Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier: p4dyzMJKKUiUtfZFuEqsYA3D5VkQYKWl+UNVYUWEg5M=
Subject key identifier: 8E:F1:D6:AE:92:FC:53:03:06:1F:95:22:31:AE:DD:4D:58:86:25:2D
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer: /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial: 019D26CD0D1E59009B2C91B727B9F2E59E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number: 0778
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: OpF7MuZdn1cAgI0Ypd3JLI00tYO/oAqIS4YCAx7PVK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0d:1e:59:00:9b:2c:91:b7:27:b9:f2:e5:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=8ef1d6ae92fc5303061f952231aedd4d5886252d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:66:0f:ef:99:ee:aa:0d:2b:cb:be:09:1f:
54:df:46:e5:84:9f:8b:28:1a:9e:12:7c:31:e2:c0:
c4:a2:92:9e:cd:94:0d:9c:de:dd:ae:64:5d:c9:55:
3d:95:d9:75:51:a7:3f:41:35:6f:82:df:a3:bf:59:
48:4b:27:50:dd:30:20:47:8c:44:8e:de:f2:52:83:
03:ce:2c:59:cd:fc:2c:24:d6:23:d1:bc:50:29:ab:
85:86:a8:8e:04:e2:80:2d:20:9d:95:fd:52:8b:cb:
35:6a:6c:16:e1:91:5d:7d:b2:9e:f9:47:85:64:c1:
18:97:3b:d3:8a:33:9c:81:27:c3:57:61:53:e4:70:
38:2f:6c:82:bf:33:84:bb:6b:d5:a9:fe:23:8e:02:
b2:3a:c9:66:d5:e7:15:a6:a4:b5:f4:6e:02:76:bb:
9f:ef:e4:45:14:65:74:c0:4b:cd:cd:f9:ce:9f:7e:
8e:7c:ae:c3:81:96:2f:19:b1:ef:ae:96:d1:8c:b8:
df:58:fb:15:2d:45:d7:91:9c:b7:de:87:80:da:0f:
f1:a5:0a:d3:5c:1c:b7:fc:6a:5d:0c:e4:31:f1:26:
f6:1d:4f:7d:a3:e2:5a:6d:51:ae:52:39:ee:05:17:
d4:4b:71:d7:d3:2a:1e:c4:84:7a:24:cd:16:fc:e1:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:D6:AE:92:FC:53:03:06:1F:95:22:31:AE:DD:4D:58:86:25:2D
X509v3 Authority Key Identifier:
keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:ac:3e:ca:87:15:13:72:51:88:cc:d5:ca:cc:8e:0e:45:
49:db:22:e2:b4:71:ed:0e:43:c9:7a:23:8e:7f:eb:4d:ce:40:
6c:45:db:f3:06:4a:09:ef:3f:70:2e:87:56:92:af:f9:cd:bf:
f7:c1:59:84:04:1c:8d:f8:94:96:4a:c9:31:22:f5:28:ed:d6:
66:fd:4f:ba:25:0b:30:26:2a:09:b9:d5:a5:51:3e:99:5f:ea:
68:d1:5c:4b:a8:7c:9b:16:61:2a:7e:27:88:c4:fc:30:fe:fc:
81:ca:c1:02:1c:9d:72:3f:e7:8c:73:36:2b:8b:7e:ea:9a:3d:
ea:a8:38:9f:b4:62:25:be:1b:74:c1:5e:6a:1e:5f:3d:af:a9:
77:8f:58:d1:13:47:b8:de:93:11:8d:73:96:5f:8d:e7:c6:03:
73:89:15:91:c8:89:30:03:bd:54:b8:8a:69:e2:87:8b:e9:cf:
82:75:02:e2:29:68:8f:f2:19:84:54:21:52:91:d6:d5:89:fd:
87:ef:1e:2b:d3:de:f1:e4:6e:f8:e3:9b:d1:d4:eb:23:75:6c:
6a:91:bc:d9:60:df:3a:b2:3f:90:fc:b4:63:be:2b:0c:63:51:
6f:9b:5c:54:15:7d:a5:f6:38:f2:33:fa:7e:03:17:0a:8c:8c:
d7:f7:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:56 2026 by rpki-client