Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
File: mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json)
Hash identifier: xhAw0OW4Hl5lCEjBoIf3wIQRdKqk//sVMPSdPCzrfBs=
Subject key identifier: 95:94:3B:D4:5B:F0:8D:DE:B8:C0:76:FB:E8:2D:AA:49:58:AC:5E:C7
Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
Certificate issuer: /CN=9a351493af887e544dcc01a113b77528bc987bce
Certificate serial: 019D2583878835CABEC7B0F929769C29C626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
Manifest number: 1201
Signing time: Wed 25 Mar 2026 15:01:09 +0000
Manifest this update: Wed 25 Mar 2026 15:01:09 +0000
Manifest next update: Thu 26 Mar 2026 15:01:09 +0000
Files and hashes: 1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: TVFCj6RMEUN3EJCAZQZK4nTA2xfVDKO/JCQlIVDwZvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:87:88:35:ca:be:c7:b0:f9:29:76:9c:29:c6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce
Validity
Not Before: Mar 25 15:01:09 2026 GMT
Not After : Mar 26 15:01:09 2026 GMT
Subject: CN=95943bd45bf08ddeb8c076fbe82daa4958ac5ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:8e:0c:9b:b0:ec:b3:dc:16:c3:9b:88:25:
81:15:1d:39:d7:b1:5e:e1:cc:f3:73:6d:26:f6:74:
ee:1d:da:29:8a:06:b1:29:42:43:43:35:57:7b:f2:
45:60:5b:ff:f6:dd:30:af:6a:cf:44:0d:58:f2:84:
bb:d6:9c:c2:22:3e:a1:a1:81:88:ff:4f:b0:e5:b5:
74:8b:b2:27:bb:e8:3e:5b:21:01:54:91:90:6b:8e:
06:c3:a5:4f:58:8a:20:14:4f:f7:fb:ac:97:23:5e:
10:8a:1b:4b:21:05:1e:39:7f:2f:33:b7:98:01:48:
4b:ed:5c:d7:96:5b:31:23:fc:8e:6a:e6:39:32:31:
8b:3b:c3:b2:b8:e9:19:df:52:85:11:2f:20:e8:46:
b6:37:46:e4:ef:d1:fb:70:9f:74:6e:1d:0c:9a:09:
16:fb:bb:01:20:08:2a:5f:b6:79:5b:c3:19:e0:0a:
d8:f8:6b:65:b0:ee:6d:f8:d8:43:3a:95:16:fb:d1:
98:31:a5:f0:46:af:7d:69:0a:e2:48:7a:d8:3f:08:
35:99:ae:d6:89:29:7e:19:e9:b6:7e:2b:12:8b:7a:
40:b0:57:0f:4e:0f:03:19:6e:0c:a4:a3:29:a7:66:
c6:55:52:ae:3a:8b:18:cf:50:86:ac:33:79:d0:4c:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:3B:D4:5B:F0:8D:DE:B8:C0:76:FB:E8:2D:AA:49:58:AC:5E:C7
X509v3 Authority Key Identifier:
keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:04:74:f4:5a:5f:4b:76:ac:79:da:21:e6:cc:b5:7c:ab:28:
d0:90:8c:f3:ec:bc:e8:22:d8:89:27:40:7b:d5:07:2b:36:3d:
ee:1e:9a:36:7b:8f:37:19:42:83:d8:ae:82:f2:34:4a:37:68:
8e:7c:30:1e:70:3f:f9:6d:af:75:18:8a:75:47:22:dd:08:12:
41:02:69:fb:b5:e2:92:7b:b9:aa:ff:f8:17:f3:7b:2a:21:76:
2e:c9:a7:47:81:01:db:f2:2c:c8:e2:36:b9:25:21:b8:2d:42:
0c:67:0c:42:c7:c9:e6:f7:59:d7:4d:fe:10:09:b7:2e:92:37:
e3:37:21:33:0a:9e:7c:19:43:d0:84:1a:74:e9:3d:a4:8d:ab:
30:ca:3c:91:69:c5:3f:22:22:b6:f3:39:79:40:eb:38:35:55:
24:c7:ac:f0:f9:a7:40:9b:3c:08:3c:c5:95:4b:c4:19:ad:b4:
c0:f1:65:72:bb:6a:25:f3:42:07:3f:d6:dc:74:d9:8e:53:8b:
d4:c1:d6:fc:9b:72:6b:27:7f:9e:90:4f:aa:b4:28:ea:d6:fb:
30:48:38:3a:8a:a9:8e:ac:1e:ed:0e:2f:e0:e6:5f:8f:68:2b:
99:a1:af:53:3e:38:e5:88:41:4a:12:c0:df:0a:80:ce:4b:35:
d7:1b:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:04 2026 by rpki-client