Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
File: mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json)
Hash identifier: nfFlOMbS+uUbdm5Z3Sqvu05Uce4NTdd3H9LjB5ha1dk=
Subject key identifier: 25:A4:48:0A:63:DB:B4:91:92:C4:C3:DE:F3:59:F1:72:88:29:BC:3A
Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
Certificate issuer: /CN=9a9558818272b9c5400fc5da18813acce917588d
Certificate serial: 019D27048D9662ED395DAC68F4A35707B6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: goXxtYVl4zdB3fEzUeVrSuDgebPAMMP64pjvvLuUKuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8d:96:62:ed:39:5d:ac:68:f4:a3:57:07:b6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=25a4480a63dbb49192c4c3def359f1728829bc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:ac:30:fc:b6:81:73:0e:26:8d:55:bd:e4:
83:d8:10:b1:f8:3c:f5:d5:f0:0e:1e:57:e1:8f:13:
ef:14:4d:f7:41:e2:94:81:50:58:3c:34:d9:7f:be:
2c:65:02:d0:69:cb:29:6c:52:57:70:2a:76:d7:c2:
d7:df:34:27:22:ef:2d:2b:9d:8c:58:22:bc:4d:ba:
f1:25:e2:65:a4:c1:a3:7d:ca:9d:47:60:5d:01:70:
07:dd:47:a8:20:ed:73:41:a9:14:d1:3e:28:0e:06:
01:6c:61:50:fd:05:ac:87:56:b8:9e:ed:96:ec:5c:
12:0c:6c:46:a8:8b:7c:0b:1f:83:6a:19:2b:dc:f5:
6a:8b:59:16:1a:ad:9b:f5:18:f6:5b:72:c0:26:26:
3c:c0:4b:b8:5c:28:14:43:1e:0a:b0:4b:af:ab:60:
ea:8c:34:1b:41:1d:90:38:ee:0b:d4:8e:dc:66:57:
16:cb:3a:b3:67:77:a7:83:9a:75:de:65:74:ed:62:
6b:bf:c1:07:3e:19:34:3e:de:64:70:4d:26:4b:36:
00:4d:00:63:b9:c8:86:1d:a1:6e:af:b1:1d:1e:97:
93:e9:9d:98:eb:9d:e9:96:a7:7c:5d:54:be:a9:9d:
12:cb:14:c1:24:77:1b:b7:28:9d:03:23:84:5e:97:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:48:0A:63:DB:B4:91:92:C4:C3:DE:F3:59:F1:72:88:29:BC:3A
X509v3 Authority Key Identifier:
keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2c:78:f8:81:f6:56:c7:b8:e6:32:66:d6:52:4d:43:7a:1f:
53:63:0b:10:a0:ae:dc:d2:43:8b:2b:e6:40:26:8c:ae:18:51:
ac:eb:2e:4b:f6:c9:02:32:bb:3f:93:64:5a:c6:99:15:49:49:
35:24:b4:7b:c7:3b:1d:3b:d4:09:b2:a2:eb:ed:17:64:58:73:
a7:f4:37:e3:a7:0b:2d:36:b5:a0:fb:2b:32:ef:f0:83:0f:11:
bb:11:7d:54:03:3f:7d:33:b8:df:8b:24:c3:2b:3f:88:2c:c0:
93:76:c3:7f:45:16:27:0f:c5:ed:e8:83:b0:2e:9a:9b:6c:98:
c0:57:91:ba:3d:ae:bc:5f:a7:bb:a1:98:fd:06:b2:99:c4:ec:
f6:73:48:31:74:10:6f:29:a3:70:26:f2:48:85:f3:d4:f3:f7:
df:c8:c1:7d:ec:10:f4:a0:ca:b8:13:1e:ab:6e:5d:e1:4a:92:
3f:e7:d4:74:7b:e8:22:ad:44:08:b4:78:7c:4c:42:9c:e6:b2:
10:e2:5a:5c:17:f7:fc:cf:8a:a8:c0:e1:05:59:1a:8b:44:36:
8e:17:0f:1b:ae:ae:71:fe:e3:49:29:de:f5:2f:fb:4e:88:d0:
5c:36:2e:82:57:8d:13:88:2d:99:63:69:e7:ae:e5:22:5b:6e:
f5:03:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:42 2026 by rpki-client