Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: oplv447kDqp+IBXSOa9sPMwP0D6DjER0NokQ/ub1ITA=
Subject key identifier: A2:4F:E1:7A:81:28:3F:13:43:4C:F6:F2:77:BE:B9:09:23:DF:94:F9
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 019D27DFE9DD602B89BE3388A857538A581A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 0443
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: dSO9lw1YiLzGrNemDu1DGl/iY6tz6sbn60SFA84QSt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e9:dd:60:2b:89:be:33:88:a8:57:53:8a:58:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=a24fe17a81283f13434cf6f277beb90923df94f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:20:70:75:20:45:54:12:9c:e0:a5:1d:97:
7d:22:99:09:a6:77:04:9f:e3:4d:34:4b:34:d6:e4:
c7:2b:2c:15:b1:1c:03:36:84:d7:8a:34:3c:4c:df:
c7:da:47:fd:4a:ec:e8:87:78:cc:e4:98:f2:a0:24:
5b:98:9a:0a:4b:91:e7:96:32:f6:4e:7a:d2:13:77:
c1:4a:f8:72:64:06:3d:39:8c:ab:c0:4d:2a:f4:47:
42:76:97:4d:e5:00:2c:f7:f8:e7:67:e0:33:1b:35:
96:30:36:ec:f8:ca:49:5c:a3:69:93:30:3d:af:3f:
f7:4b:f8:6a:b5:e8:2c:3a:ee:79:36:56:75:54:9b:
fb:61:c7:5f:d1:9e:7f:a7:73:f0:02:4f:61:1a:1c:
b4:3d:b1:0e:ea:f1:0e:fa:d3:5d:58:91:3f:60:08:
51:3e:a2:ed:84:ec:9f:47:da:9a:94:27:c6:85:f8:
17:5c:56:6b:1b:d1:16:51:6c:05:ed:68:3a:4d:49:
de:db:9c:de:be:48:00:38:e2:6b:a8:32:2d:e1:95:
57:49:86:0d:b9:9b:5c:f1:9f:8b:61:7b:07:e6:49:
d3:10:b1:a4:d5:14:0f:91:19:70:05:69:78:9c:27:
7a:a7:a4:1f:91:a2:48:63:71:3d:e4:a0:7b:cc:d4:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:E1:7A:81:28:3F:13:43:4C:F6:F2:77:BE:B9:09:23:DF:94:F9
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:bc:22:0d:db:70:7f:8d:5a:4b:f4:93:0e:3b:8a:7d:e6:
29:65:8f:9b:32:86:44:a2:f7:4c:8b:a7:7d:bb:13:7a:b8:a9:
cd:96:cd:48:a5:b9:bc:1f:36:df:c3:40:0f:5b:2a:cc:f7:e1:
4a:b1:21:9b:ac:e7:15:ea:a1:f9:18:d5:8f:28:50:fc:8b:57:
7f:f3:bc:5f:3f:2f:57:06:1c:1e:51:6b:97:45:7f:f2:c3:5e:
3b:3f:b8:9b:cf:05:73:42:da:31:c2:19:03:3a:a3:af:5d:74:
48:04:c0:de:bf:6d:4e:0f:cd:87:af:31:6f:ca:73:2a:c3:66:
cc:81:07:bd:94:00:e4:bf:eb:ac:9f:23:53:6c:ca:a5:0e:aa:
af:b5:7d:73:6a:a4:7e:12:50:01:06:30:8b:5e:b2:0a:ae:68:
36:26:34:73:31:4e:bb:11:47:ea:2c:8d:4c:ba:28:c4:89:3a:
9f:3a:bf:28:ef:60:46:2c:61:05:09:10:69:e0:42:9f:b0:9a:
51:3c:a9:5f:1d:be:10:58:00:d7:66:b2:67:04:7a:5f:e6:c8:
cc:2b:54:5c:9c:06:4f:64:13:82:33:3d:ed:74:66:5a:62:f2:
f6:b4:f8:d0:a1:11:7a:6e:ce:cb:c8:4c:a6:eb:1b:35:f7:53:
68:8a:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:14 2026 by rpki-client