Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
File: Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft (raw, json)
Hash identifier: XeZvQF9qO6uzG6gkY5eXoPh3TC7T+kZ7ykxOyS5KPvI=
Subject key identifier: C9:18:09:6C:24:ED:DD:DB:BB:DD:0C:7C:15:F8:74:02:1A:A7:86:1D
Authority key identifier: 33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
Certificate issuer: /CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Certificate serial: 019D284D7CC7B0554081E1F5EDF5CA2D5657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
Manifest number: 02A8
Signing time: Thu 26 Mar 2026 04:00:59 +0000
Manifest this update: Thu 26 Mar 2026 04:00:59 +0000
Manifest next update: Fri 27 Mar 2026 04:00:59 +0000
Files and hashes: 1: Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl (hash: Xfw0VzRzEN7m9G+AopJM8F0Rj8EBsg8N0FhGoYEd6Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7c:c7:b0:55:40:81:e1:f5:ed:f5:ca:2d:56:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Validity
Not Before: Mar 26 04:00:59 2026 GMT
Not After : Mar 27 04:00:59 2026 GMT
Subject: CN=c918096c24eddddbbbdd0c7c15f874021aa7861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3d:9b:ec:bf:60:c9:49:2e:e3:91:05:f1:26:
b7:7a:74:ac:94:03:3c:83:a6:08:a9:6e:a0:30:a9:
d6:0f:39:5f:8c:b9:76:92:1f:f3:46:88:82:b4:96:
2d:b1:bd:57:3b:84:dc:df:3b:36:aa:96:3d:f6:a5:
93:7e:21:56:ea:9b:70:8f:05:85:21:ef:11:7a:d4:
83:e3:de:16:90:63:0c:11:69:d5:ef:58:89:da:13:
82:45:4e:c1:c0:c5:89:25:76:42:56:fb:ce:be:c6:
43:4c:79:47:fb:6d:fd:60:ff:44:ae:ab:e0:d6:74:
6e:f5:b6:ab:0c:f4:6b:26:6e:e2:44:98:df:77:26:
fb:73:b0:e6:83:3c:4a:f0:bc:b9:04:ab:2b:26:ff:
fd:f7:28:a3:a8:14:03:52:1a:c2:cb:f4:68:f8:1f:
76:8e:b4:ec:0a:51:09:7f:cb:61:e5:4f:01:e7:77:
99:06:8b:82:40:f1:ca:b0:21:d0:e7:8a:5d:f5:e1:
5d:69:da:09:86:37:e0:66:6a:f7:b5:db:85:1c:67:
a8:35:3f:a3:68:1c:db:86:9d:01:58:60:75:b0:1e:
7c:64:ae:3d:a2:b9:d8:d1:60:e5:e3:be:91:14:71:
bf:b3:f4:c7:6a:c0:1c:96:8f:f6:55:60:83:04:a4:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:09:6C:24:ED:DD:DB:BB:DD:0C:7C:15:F8:74:02:1A:A7:86:1D
X509v3 Authority Key Identifier:
keyid:33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:b0:60:66:56:1c:77:86:67:92:7e:1c:09:ab:cc:86:63:
11:0b:e8:45:e5:3c:67:de:04:31:ff:eb:b1:b5:fc:9c:e8:ea:
1d:70:07:7c:75:23:ee:e2:a4:13:41:89:db:07:d7:92:c2:74:
40:5b:81:d2:d9:97:cc:8a:d3:ec:0b:09:ec:bb:35:6b:41:b7:
81:30:97:0e:8a:45:8c:62:54:ef:6e:ab:91:01:fd:1d:a4:be:
2e:c1:46:f7:1f:e7:93:be:da:a6:63:d4:a6:00:48:6b:19:db:
5a:ea:8e:f9:cb:68:0f:ea:64:4d:30:61:23:8c:90:39:27:33:
56:7b:e2:48:3a:02:74:5c:95:92:92:e6:9b:15:61:f0:58:38:
a3:16:e7:a7:4b:fa:9a:13:07:8e:5f:0e:13:02:a1:2e:84:0e:
0d:38:b2:19:07:4b:4b:6d:71:af:94:c9:35:55:3c:77:6f:2b:
9d:0f:fe:71:48:57:21:f7:0d:0c:2e:85:29:3c:37:8e:bb:d0:
ec:d8:c0:4c:02:48:b5:43:0f:4a:a6:9f:aa:bd:f2:b8:fa:3f:
7c:d3:73:66:2e:74:be:49:c1:f6:48:c5:6a:72:36:c3:98:59:
9f:e9:57:9b:62:29:9f:0c:64:af:a7:53:27:98:26:68:46:13:
39:6b:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:05 2026 by rpki-client