Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: R3LcFfXEmQUdr7ctnmz4Yw1MpCXFlO35Qaq7l8laL3s=
Subject key identifier: 1A:33:DF:D5:BA:48:34:32:A6:36:0D:96:D9:56:53:66:6B:56:FB:D5
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 019D24DF2ED6FA591082F2C9E04B86794CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 25
Signing time: Wed 25 Mar 2026 12:01:39 +0000
Manifest this update: Wed 25 Mar 2026 12:01:39 +0000
Manifest next update: Thu 26 Mar 2026 12:01:39 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: vGrfjbr+tf8OVXKOAwEfPlLleT0lHtyPm2CtcWS1ekQ=)
2: gledw4240Dyd4ySNd3EiBGN_CT4.asa (hash: M04U7guZmUOlclnnZ5JAo58CmLjMUZmoOonluYoN36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:2e:d6:fa:59:10:82:f2:c9:e0:4b:86:79:4c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Mar 25 12:01:39 2026 GMT
Not After : Mar 26 12:01:39 2026 GMT
Subject: CN=1a33dfd5ba483432a6360d96d95653666b56fbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:e7:85:fa:2b:28:e5:69:cc:d1:b6:23:f4:
ac:13:d0:1c:5f:4f:25:2d:dc:7d:66:d6:3c:eb:46:
7b:fa:9c:3a:35:68:9a:ee:3a:f8:54:b4:74:8e:b8:
15:9a:cf:7d:a6:1b:4a:8c:7f:a4:1a:39:de:3d:3a:
c6:71:d6:b4:29:8c:54:0b:82:c9:7d:22:c2:16:e9:
58:52:5a:d8:dd:dd:48:c1:15:0a:b3:6e:d3:c3:1c:
81:f7:68:74:08:c0:20:ab:53:0b:01:a3:9e:a8:5b:
e4:6f:d9:a5:f6:84:8a:2b:23:8c:21:f7:9e:60:89:
84:19:59:4b:3e:76:43:95:3c:2a:7a:b1:ad:b4:2e:
97:6e:cd:12:b7:0a:fb:a0:9c:d4:6c:1f:0b:3b:a3:
20:00:5b:22:0a:ac:e9:80:4a:b8:43:e6:4d:33:48:
96:52:30:f7:6c:8a:da:7b:ba:27:f0:f9:7f:f2:db:
fe:e1:a8:a4:fb:00:ce:ad:64:12:3c:b2:2f:20:15:
fb:74:b9:a1:70:a4:cc:50:e5:c4:87:d1:cd:87:d5:
32:d3:fc:c1:1b:3f:c4:1c:f6:19:cc:26:82:64:0e:
b4:b7:c0:8a:1c:09:f7:8f:11:68:1c:9c:53:4d:5d:
f2:1e:f5:43:c3:c3:33:5c:c9:ba:0d:a0:99:93:37:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:DF:D5:BA:48:34:32:A6:36:0D:96:D9:56:53:66:6B:56:FB:D5
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ec:0f:ec:94:01:91:2e:b9:9e:31:23:02:49:b9:2c:95:df:
38:64:56:35:4e:75:52:76:ce:98:57:03:dd:ab:e5:d4:2e:6e:
75:b4:54:51:67:14:60:03:52:47:8a:92:ff:fe:56:33:16:af:
7f:5c:72:63:85:96:f7:a3:84:03:32:96:d4:ee:bf:db:3a:67:
2c:1f:00:a0:4a:d2:ed:2d:91:48:c7:28:96:5b:3b:04:ad:85:
8b:09:7d:c1:1b:be:4f:35:71:ce:6e:a5:7f:20:0d:38:0a:f0:
e8:41:8b:c1:30:92:1c:b0:8f:e5:db:00:14:74:a6:89:79:c7:
f6:bd:6c:dc:06:45:fc:11:9f:76:d6:b0:b2:6a:92:2b:60:d0:
3d:90:51:67:83:62:18:66:8e:9d:74:dc:c7:88:e0:af:13:1a:
ec:b5:5e:4f:90:f3:ff:35:d3:52:3b:69:55:13:e7:15:39:4e:
77:b5:23:e4:4e:d8:c4:af:9a:ca:72:ca:a8:bb:f8:f9:1c:49:
1c:59:a8:aa:a3:c0:2b:a6:a3:1b:2e:68:0e:d7:1d:73:05:1c:
9d:86:7a:f7:56:6a:bc:bb:c6:9c:51:3b:9c:eb:8b:bd:64:85:
16:27:20:d0:d1:30:4a:4a:14:0f:41:29:6d:78:76:eb:81:34:
ed:9a:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:46 2026 by rpki-client