Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: tfUxrKIf0CtBVoNZHqb1DonAiB/70OemW2m/uOWN/jg=
Subject key identifier: 62:87:35:9D:14:81:42:5D:B2:0C:23:5F:35:3A:79:CD:F4:C7:F0:C0
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 019D25832DD3AD7E06A5FBDCB21D8AC3FC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 0BE1
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: D3IbgErXOAro6Y0rAgN3WVTFahC7MOGkpVj+mgm0sTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2d:d3:ad:7e:06:a5:fb:dc:b2:1d:8a:c3:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=6287359d1481425db20c235f353a79cdf4c7f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:06:d0:7e:3b:fd:b2:25:88:90:73:58:9b:
42:77:6d:25:c0:2b:2d:98:86:a9:7f:22:2b:73:de:
11:e9:d9:68:d9:69:7d:6f:4c:cf:b8:d3:4c:02:5c:
99:61:c8:da:79:e3:6b:26:61:69:00:13:ad:7b:6b:
54:9e:fc:5b:24:75:36:52:ef:bc:be:4b:a2:64:a0:
1b:87:15:b4:41:11:17:87:9c:a8:19:99:50:73:0c:
0a:6a:b1:e3:86:7f:04:61:69:b8:8c:b7:b3:28:eb:
36:92:d9:f7:d9:09:9b:d3:6f:67:a8:a7:b3:e1:b1:
03:f4:98:a7:5e:97:e6:2b:01:6f:94:c2:ef:8e:b5:
6b:dd:ab:eb:9b:b2:3b:ca:80:15:2d:00:18:99:0f:
8b:a3:2a:72:a9:12:21:dc:89:6c:ce:7c:e7:d8:dd:
94:0c:d6:30:72:7e:50:81:41:fe:2b:57:aa:7e:9c:
50:1e:45:ba:69:50:29:85:4f:4f:73:b2:a0:be:73:
c1:11:1b:db:aa:dc:70:fa:92:39:97:f0:dc:fc:6a:
fc:93:a8:71:57:70:25:9a:63:62:50:2f:c5:ef:91:
95:1d:c3:e6:b4:18:01:4d:31:14:cd:3c:08:16:c6:
6d:ec:bd:89:72:2e:46:fc:5e:e0:27:e1:8e:0b:2f:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:35:9D:14:81:42:5D:B2:0C:23:5F:35:3A:79:CD:F4:C7:F0:C0
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5b:27:b8:99:e1:d4:37:8a:10:98:6b:7a:29:e0:9b:4c:ca:
03:b6:cd:36:9c:39:ce:90:bd:8e:4e:af:cf:d7:63:44:78:76:
31:5b:7b:1a:76:8a:1a:72:4d:25:bc:7a:d0:e6:e9:89:de:b3:
ce:b3:98:b0:88:c1:55:1a:8d:5e:55:b1:d9:85:c0:b8:90:a9:
1c:67:39:e5:42:a6:32:5a:36:cc:1a:e1:90:0a:b8:40:10:8f:
c6:35:c6:11:17:35:f3:b9:8f:5e:d2:5c:b2:b9:76:1b:75:6f:
b3:54:84:c7:96:da:24:a3:7f:63:38:c7:15:93:07:2c:ec:33:
08:5d:3e:bc:4e:af:5c:c7:ff:4c:05:62:8c:21:c8:22:01:f6:
37:2c:cc:77:04:0c:2e:c8:92:a3:e1:d7:44:3e:aa:2c:1f:83:
bf:3e:39:e5:b2:29:f2:db:6e:bc:ce:0a:46:87:6f:be:60:5b:
3b:95:ae:36:f5:61:2a:ae:1b:a6:94:4a:d5:8d:46:67:10:f5:
13:cb:a2:06:91:41:e3:0f:d3:e0:48:e7:17:2a:8b:35:de:4c:
a0:ce:17:39:26:9e:6b:64:01:56:6d:91:8d:17:73:2e:c1:aa:
18:79:42:4b:0e:07:43:6d:7b:5d:4a:f8:70:c8:1d:4d:f4:06:
e3:9c:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:50 2026 by rpki-client