Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier: o6Ngi2yfs9Qa7HtavR0BffKZHOKMMSrN2KbMXthzf5w=
Subject key identifier: DC:4B:99:42:6E:5A:CE:65:BF:50:F5:74:05:16:8B:B0:78:4D:5A:ED
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer: /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial: 019D2884A6D6C28CEEAC8B45F124DAB03C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:01:15 +0000
Manifest this update: Thu 26 Mar 2026 05:01:15 +0000
Manifest next update: Fri 27 Mar 2026 05:01:15 +0000
Files and hashes: 1: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: Le8tJhbt7P40ZzVFftWo/wG1DouLdzAa4Oix3wQ7xTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a6:d6:c2:8c:ee:ac:8b:45:f1:24:da:b0:3c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Validity
Not Before: Mar 26 05:01:15 2026 GMT
Not After : Mar 27 05:01:15 2026 GMT
Subject: CN=dc4b99426e5ace65bf50f57405168bb0784d5aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:6c:25:c7:95:2e:ec:ca:fa:94:8e:8c:e1:
eb:73:bf:20:31:09:c7:03:79:e9:3b:1f:ab:4e:26:
58:fb:c2:0a:b6:50:0e:4c:31:ba:12:7f:d7:71:c1:
cb:46:26:3c:ef:ed:07:17:b0:ea:29:d4:34:28:35:
8f:d0:47:55:56:1e:1d:fa:d5:85:03:4a:bb:6d:aa:
23:5f:4d:37:95:8c:dc:39:96:c1:91:72:7c:d8:06:
e5:d3:62:d5:82:65:69:e8:47:3a:25:67:aa:4d:73:
a6:85:ea:9e:90:02:58:01:9e:68:8b:61:5d:a4:78:
95:af:67:5b:e7:5c:1d:df:46:30:17:82:15:5f:9c:
96:1e:0e:d9:86:a8:ed:46:fb:ab:06:09:03:97:b2:
22:f4:77:4c:8a:d2:73:88:5f:6c:0b:7e:72:15:93:
1b:a6:25:47:a6:85:8e:a8:e5:24:64:60:dc:43:99:
78:c9:c1:76:e3:1d:e8:09:d3:3b:a3:59:71:b2:5a:
32:cb:66:70:f4:0e:01:37:9e:b1:ca:de:12:6e:ee:
22:eb:41:6c:eb:e0:d3:de:0f:d1:f2:a8:2e:78:ef:
34:d6:50:f9:ab:5c:69:13:04:6d:0b:f8:6f:4b:6a:
55:e5:bb:34:04:1c:d9:dd:dd:bf:f1:35:b1:55:f4:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:99:42:6E:5A:CE:65:BF:50:F5:74:05:16:8B:B0:78:4D:5A:ED
X509v3 Authority Key Identifier:
keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:76:dc:55:cb:aa:b8:57:b0:42:e9:54:38:53:e2:d2:1b:9e:
78:22:15:44:fd:2d:36:b4:c4:07:41:71:2c:08:e1:26:cf:f2:
09:39:0d:06:d4:0e:83:8c:75:17:69:69:65:af:1d:e1:04:96:
2e:5b:45:b1:27:cb:cb:05:db:f5:78:86:97:33:28:a9:45:21:
4f:f1:98:08:f3:34:9c:2a:bc:26:85:d2:34:82:e4:85:5a:26:
68:42:77:a1:c3:c9:82:77:e9:bc:b1:a3:a3:43:04:7f:43:9f:
17:41:de:ac:ec:e8:3f:13:42:0f:54:b8:13:92:b7:6f:29:bd:
a6:87:2a:7c:73:c3:e3:c6:fe:0b:f6:8d:e3:db:e2:4d:bd:27:
e4:61:7c:76:c9:29:cd:74:66:4a:fe:e5:9b:9f:cd:7c:d1:57:
f4:5f:27:bc:b7:77:b3:d7:77:67:66:0a:e0:4f:96:23:76:67:
77:c8:03:db:b2:19:ff:ac:2e:49:7e:f8:81:d6:0e:4e:aa:81:
64:14:00:2d:bf:f1:df:3a:d8:44:0f:ee:ba:d1:5c:6d:e1:1c:
ec:f9:a5:76:f0:31:29:bd:1c:19:b2:2e:57:82:a4:3f:c5:04:
1c:3a:3e:8f:7d:e5:1e:4f:ec:79:13:79:51:4c:28:66:e5:7b:
8c:25:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:00 2026 by rpki-client