Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier: wVDUyBFTRkmybkfPoTKfkgvtAXhSZ4ZrRC7HoqkVYyo=
Subject key identifier: A8:D2:6A:39:C7:5D:9B:A4:A6:10:84:32:3A:26:0E:D8:BF:37:C6:07
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial: 019D2704179302DD977718AAB2C341503010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number: 0DBE
Signing time: Wed 25 Mar 2026 22:01:12 +0000
Manifest this update: Wed 25 Mar 2026 22:01:12 +0000
Manifest next update: Thu 26 Mar 2026 22:01:12 +0000
Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: Bs9y0Q0jA0I5Ko1yyRA/Daq3DuilEQW2O7dfgvexAMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:17:93:02:dd:97:77:18:aa:b2:c3:41:50:30:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
Validity
Not Before: Mar 25 22:01:12 2026 GMT
Not After : Mar 26 22:01:12 2026 GMT
Subject: CN=a8d26a39c75d9ba4a61084323a260ed8bf37c607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:72:f3:c5:3c:7f:17:5c:4c:12:37:07:1f:
b9:71:e4:93:06:7b:3a:77:9e:67:40:23:d7:b7:64:
d9:56:9d:00:16:7c:aa:90:ff:87:23:35:3f:eb:10:
1d:a5:4c:1e:ad:34:ca:94:d8:5d:71:c7:f8:25:2d:
97:06:ca:4a:31:bf:a3:85:cb:54:e3:9e:67:f4:af:
38:ae:3a:db:82:95:09:ae:3b:27:9c:f5:2a:2f:d8:
cd:f7:fc:aa:94:2d:a4:0a:1c:b7:09:bf:fe:f2:bd:
cc:29:4f:d7:cf:b8:83:03:f2:d2:1a:cc:cf:d8:15:
e6:4e:f4:fb:4f:eb:3d:fa:a2:9a:b9:55:a8:d7:87:
40:bc:db:69:e4:bf:84:c8:a9:37:fa:7c:88:68:f1:
e3:34:f5:13:63:01:e2:d2:c6:9e:b5:5d:f7:10:8f:
7b:8b:82:12:95:77:5d:48:2f:42:97:fc:b2:1b:59:
3e:c5:8f:75:35:ab:92:c5:a3:2e:59:94:86:7e:29:
8a:9e:0e:d2:6b:0e:53:eb:a2:e1:98:59:8b:2e:95:
b6:59:b5:15:a3:95:b4:c9:fe:4f:81:05:6f:fe:9f:
ac:b3:9b:3c:f1:92:47:82:ce:08:1b:e8:98:4b:1b:
c2:dd:84:45:12:91:31:4a:62:0c:e6:07:2a:ea:e3:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D2:6A:39:C7:5D:9B:A4:A6:10:84:32:3A:26:0E:D8:BF:37:C6:07
X509v3 Authority Key Identifier:
keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:38:b4:0f:dd:fa:21:2c:9e:fa:ea:f2:8d:a5:60:c8:9e:f5:
da:9c:75:d3:46:3d:2e:be:e9:aa:e0:74:f7:2e:20:55:52:cb:
82:4c:f4:68:09:9e:d6:4f:61:19:0e:4b:c0:86:01:94:68:8e:
fe:66:93:06:97:c9:55:89:fb:d5:37:32:0e:63:46:a5:87:4c:
ff:36:2f:90:1e:e3:98:69:6e:06:f0:63:f3:2b:6f:af:eb:5c:
a0:c4:64:92:2a:bc:81:b0:97:20:71:c8:8f:a4:cc:f0:26:7b:
b9:3b:b2:98:8a:26:93:48:7c:bf:18:80:82:9d:1a:f5:ff:6f:
47:b6:ba:ba:14:62:13:74:2a:25:be:3a:b1:7a:8f:d8:81:5a:
20:05:a6:f4:a5:dc:e7:e7:14:09:6f:86:4e:33:e2:e4:06:77:
1f:ed:ff:4a:6c:4d:58:f4:50:fa:ad:b4:ca:3a:30:77:4a:c3:
9d:86:90:b0:96:4f:1f:ce:9f:fd:8e:4e:dd:a7:91:3a:1e:49:
a1:7d:88:ff:bf:f8:f4:c1:0c:30:a4:5d:d4:27:35:5f:9e:d6:
3f:b5:50:25:d5:b6:ea:49:ab:ae:65:b0:0e:8e:1a:25:e1:f3:
a1:2d:04:1c:e3:ce:e0:71:b4:f3:a0:e0:53:f6:75:58:da:5b:
c9:66:b9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:07 2026 by rpki-client