Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier: 5egQX7P2HyVynqsnYFrYFhlbNDuVcU+eucbuJuExeXM=
Subject key identifier: 6D:8B:95:42:2E:E3:D5:B8:1E:88:C5:87:69:84:CA:71:18:0C:C0:4C
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial: 019D27042B7AB2B435562324297F59ACEAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number: 12AA
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: /jWPnrnpTpfILnRYLra0mBL0nAiQ1PjAUtnb6brbokM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2b:7a:b2:b4:35:56:23:24:29:7f:59:ac:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=6d8b95422ee3d5b81e88c5876984ca71180cc04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:e3:66:6e:14:19:e9:93:6d:80:f7:d2:86:
7f:58:03:c7:1a:2d:d0:02:dc:b1:65:4a:4c:fb:81:
4f:dd:d4:77:69:6d:c9:48:ff:0d:6d:50:e1:65:47:
fe:a4:d6:c5:98:43:a5:db:c8:61:2a:f3:69:7d:41:
65:29:61:91:b7:f2:be:01:4b:9f:0b:cc:c7:f2:cc:
76:02:8d:ca:f3:12:2a:0c:9c:3d:d8:4a:29:43:a0:
c0:c1:54:86:de:61:57:aa:09:06:de:6b:c5:0e:ae:
85:b2:28:39:64:58:b2:21:b4:aa:f2:75:c3:8a:7b:
f2:ed:d4:51:7e:e3:7b:69:c9:2c:54:b2:da:3e:23:
05:3a:80:80:f1:98:08:29:0c:07:60:84:2a:2e:7c:
9a:73:24:fd:46:b2:a8:a4:50:38:35:87:96:6f:81:
2d:43:48:d9:30:38:9e:c3:39:e4:15:f8:e7:ea:4b:
da:0c:98:f3:51:8f:64:eb:26:99:25:b2:8c:d2:ee:
4e:1b:85:82:d3:64:2c:ac:3d:46:b4:1b:ee:c1:e6:
60:af:4f:11:f5:d1:3b:87:bc:56:31:f9:14:76:d5:
56:a9:17:d4:e8:d2:bc:84:13:25:36:35:69:3d:2c:
51:ca:75:42:02:f3:58:ef:a7:c3:0d:67:36:84:dc:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:95:42:2E:E3:D5:B8:1E:88:C5:87:69:84:CA:71:18:0C:C0:4C
X509v3 Authority Key Identifier:
keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:39:f1:88:47:cd:4c:38:9d:0b:2a:63:f3:68:f2:e9:88:
65:17:b5:d7:11:d6:49:71:ec:ad:e2:78:b6:8f:63:d3:b3:64:
17:9a:54:6a:f2:f7:f3:1c:1c:ae:44:0a:f3:16:6f:b5:7e:40:
f0:68:5e:3b:61:7e:42:19:a8:84:d4:f3:5e:27:25:f2:44:9f:
17:b3:cf:0a:c2:84:81:d0:dd:32:1d:b0:b8:20:45:7c:28:9c:
cc:d9:ad:94:33:c4:81:23:85:35:46:7c:9d:fb:c8:82:c7:c2:
7b:3e:1c:d0:7b:36:23:ca:b9:d0:af:dd:4f:59:67:99:78:73:
05:f9:65:ab:f5:7f:b7:8a:e2:c2:12:e1:4b:a9:d5:5b:71:b7:
21:fe:35:2e:8b:1b:d9:62:27:58:50:1c:94:67:59:12:22:12:
d3:11:62:40:eb:4c:0d:42:ac:3a:81:de:d9:4c:59:f9:a3:15:
7f:70:40:41:2d:7c:0c:7d:d6:8e:cc:e9:66:20:12:15:ad:56:
d6:2f:df:a2:b8:bb:5a:00:f6:2a:15:44:a8:ae:f1:78:15:00:
aa:90:6f:2d:7f:1d:c7:99:92:2a:3f:37:19:9e:89:79:40:1d:
95:24:87:7f:70:e3:8c:af:59:4b:ee:04:1a:92:63:46:7e:04:
b0:00:0d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:41 2026 by rpki-client