Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: Ttm3152XkHYHAVH2w1ntPg9rcAX1z2oeMfShxoE9N8Q=
Subject key identifier: 3C:C8:F6:0C:84:FF:BD:DD:5D:D6:02:2B:7D:D3:2B:8C:02:E4:B4:F1
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 019D27049997F55DD04BDA5E29DEF6F064C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0C6C
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: EKb2QScj78XrlY2sDCrk/s9TSyB19CcG1EKcf8shibw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:99:97:f5:5d:d0:4b:da:5e:29:de:f6:f0:64:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=3cc8f60c84ffbddd5dd6022b7dd32b8c02e4b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:30:cf:7c:18:16:8f:79:8c:08:55:98:1e:
f2:5e:80:6d:f4:5d:53:8c:9d:a3:20:bc:7e:67:b7:
13:4e:49:f4:13:4b:dc:f9:34:c5:de:49:fc:7d:d2:
53:1a:79:cd:b7:5f:4d:53:27:8e:b5:4f:6d:c5:bc:
af:59:41:8b:71:0e:26:49:a3:15:33:ae:23:b2:be:
e5:0b:52:b8:1a:43:75:92:7d:99:e4:4d:b7:c1:7d:
45:bd:a3:6c:e7:ba:f7:99:31:67:6f:7f:62:fb:a9:
56:dd:17:d6:51:e8:21:a5:ca:f4:ff:76:58:53:b0:
a7:4e:6d:fa:1f:6d:95:cc:4d:5c:01:1e:4d:11:f3:
2d:ab:46:c0:c1:0e:30:7b:21:3c:f1:b7:3e:ba:59:
9e:b6:c0:63:4b:94:fe:e9:16:a9:60:dd:1e:6a:db:
5b:76:7e:33:13:bf:94:ad:0f:78:ea:f6:c7:dc:b4:
06:4a:03:b3:36:25:08:e1:26:a3:62:0f:64:20:66:
84:84:b6:4d:f8:b3:e9:84:98:9d:9e:c3:ec:dc:4a:
3b:e3:46:fc:48:ae:39:f2:39:b3:2c:b5:0c:94:20:
1d:ba:17:d4:66:63:eb:97:27:64:b1:cf:ab:af:7f:
28:43:eb:53:cf:ce:06:1c:41:0c:d7:c4:25:fa:c6:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:F6:0C:84:FF:BD:DD:5D:D6:02:2B:7D:D3:2B:8C:02:E4:B4:F1
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:11:0f:eb:21:28:b8:d8:56:3e:4c:43:f9:2f:d2:95:d5:60:
66:13:02:ab:b8:51:6a:d1:a0:b1:f0:c0:db:50:bf:f9:b9:d3:
7e:a0:75:13:bd:19:d3:ae:77:70:f2:a5:0d:29:80:1d:66:8f:
55:1f:8a:0e:20:0a:f6:c8:2c:54:26:8c:91:21:fd:b3:42:52:
8c:80:e0:9a:8f:ef:f8:43:03:f0:77:10:06:94:8e:88:33:58:
86:88:c7:5a:1d:fe:c5:15:01:17:9e:05:3c:57:db:f5:48:e1:
8f:55:f0:da:ad:ee:ba:0d:f9:b9:fc:93:8a:ae:da:03:4a:66:
37:eb:f2:56:20:d2:d2:ba:bc:5e:47:74:3d:8a:2f:7b:af:56:
19:3f:2a:9e:dc:02:99:8f:18:c0:ac:2d:bb:c6:28:b4:76:6a:
a4:89:f6:8a:31:bf:bf:e2:54:70:17:76:a0:40:5a:62:9e:8e:
54:49:9d:6d:43:4c:2c:17:e1:fb:03:3f:23:b7:7c:75:80:63:
ce:83:96:3f:bd:b9:c4:51:46:9e:11:01:5f:90:ab:85:fb:e7:
29:90:7e:58:41:28:13:a1:18:5a:2d:7a:77:dc:6a:4e:d7:25:
c0:27:0b:e2:3c:ad:1d:d3:0f:06:ae:4c:90:fe:ff:94:1a:40:
9e:90:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:49 2026 by rpki-client