Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier: DG1Peko+p2EIeAiMlFkk5oVUS/qYSbX0kt5Vc13Lq2Q=
Subject key identifier: 12:D1:73:E3:C3:B7:A3:AD:F4:DA:F7:DC:63:5A:F4:1C:F6:6D:8C:56
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial: 019D2583284E2F092C5A807292C245DFEAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number: 0488
Signing time: Wed 25 Mar 2026 15:00:45 +0000
Manifest this update: Wed 25 Mar 2026 15:00:45 +0000
Manifest next update: Thu 26 Mar 2026 15:00:45 +0000
Files and hashes: 1: LRCN_-7uwUM2pBkT4o2DH-IyjrU.roa (hash: PsTBlSgl8a7/GAGEnt9PWNbACVgPS8spL8p43cb6BnQ=)
2: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: bcSqKQrpQ4Iiex8PISH02VK99hj4zFCrzn5hbb28Ylk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:28:4e:2f:09:2c:5a:80:72:92:c2:45:df:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Validity
Not Before: Mar 25 15:00:45 2026 GMT
Not After : Mar 26 15:00:45 2026 GMT
Subject: CN=12d173e3c3b7a3adf4daf7dc635af41cf66d8c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:ae:29:db:a6:4b:94:2b:03:b0:d4:1b:46:
e4:a2:0f:9f:f7:fd:d6:ae:18:53:99:e4:40:d6:ca:
b9:67:8d:d4:10:87:09:0f:12:09:03:1b:28:02:d3:
81:22:5e:fd:5c:50:1e:09:b9:93:64:8a:ab:ea:bf:
b8:e9:4b:a5:ea:9a:d9:7c:c2:ae:68:b4:fc:53:09:
0d:a4:71:96:28:28:5d:2f:51:a9:42:18:8c:43:20:
4d:40:d2:a2:75:9d:a1:85:be:14:24:12:27:ce:5c:
9d:05:cb:cd:11:e6:fc:d3:54:cf:35:bf:c6:88:bb:
0e:76:07:87:e4:04:7c:d4:ba:dc:b6:57:c3:cb:08:
34:fe:a2:b3:bd:dd:ac:1d:1b:fc:60:d7:2c:c1:9e:
72:82:94:6a:e0:f5:f6:fb:8b:40:5b:90:1f:58:26:
7b:46:a6:d9:2f:b3:41:ad:ca:e1:5d:7e:af:87:01:
0a:42:9d:6b:2f:82:bc:c4:99:e5:6d:a1:ae:06:bb:
7a:77:89:a8:bb:82:d9:47:32:2c:06:33:59:1b:61:
1e:2d:f5:77:99:c5:a7:6d:7c:91:d6:de:5f:91:f9:
5c:7e:a2:db:47:7a:ff:8e:f8:f7:7f:df:0a:1d:6d:
2f:92:46:4a:d9:fe:80:c1:b8:9b:b1:a0:63:35:af:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:73:E3:C3:B7:A3:AD:F4:DA:F7:DC:63:5A:F4:1C:F6:6D:8C:56
X509v3 Authority Key Identifier:
keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:17:6d:6e:09:37:35:25:60:56:cb:b2:59:7c:c6:65:ec:a9:
ea:6e:3b:b6:fe:0c:ff:7c:16:e8:17:de:b2:26:be:2c:52:87:
c3:47:b0:8f:95:a3:9a:f3:3b:51:ac:7f:2e:c0:fb:7a:f2:a0:
f8:47:e7:9a:94:87:a7:7e:47:d0:a0:4a:16:db:53:2e:91:13:
b2:44:e7:34:c3:06:9f:60:73:d4:b7:69:7f:d7:5f:8d:a3:55:
6f:7b:0c:2d:ab:1f:1d:22:bd:55:a0:4e:92:77:90:10:8a:15:
31:03:6e:29:c0:df:16:a4:16:61:4c:7a:a7:c3:d1:f9:b1:38:
b6:64:f7:13:9c:53:5b:e4:48:11:90:e6:34:a2:1d:ac:e1:0d:
2f:2a:50:da:39:73:c6:37:e1:a3:e0:c8:a9:89:ea:50:86:e2:
82:8e:e0:53:71:ea:16:2b:ab:f1:f6:0e:dd:dc:0e:4c:09:be:
dd:c9:30:a1:00:f5:7e:93:95:4f:8b:5c:8b:54:f5:61:fa:db:
4d:66:7a:33:82:fa:9d:16:f3:6d:00:c6:ca:2e:9a:a2:3c:20:
d1:d6:8f:08:e8:ee:8f:d9:46:62:60:df:7a:ae:63:83:a8:a8:
da:b6:f5:8b:5d:b5:72:9a:36:34:d0:35:25:fc:cb:a1:47:14:
86:49:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:04 2026 by rpki-client