46:cd:56:07:96:f5:74:af:b1:63:8b:3a:7f:
89:d4:a0:c6:f7:e5:65:dc:88:de:52:4e:f2:f4:7c:d7:2a:49:
1c:0d:fb:83:ff:73:e4:91:09:2d:a6:1d:42:8c:87:4b:a9:98:
13:f3:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:06 2026 by rpki-client