Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
File: MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json)
Hash identifier: 61ch7SlmtQjtr7HxWFYVdKdZH+tJffLyG0dayG26ZFk=
Subject key identifier: 41:C2:67:16:E5:29:68:DB:4C:E1:F2:6A:D9:79:BE:36:41:B6:CC:FD
Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
Certificate issuer: /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Certificate serial: 019D2B4EEDE1B75436E8DD8391980DB01D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 18:01:26 +0000
Manifest this update: Thu 26 Mar 2026 18:01:26 +0000
Manifest next update: Fri 27 Mar 2026 18:01:26 +0000
Files and hashes: 1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: bXU9ODj7ZR6PPDAN51TiROXldog9uMFoaKbaH2Kh3iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:ed:e1:b7:54:36:e8:dd:83:91:98:0d:b0:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Validity
Not Before: Mar 26 18:01:26 2026 GMT
Not After : Mar 27 18:01:26 2026 GMT
Subject: CN=41c26716e52968db4ce1f26ad979be3641b6ccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:f7:89:90:e0:b2:d6:16:4b:a5:e5:cb:a4:
c6:41:34:92:f4:6b:54:44:4a:6c:aa:53:50:33:c0:
f4:49:36:4b:4d:22:72:e7:47:fd:b8:cf:4d:31:8e:
55:c3:90:e7:c6:69:ce:b0:42:6e:b3:8e:36:fc:cd:
e2:81:02:b5:f3:e7:a2:0e:08:b8:27:af:c4:3f:18:
7c:e1:1a:d9:cc:85:e0:a3:91:4e:91:e4:01:7d:d4:
a9:98:dc:8f:7f:28:19:fb:ef:92:74:47:28:b8:f9:
fe:4e:7a:07:dc:38:16:bb:c0:48:d7:49:d0:17:6a:
f5:f4:9a:3e:0e:c8:77:72:89:57:01:2c:aa:37:a6:
66:be:0c:82:0e:29:42:8b:32:13:df:2b:ca:7d:8f:
d9:d9:c6:70:4c:7b:51:5f:d6:5e:f9:71:16:e8:9b:
36:56:08:e3:8f:5c:a6:cf:12:4b:a4:36:3f:40:01:
e6:bd:a9:32:d4:62:55:13:08:d6:cf:c6:49:b1:ee:
16:9e:d0:25:e2:75:c6:61:5e:04:d9:de:93:3e:67:
24:0e:43:91:c9:c7:22:1a:c2:83:0a:40:dd:88:e7:
13:60:2b:51:de:24:a1:2a:17:50:45:5e:3e:a0:32:
48:c4:d5:56:87:7e:65:bb:85:94:6a:af:96:26:ad:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:67:16:E5:29:68:DB:4C:E1:F2:6A:D9:79:BE:36:41:B6:CC:FD
X509v3 Authority Key Identifier:
keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:03:01:5c:6f:7a:f5:74:42:06:58:37:6a:4f:21:d4:8f:86:
0c:6d:0a:2e:87:64:2d:9c:0f:34:c6:5f:8b:c5:19:be:39:13:
67:57:fc:61:28:17:90:ea:13:ce:8d:f5:44:75:54:56:a9:6b:
37:a0:f2:32:2c:c8:e0:d9:0a:46:42:f7:b7:e3:e7:e8:e6:19:
bf:05:15:95:16:0a:b4:05:4c:e2:80:67:93:65:71:a2:05:32:
83:6b:21:20:1e:3f:96:13:f1:49:8a:25:b1:d7:23:13:3d:d9:
48:27:d5:23:f7:10:ed:e2:4c:83:6d:d5:33:1b:c6:64:04:ce:
77:a1:03:21:0b:88:b3:59:3a:d6:4c:23:3f:9f:57:a1:5a:58:
60:c1:75:3f:31:8a:ac:13:56:aa:23:d7:f8:46:aa:f9:bf:4c:
24:82:6d:86:54:b3:5d:e1:9f:ba:a8:fa:6b:5d:2e:a6:11:0a:
1f:8f:c1:86:53:0e:ba:3d:af:63:a2:db:5a:59:0e:6d:c2:2d:
e3:83:72:d0:56:aa:3d:44:2f:76:3a:b5:68:7c:6d:64:44:a6:
0b:9f:dc:1c:3a:1b:f7:a8:0f:0d:be:4d:43:9d:3a:60:39:b7:
34:24:a0:bb:70:0b:da:95:5c:9d:e1:16:c0:66:6d:b2:9d:db:
e4:7f:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:41 2026 by rpki-client