Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json)
Hash identifier: uSYtH3JhO6GSGgVg0bKAZB2nBOWI08W+p5dRAk5lLSU=
Subject key identifier: 92:02:DD:BD:42:4B:B1:31:AF:AF:9E:7A:2E:02:B7:17:A6:C2:D9:C7
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 019D281703C598EE80E73D051CD19BD675E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
Manifest number: 0722
Signing time: Thu 26 Mar 2026 03:01:29 +0000
Manifest this update: Thu 26 Mar 2026 03:01:29 +0000
Manifest next update: Fri 27 Mar 2026 03:01:29 +0000
Files and hashes: 1: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: iP/1cSlTpjS6adlpLTbwEss0X8fvCYut8WoHzP8cIwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:03:c5:98:ee:80:e7:3d:05:1c:d1:9b:d6:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Mar 26 03:01:29 2026 GMT
Not After : Mar 27 03:01:29 2026 GMT
Subject: CN=9202ddbd424bb131afaf9e7a2e02b717a6c2d9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:18:dc:15:9e:89:4e:88:9b:2f:0e:d5:60:
d3:8f:e1:2b:c7:3c:63:aa:38:fb:08:10:28:f3:d3:
44:4c:fc:7e:69:55:71:73:f0:f7:4a:04:3c:0d:4b:
d8:d7:e5:46:2c:68:20:41:17:3b:e5:d6:57:33:51:
71:ba:7b:07:75:a9:de:36:d6:76:11:64:de:e6:a5:
e8:f5:44:01:27:a3:1d:82:60:fd:f0:3f:3f:76:c1:
33:95:39:8f:15:e3:30:c7:ac:4c:8b:a2:50:a0:45:
cd:59:4f:b5:2c:5f:5a:ce:77:1d:e7:a2:b3:ac:b1:
0b:b3:64:71:72:8c:60:a7:38:a4:58:df:05:d4:14:
c4:58:61:29:f0:ef:b2:aa:ac:f8:45:70:90:81:f6:
48:11:08:1f:ec:45:10:bf:6b:9d:4c:53:4b:ef:5a:
3d:3c:8b:d6:2c:98:fb:87:f8:ba:96:5f:a3:85:ef:
eb:90:3a:dc:e3:e5:1e:da:29:a4:4c:9b:f6:6b:c9:
e1:4d:d3:02:a2:55:96:a6:7a:9b:7c:af:ac:60:12:
22:fa:b6:b6:9f:4e:06:92:51:b3:22:2b:11:56:84:
4f:99:15:56:a4:99:5b:dc:e2:96:09:41:de:3b:63:
c6:66:7c:4a:4f:14:6b:35:95:1b:98:76:4b:d5:2a:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:DD:BD:42:4B:B1:31:AF:AF:9E:7A:2E:02:B7:17:A6:C2:D9:C7
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e1:1c:a4:59:13:d0:ea:4f:a9:bd:88:eb:da:b1:0e:d6:0e:
e1:8b:1d:72:e8:57:cd:bb:d2:90:ad:6d:ee:96:d6:e3:f9:7d:
ba:fc:34:ed:89:5a:26:bf:a3:c9:8d:a7:06:b2:a8:0e:38:98:
d2:fa:63:4f:87:38:3d:07:d2:2f:b8:75:d9:ea:1b:37:3b:d9:
4b:4f:10:c9:3e:e5:ea:2b:58:03:93:46:d9:77:a3:9a:01:f7:
e3:97:f2:93:d4:62:bc:4e:3e:2f:8c:c5:8c:90:28:82:1b:b9:
91:29:68:dc:70:13:9d:6a:9d:5e:19:e6:0d:b2:fe:aa:c2:57:
26:4c:c9:94:3c:51:03:d8:d1:30:48:0d:2a:2c:d1:10:e8:3c:
e5:16:db:ed:d0:d4:d9:be:88:52:2b:b6:37:ab:a3:19:9c:a7:
8f:68:df:f4:e2:b8:d0:7b:f7:a3:51:fd:2e:75:f6:b6:2c:9e:
d3:84:b7:9f:57:45:93:dd:93:30:03:64:53:13:14:bc:ac:57:
14:de:47:ec:9a:54:98:c0:26:6e:51:b6:df:79:9d:5a:0a:55:
75:a4:eb:ee:cf:53:50:45:42:f0:21:a6:1c:87:20:95:d6:4a:
3b:ef:0c:9b:91:64:a3:66:b3:a7:d0:74:5b:d3:5c:62:58:c6:
95:4d:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:30 2026 by rpki-client