Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File: MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier: pN405ne80ZEv3FeMbnBwDGdyhG/CnMZRJUpU+WIloGg=
Subject key identifier: 6D:32:76:F1:65:42:38:4B:1B:A6:AF:77:B2:0D:77:45:6C:E8:B2:D2
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer: /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial: 019D27A8D97005BFA3BB501A339190FDBFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number: 0ADB
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: DBMHJJ04rozqfy49KO1ERNaIDTl92qJ/bYfjjSKtwqk=)
2: dg_wP3exQr99siZMe2HJIj5cuEE.roa (hash: 6QFunw3gR5dCtdoUx0ipbh76Y60LWX9z3LOMdv6vVro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d9:70:05:bf:a3:bb:50:1a:33:91:90:fd:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=6d3276f16542384b1ba6af77b20d77456ce8b2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:ab:d9:69:db:e8:da:81:a4:b4:c9:46:71:
5f:da:ad:45:01:38:92:2d:46:2c:5a:08:b6:71:b5:
39:d9:c1:fe:37:e2:cb:69:6b:14:b1:2a:66:b2:25:
25:6d:8f:04:7c:45:91:ec:df:32:03:00:aa:0b:de:
5e:4d:57:c4:bf:9c:42:a6:81:8d:9d:4d:05:66:3b:
e8:53:d4:63:46:78:e5:9f:d0:f4:1d:cd:80:4c:83:
d6:27:16:94:0f:48:8c:76:7c:db:db:63:8b:10:95:
79:ec:96:92:d2:4b:3a:94:0a:26:30:86:37:2c:4b:
16:ca:37:4f:bf:ca:85:cd:fe:77:b6:0a:4d:4b:ae:
93:8d:fd:0c:45:1c:89:40:ab:7c:a3:8e:9e:86:92:
c6:74:49:e4:c5:f4:93:1f:54:32:73:00:15:aa:f3:
2e:15:dc:80:be:35:25:63:18:90:c8:70:6d:e3:da:
ba:cd:62:08:a5:c7:80:8e:34:f8:6a:13:52:57:e3:
11:c1:63:4c:9c:d3:4c:4d:e3:a9:41:3f:0d:a5:0e:
94:a2:c3:16:ab:1c:49:4a:82:38:bf:8b:5c:5a:11:
f8:06:aa:c7:75:77:ef:17:d9:85:ea:f7:aa:d4:27:
0a:e6:ca:6a:83:0d:1a:c5:88:2d:37:9f:39:c1:a5:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:76:F1:65:42:38:4B:1B:A6:AF:77:B2:0D:77:45:6C:E8:B2:D2
X509v3 Authority Key Identifier:
keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:01:87:5a:2f:78:74:9e:c1:fc:12:06:21:b4:9f:d8:94:88:
9a:fc:e0:17:c2:47:00:36:fb:62:35:9d:64:c8:11:a5:55:13:
1b:40:62:ad:57:e0:87:d5:fa:65:eb:02:3f:ca:39:07:d6:9f:
cc:28:04:d3:d0:95:aa:4c:14:00:9a:6d:7e:e9:8d:f1:e8:f4:
64:21:3f:30:c1:ee:a7:ce:df:7a:bc:52:76:ca:27:1a:ed:26:
22:09:48:1c:71:63:8b:6e:43:a4:2c:61:e0:a1:b6:74:62:46:
03:92:d7:d8:f2:66:ff:73:83:5e:ff:0d:4b:c7:bf:05:10:2a:
ac:fe:d1:6a:4c:ea:c2:9f:e1:95:f5:a1:89:56:64:5a:ee:48:
2b:fd:09:7d:52:be:73:84:47:bd:12:3b:50:b9:dd:c4:99:63:
30:ef:71:f4:61:72:19:b0:9b:7d:01:55:03:a7:03:b8:6f:36:
5b:59:c2:cc:20:aa:a0:2f:d9:22:a5:d2:e8:e2:07:ff:fb:1d:
27:b1:52:59:c8:06:3a:9e:57:b1:cb:65:1f:12:f6:3e:de:f4:
32:64:12:52:13:ef:09:13:ed:bc:0f:bc:20:44:12:f1:5a:ac:
1d:ec:29:3e:68:8d:69:49:01:3b:38:15:1a:0a:ec:1d:a3:c3:
6f:fb:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:57 2026 by rpki-client