Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: cOKzG/wARBvMdpzqaxnPS0+W9ywB4HD5F8nhC9Kv1xA=
Subject key identifier: AA:A3:4D:D3:87:BB:F1:4E:E8:C0:04:44:DD:94:92:BF:8C:25:A3:30
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019D28842C3A99F595683C325E5978C0CC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:43 +0000
Manifest this update: Thu 26 Mar 2026 05:00:43 +0000
Manifest next update: Fri 27 Mar 2026 05:00:43 +0000
Files and hashes: 1: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: TmuitaWpaBQiCnh/wxKcoQvvosk8Sdf4tNYYHbVk5GU=)
2: Y4Ztj_LvVduFmJe-S8DAGQ8C-Xw.roa (hash: PnJYtORtq7q9TMkof+95kidGWv4p60mPQyI6Q4NduWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2c:3a:99:f5:95:68:3c:32:5e:59:78:c0:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Mar 26 05:00:43 2026 GMT
Not After : Mar 27 05:00:43 2026 GMT
Subject: CN=aaa34dd387bbf14ee8c00444dd9492bf8c25a330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:ec:75:42:55:88:30:19:5e:eb:e3:91:bc:
f6:2f:ed:16:83:97:15:04:6a:88:62:61:26:d2:fd:
12:c5:47:81:92:c9:f1:4c:98:87:e5:83:fc:4a:d2:
11:5b:3f:df:e0:64:3c:f8:0a:dd:60:cc:5f:41:04:
f9:33:4e:fd:2f:77:4b:1e:2f:9a:e0:ce:9f:e8:62:
db:f2:b4:f0:df:f1:18:f1:f1:25:b6:b7:e2:4f:c2:
56:de:fa:df:3c:9f:fd:f7:8c:4a:c3:27:02:5f:82:
d7:7f:3a:28:e6:15:5a:18:b6:8b:8b:90:0d:6a:ad:
48:9a:0d:20:59:c4:8b:c9:fd:e2:85:e9:75:e2:43:
46:83:11:60:77:83:e7:49:4a:4d:f5:e9:da:8d:01:
92:42:3a:13:9c:e2:53:81:48:63:be:f2:8e:f5:46:
77:23:bd:ef:97:30:2e:44:5f:47:63:44:a5:e5:3d:
e0:f4:cf:23:01:01:68:01:09:0d:5d:4b:2b:2f:00:
5e:70:2a:6e:88:83:19:fb:ea:3b:da:28:3a:12:e6:
df:fd:7e:6c:85:2a:a2:a7:5b:ca:34:6a:b2:ff:ee:
77:18:35:2b:b4:69:5c:d9:06:8c:ab:55:72:99:63:
2d:ac:54:0d:d4:8d:87:8a:c6:b3:fc:65:d4:f7:25:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:4D:D3:87:BB:F1:4E:E8:C0:04:44:DD:94:92:BF:8C:25:A3:30
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:90:72:e0:29:44:c0:96:ac:3e:d5:d1:2f:93:ca:2c:2d:da:
a4:c2:0e:fb:61:f9:a7:d2:0b:7e:91:32:80:f4:1c:20:2f:db:
9a:3e:6e:95:70:54:50:e7:05:c4:43:06:af:a5:a6:a3:4b:81:
71:b1:cb:1f:49:5a:24:37:b1:b1:72:9a:40:db:57:a9:bc:3f:
7c:54:54:b1:90:49:89:df:5e:a2:c9:8a:d4:e7:d1:ea:6b:85:
d9:b9:89:b5:a5:a6:0b:32:e7:ac:4e:1e:61:02:f3:17:5d:07:
d6:ef:ec:ed:91:4a:f8:01:a5:e1:45:43:7c:ea:f8:e7:80:f6:
ed:c1:fc:24:75:4f:99:04:07:20:1b:4a:e2:bc:ef:e3:ed:22:
08:f1:a7:13:02:e7:d2:57:48:24:2f:93:17:a2:c7:ea:82:f2:
7c:7b:50:0a:4b:ea:e1:60:bb:46:dc:68:38:a8:f6:98:7b:bd:
7f:93:dd:b2:35:96:0b:40:30:e4:97:de:c8:2d:e8:52:f2:ba:
d7:ec:1a:2a:61:e6:4c:7d:6f:1e:d1:97:83:c5:08:fa:88:83:
6e:fd:f3:ac:a4:1e:70:0d:0f:55:20:92:83:c7:0f:43:42:33:
47:09:b6:7a:5e:76:76:d3:ff:d6:57:6a:a6:52:9d:41:a5:a9:
22:a8:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:47 2026 by rpki-client