Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: k6pkWbBUg/9uYYVfuLKzJnrrVpvJ6jwa0Mgkzj6iomc=
Subject key identifier: 13:F3:ED:09:AD:C8:CC:3F:A9:34:5B:E2:72:F3:22:11:48:04:52:C0
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019D270463166692C64663E45D255F74DFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0A81
Signing time: Wed 25 Mar 2026 22:01:32 +0000
Manifest this update: Wed 25 Mar 2026 22:01:32 +0000
Manifest next update: Thu 26 Mar 2026 22:01:32 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: W63decQVO4pkxqUXx6GNPZeiuaoq3W+mbrniZrKm+u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:63:16:66:92:c6:46:63:e4:5d:25:5f:74:df:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Mar 25 22:01:32 2026 GMT
Not After : Mar 26 22:01:32 2026 GMT
Subject: CN=13f3ed09adc8cc3fa9345be272f32211480452c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:b6:9f:66:db:22:22:93:d6:d7:d2:be:a5:
60:66:82:9e:84:17:14:c4:23:3c:17:4c:70:5b:0c:
e7:15:a7:31:e3:c2:33:15:5f:99:5c:40:84:6d:e0:
88:18:10:b5:7f:9f:3e:f3:ac:41:47:76:9b:f4:3c:
03:50:15:01:70:a7:aa:8a:d1:e4:93:b3:b5:eb:4c:
ca:16:76:3f:a7:6d:78:ba:19:61:55:1f:86:d9:e5:
7a:f3:1e:d4:30:86:8e:96:16:58:7e:6e:f7:3d:af:
99:27:58:fa:c4:a0:a2:d6:0b:4c:99:da:83:2a:21:
da:46:18:90:62:32:7c:5a:cc:e5:31:5b:39:d6:3f:
ed:b0:89:8e:53:a4:35:ed:78:58:8d:63:31:b8:b9:
f2:7e:20:bb:6c:db:73:f3:7a:fb:ae:9a:89:40:48:
32:45:09:90:0e:7a:99:1b:d6:3e:43:4c:dd:41:af:
70:e5:ad:50:95:93:a4:44:be:e0:18:26:c5:32:3a:
0f:c5:8c:79:0a:9b:cb:24:f1:cd:76:12:49:94:e0:
6c:bd:4b:07:54:c1:9b:44:5e:50:08:b1:14:cd:6d:
23:16:f2:43:12:1b:59:4d:23:ce:dc:a0:56:0d:20:
5e:71:5b:52:44:ff:f0:56:fa:14:b9:60:0a:5e:26:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:ED:09:AD:C8:CC:3F:A9:34:5B:E2:72:F3:22:11:48:04:52:C0
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b0:c3:99:bb:cb:45:e2:5b:57:6a:c7:04:8e:9b:57:74:6b:
ab:ce:31:ed:08:79:fd:06:b6:0b:cc:cd:84:dd:3d:6c:93:ef:
df:57:76:79:00:36:bb:c0:69:cd:4a:59:c7:0d:54:e1:80:c7:
f7:7c:87:71:67:60:8d:ae:19:aa:6b:3d:fd:14:53:81:3f:2e:
ee:0e:3b:58:bc:cf:03:0e:0f:b5:5a:eb:35:dc:68:b4:72:fc:
08:fe:11:23:cc:30:e4:d6:8c:5d:2f:29:e7:e7:44:8f:94:f7:
5f:86:0e:a2:0d:31:70:e4:e0:19:48:b6:c0:72:a2:71:e1:e0:
f3:f2:13:5c:c2:4e:a0:53:53:11:41:f4:8a:84:60:8d:c9:1a:
4f:f7:fb:78:4a:84:41:cc:5d:31:73:bd:42:91:fa:b5:a1:19:
3d:36:67:17:9b:12:c8:e7:1a:d2:d7:9c:bb:98:ed:79:f0:5e:
df:29:eb:28:15:10:d3:ba:38:56:93:d3:cf:e8:c7:2f:63:cc:
4d:08:4a:1b:06:a0:14:39:7a:1e:de:17:3d:28:a2:dd:f0:bc:
e4:3f:bc:4f:e4:ae:21:c6:2c:3c:fb:fd:9d:1a:e7:19:26:90:
84:58:e1:31:06:b8:c3:57:e5:da:6f:6e:49:46:1e:76:21:96:
4b:e9:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:28 2026 by rpki-client