Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
File: M27g-MBTE_4RyEitRrz9homk0zg.mft (raw, json)
Hash identifier: ZYT1diwPoaqSRLQ3mfPuWeafC2x37FMkatP8vGQZEXE=
Subject key identifier: 49:23:A0:BA:CF:99:29:7A:88:03:05:F1:B1:EF:5D:4F:1A:AC:63:53
Authority key identifier: 33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38
Certificate issuer: /CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338
Certificate serial: 019D262836FAE6FE14AA2134154F40512655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
Manifest number: C4
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: M27g-MBTE_4RyEitRrz9homk0zg.crl (hash: 8b2gDhklF4eFNOck5OocDRBTbn64ehx5sNUUd+lg4oM=)
2: UdbPrpWZnVUI8xYJ93EGzy3y3Fo.roa (hash: YUbFLz2txfa5ZpLLO9VEEJXfhsSpca/Bp2yKiziVyTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:36:fa:e6:fe:14:aa:21:34:15:4f:40:51:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=4923a0bacf99297a880305f1b1ef5d4f1aac6353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:45:1e:21:80:18:e9:f0:ac:47:fc:42:bc:
19:34:21:d2:cb:7c:01:8b:44:88:dd:21:d6:d1:90:
9a:21:1a:5c:c9:63:90:2a:08:9f:9a:84:59:d3:9b:
27:d1:93:85:3c:59:a1:0b:61:41:18:3c:78:ca:1d:
f6:9f:85:24:e1:38:3e:90:87:22:09:99:54:a7:8a:
54:57:dc:8f:20:75:3f:5d:ac:e1:37:8e:2e:f7:ee:
47:64:a2:24:05:0a:4c:01:60:e6:d2:dd:e1:c2:2c:
f4:bc:7c:bc:da:9a:ba:1b:d5:8f:75:af:20:c9:b4:
49:db:e1:a6:ce:e8:1d:9f:2d:a8:2a:10:c0:98:54:
42:c6:ea:c0:1a:dc:6b:4f:b2:99:d9:4e:be:97:a2:
18:e0:32:e6:98:9f:8e:7c:95:4f:7d:b7:fa:79:55:
be:3b:a4:6c:79:e6:18:45:16:fd:02:bc:50:b6:1f:
d5:fe:e9:1c:3a:6f:68:74:43:6b:7d:6a:70:eb:79:
62:92:31:8b:dd:88:7c:4e:c3:66:96:c3:fd:be:cc:
64:34:40:c6:0c:23:01:04:c2:46:a0:7a:3a:7d:56:
8a:e7:f9:3f:44:f1:2f:9a:42:54:3c:30:6a:5d:54:
38:33:c4:8c:4a:8b:27:81:6c:4a:ab:5f:99:a3:18:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:A0:BA:CF:99:29:7A:88:03:05:F1:B1:EF:5D:4F:1A:AC:63:53
X509v3 Authority Key Identifier:
keyid:33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:65:a8:0e:68:5d:15:0e:ba:5e:bb:e3:dd:ad:34:b2:57:34:
64:74:f8:4f:9d:b4:61:f5:a0:95:dc:a7:f0:d8:b9:12:05:d1:
de:59:ea:b3:2f:ee:86:ab:14:df:3b:11:67:67:32:67:17:c6:
cf:f7:d5:78:fe:e7:a9:a4:be:27:48:b9:9e:53:12:5b:00:30:
a1:71:fd:f8:e2:1c:3c:27:0d:74:9d:de:b1:95:73:a0:2a:87:
45:2a:2d:6f:97:3d:a3:19:52:90:3f:f1:19:05:a8:6f:a6:90:
48:3c:84:30:b3:bf:da:e5:d5:bb:eb:07:c6:ec:f4:e6:b0:35:
d1:3a:76:5b:d8:92:ad:8c:2a:a9:10:dc:18:92:b0:88:69:40:
de:95:5e:6b:62:5f:98:ac:a7:3d:9e:42:2e:b6:4d:b4:b8:c3:
ad:e7:4a:b4:9d:6f:11:61:73:f4:67:90:d7:a1:25:55:b6:0b:
4a:71:00:db:7b:2c:7f:62:8c:5e:1e:a1:76:d9:11:5b:28:44:
67:90:d5:7e:cd:a6:2b:ab:48:b2:60:2f:8f:6a:97:89:43:cc:
11:fb:37:90:85:91:69:6a:01:a0:2c:da:4b:8a:48:68:1c:5a:
ad:0d:a8:27:12:7b:ff:11:b4:8c:f9:67:53:cc:a1:7c:f0:78:
e8:64:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:50 2026 by rpki-client