Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File: MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier: 0vIMVY5UReShEV7R6JbG0Th0+bmjEu9uYuhVolMbZs0=
Subject key identifier: 65:0E:EE:1D:D2:15:86:CD:55:08:18:29:97:9E:76:5D:64:07:B6:E7
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer: /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial: 019D265F6B84728047CDAC0BAEC723248DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number: 02A1
Signing time: Wed 25 Mar 2026 19:01:20 +0000
Manifest this update: Wed 25 Mar 2026 19:01:20 +0000
Manifest next update: Thu 26 Mar 2026 19:01:20 +0000
Files and hashes: 1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: gZZbp41eU1pgwkJThM203Jc0b9836unGa0Cp6l/pO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6b:84:72:80:47:cd:ac:0b:ae:c7:23:24:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Validity
Not Before: Mar 25 19:01:20 2026 GMT
Not After : Mar 26 19:01:20 2026 GMT
Subject: CN=650eee1dd21586cd55081829979e765d6407b6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:f0:86:82:e3:f3:a6:ac:af:0b:91:ef:17:
10:c4:2f:f2:f9:94:3a:bf:76:71:1e:fc:f8:69:f9:
07:47:fe:77:d4:24:68:29:1b:0c:26:21:fb:49:5a:
d2:95:83:70:90:0a:a0:4c:da:db:d5:39:c9:6c:f8:
54:1d:76:e0:a1:23:ba:f7:64:0b:0e:8c:c5:76:18:
46:58:5e:30:58:34:7c:0e:e0:84:ae:6f:b5:81:70:
e1:8e:35:47:b4:4f:87:86:ab:02:dd:98:58:ff:06:
07:1c:91:e6:fd:8e:a1:7a:08:8c:9b:15:2e:54:28:
87:51:04:fa:c2:0b:36:93:e3:36:10:37:8c:fa:ab:
e6:37:0b:64:ca:7e:51:3e:fc:0d:b3:97:c4:85:e3:
91:1b:29:32:e3:3c:7b:1e:fd:bb:82:0d:0d:d5:39:
be:35:4a:42:15:25:1a:34:ee:22:c2:ab:1a:c0:f2:
ee:1c:ee:43:11:b7:00:7d:f2:8f:64:c1:0d:55:7e:
d4:e4:4e:fa:89:e3:d1:f7:82:66:cb:d3:76:50:c2:
14:5a:27:74:0b:7a:15:b1:0e:06:17:27:02:58:1a:
eb:15:23:b7:eb:fd:53:bb:08:71:57:a2:8b:80:1a:
11:3e:20:5f:8f:c1:b4:80:42:db:e6:f8:38:0a:43:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:EE:1D:D2:15:86:CD:55:08:18:29:97:9E:76:5D:64:07:B6:E7
X509v3 Authority Key Identifier:
keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:64:06:8c:a5:c4:31:c0:1b:aa:b9:46:f3:dc:cf:ed:7b:df:
53:bb:bb:2d:d7:f4:92:0e:54:b4:e7:aa:40:39:f3:03:0c:d3:
04:2d:b7:a0:66:3b:cf:ad:ba:79:15:f6:46:fa:24:4b:c1:31:
41:93:01:15:43:9e:6d:4a:cb:3c:d2:f6:19:dd:81:37:08:4c:
b6:50:22:42:37:43:34:4e:b3:47:c0:e0:f7:fc:75:02:77:f2:
fb:6b:ab:b1:ad:31:6a:bd:51:44:71:8c:15:c7:42:da:18:db:
86:ac:ab:23:45:00:13:1b:d1:51:a7:2b:b2:c9:41:f0:a0:25:
62:1b:e4:8c:0a:06:d2:87:9e:eb:04:11:cd:1b:3c:c1:f7:44:
68:17:3c:c2:b9:d5:e0:1e:95:3a:1c:c8:74:03:50:ec:3c:81:
40:29:c6:b6:9a:1b:fd:6e:2f:da:bb:1a:c6:cd:01:e0:86:71:
9f:48:e2:4c:9e:6b:4b:f8:89:de:bc:f1:52:a7:58:fa:e7:3e:
e6:3d:b6:cf:1e:37:2b:ab:37:77:06:ca:ae:d0:f7:34:64:51:
dd:6e:97:9d:9f:ba:56:be:02:bf:10:d4:9e:48:fb:29:4a:e9:
d8:c3:0e:7d:fe:89:ed:f1:94:9f:41:92:b8:34:99:d5:9b:f5:
51:bd:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:19 2026 by rpki-client