Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File: mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier: tTQi8atF4ESWGPKmMfZfS4rjiHCHqcRmYuyUKIMDWlU=
Subject key identifier: 5F:7C:9E:E0:AB:29:7D:72:85:E4:1B:3B:B1:3C:D9:DE:1E:13:DC:DE
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer: /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial: 019D25837BF8F7B4BA2F0A8954AE7F6F14AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number: 0737
Signing time: Wed 25 Mar 2026 15:01:07 +0000
Manifest this update: Wed 25 Mar 2026 15:01:07 +0000
Manifest next update: Thu 26 Mar 2026 15:01:07 +0000
Files and hashes: 1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: LD+7PDRSYUcJfYTvnu04D8OjymRYOvsH/yh6JpaZ2hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:7b:f8:f7:b4:ba:2f:0a:89:54:ae:7f:6f:14:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
Validity
Not Before: Mar 25 15:01:07 2026 GMT
Not After : Mar 26 15:01:07 2026 GMT
Subject: CN=5f7c9ee0ab297d7285e41b3bb13cd9de1e13dcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:94:ee:91:47:d3:85:89:ab:26:29:79:e2:
d6:6c:9e:b1:99:ec:8e:9d:f0:09:f0:65:5e:cf:1e:
1c:82:2a:b3:5b:53:b5:4b:61:c0:01:a7:df:09:d8:
c3:bf:f6:45:e9:28:d5:94:9a:cf:af:e4:9a:ae:11:
e4:f9:ec:c4:36:6b:3d:fa:1b:44:f3:c7:b9:d6:16:
2e:bd:b7:d1:09:0b:9e:31:fc:27:8b:db:24:48:55:
7c:94:ef:77:c6:54:0a:9b:fd:16:dd:62:34:44:14:
fa:e8:7a:59:d4:c5:c3:b2:db:05:e2:0d:39:22:f1:
0b:0c:2e:11:a9:24:60:a3:79:fb:c8:89:48:ab:0d:
dc:a2:2a:eb:15:c9:ac:d5:e4:71:f1:40:a8:f9:17:
9e:4e:3b:2b:35:ab:38:fa:b7:a2:07:fe:15:4b:31:
e7:1d:95:60:8e:f5:2e:f4:89:54:d3:84:d8:49:41:
d6:74:52:21:9e:1b:e8:63:f4:d7:a5:dd:61:86:2a:
0c:f1:11:69:1f:8c:c9:af:cf:8a:9f:ac:70:44:62:
18:e6:dd:86:cd:73:a8:b0:21:8e:a7:83:13:50:92:
39:65:11:78:8d:93:bc:5c:c2:17:72:b9:70:94:d5:
85:71:5b:d3:06:14:0a:a9:48:3e:51:ff:0c:70:71:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7C:9E:E0:AB:29:7D:72:85:E4:1B:3B:B1:3C:D9:DE:1E:13:DC:DE
X509v3 Authority Key Identifier:
keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:97:c9:42:23:5b:36:9e:12:17:30:0d:f8:45:e6:d3:2c:
d7:73:e2:89:e8:75:04:fa:95:c1:99:27:72:33:57:64:47:e2:
c4:d0:cf:56:27:65:43:06:b7:40:8b:74:78:2b:ad:dd:5e:54:
46:58:68:a4:a1:90:1b:5e:d2:85:60:b9:c7:bd:0f:ea:77:5c:
bd:29:a2:e2:59:f4:ef:d1:3b:c6:50:39:b5:2e:bd:70:cf:b2:
a1:8b:2f:c3:9f:a2:04:e1:a2:f9:ef:b4:ea:b7:47:81:77:1b:
5c:f8:32:9f:bd:8e:00:d7:64:ee:c5:e9:04:25:3d:27:df:f0:
e2:b9:ad:3e:84:6c:b0:f6:b0:f4:3d:2f:66:dc:b2:00:4e:eb:
c4:14:e4:1f:98:c9:0f:08:12:c6:91:92:06:c5:56:f4:33:97:
36:c5:b7:34:c6:c6:f3:68:95:a8:23:fc:9b:c8:16:9c:ad:5b:
94:c8:97:95:78:3d:22:b6:f2:9f:44:08:7c:ac:c0:36:99:3b:
c2:b3:39:fb:ed:f9:76:51:3c:39:de:cc:71:6b:74:86:fe:5e:
56:5f:77:6c:e9:9a:80:68:63:b8:d5:13:10:f1:d6:a6:d5:24:
73:a8:c3:ba:39:a3:57:f5:c8:8f:d2:2b:ad:b9:1d:ab:54:38:
5f:42:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:56 2026 by rpki-client