Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: ecT92c2htT5tzCvZKjgbM0vtBbOsuRQuF9Dvs8H3VRk=
Subject key identifier: 84:EB:27:A4:26:07:B5:B9:D2:4D:FA:9B:ED:0D:F3:3C:90:08:E9:4A
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019D2AE07E1234ED1FDA9FD089E9B266F33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 0964
Signing time: Thu 26 Mar 2026 16:00:48 +0000
Manifest this update: Thu 26 Mar 2026 16:00:48 +0000
Manifest next update: Fri 27 Mar 2026 16:00:48 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: tzOlSpM4hggjfAKc8fhvI+S+R3vdWwwRKpJxBjG/V2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:7e:12:34:ed:1f:da:9f:d0:89:e9:b2:66:f3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Mar 26 16:00:48 2026 GMT
Not After : Mar 27 16:00:48 2026 GMT
Subject: CN=84eb27a42607b5b9d24dfa9bed0df33c9008e94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:f9:e1:0a:8d:f5:5b:5e:d1:5b:8c:cf:06:
35:3e:08:e7:94:8f:c3:ae:1f:00:37:d9:04:9e:19:
36:5a:bf:92:4a:b3:64:85:a0:6a:f3:16:f8:5d:8a:
15:ca:4c:26:45:41:8f:cd:c4:2f:07:8e:14:0f:09:
7f:af:ca:b6:a1:ae:e7:ab:d0:65:47:cc:42:ae:9c:
47:39:f5:d3:16:e7:72:12:09:88:e5:77:9f:84:5d:
73:e7:97:f3:76:16:6e:6f:dd:87:b1:bd:43:76:f2:
e0:bf:14:98:2f:0e:db:3b:2d:03:d2:57:f5:cd:4d:
c7:1f:1d:99:9f:24:03:89:2c:c0:81:54:e9:25:7e:
ff:f0:c6:45:f7:44:1c:28:ad:f6:d8:f5:5f:a6:ee:
89:71:2a:8e:ab:49:0e:6a:99:2a:22:44:a0:c0:1e:
77:24:b2:f7:60:9b:75:d7:dd:2d:7f:1f:af:f8:ff:
09:e8:4b:37:2b:1b:89:cc:a6:eb:bb:b2:77:13:24:
08:23:02:7c:63:b4:81:63:20:91:13:a4:e2:54:9b:
b7:bf:46:af:13:87:e1:29:d5:a7:2a:35:cf:a4:c8:
6a:f9:9a:c4:7f:e1:57:55:88:a4:4f:02:47:ce:65:
b9:88:4d:92:96:9b:ba:ce:67:9e:ab:07:d7:58:92:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:27:A4:26:07:B5:B9:D2:4D:FA:9B:ED:0D:F3:3C:90:08:E9:4A
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4f:a8:c4:c8:8d:bb:e7:e0:95:27:b8:d2:af:38:51:0b:19:
ac:f3:25:c5:59:38:2d:c6:f0:59:4b:37:1d:39:67:d2:2f:73:
8e:12:0e:4a:51:57:a0:18:6c:d0:4d:0a:75:26:10:90:5a:36:
f8:dd:b3:8c:91:56:89:32:aa:27:a1:47:9b:48:4c:0a:f3:ef:
5f:50:de:2e:3a:64:96:e4:35:b0:e5:ab:eb:0c:0e:e7:7c:69:
44:fb:ee:ea:25:60:41:04:b1:fa:56:bb:04:1d:b3:fb:ba:9c:
3b:c5:b4:ee:02:cc:70:a1:16:ce:98:a4:d4:ed:b7:35:da:26:
48:af:47:83:63:09:74:38:5b:3c:ea:ba:2f:87:d3:42:53:4d:
5c:46:76:b7:db:f5:4e:8d:fa:a1:91:6d:ee:dd:63:4b:77:d7:
8d:b3:1a:83:51:aa:05:01:54:21:ec:ea:b1:0e:3a:53:57:dc:
dd:6f:03:9b:0a:7b:32:71:ca:ce:a5:2c:d3:47:a9:1f:ec:2f:
0e:34:96:2c:97:10:2a:4e:dc:29:45:56:cf:82:97:9b:cd:30:
ee:61:d5:ca:d7:22:26:57:2b:8f:db:9b:9e:3a:c6:44:56:f9:
4d:64:e6:6f:38:33:56:e9:3e:b1:f7:db:07:72:39:68:c3:ad:
2c:42:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:33 2026 by rpki-client