Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: 71bzjyx1YEP7IEN8YZfRX/FDIRQ80QNtPyleCLaRZMk=
Subject key identifier: 41:48:45:28:51:25:A3:D4:14:A9:6B:EF:FD:6F:DA:64:AA:69:66:3A
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 019D281709BD46BB5536C68263F4160F63FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 06CB
Signing time: Thu 26 Mar 2026 03:01:31 +0000
Manifest this update: Thu 26 Mar 2026 03:01:31 +0000
Manifest next update: Fri 27 Mar 2026 03:01:31 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: WK0DBWTx+9AY6F0to9oSdhyO0mkKBByVI3SnuZRRuTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:09:bd:46:bb:55:36:c6:82:63:f4:16:0f:63:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Mar 26 03:01:31 2026 GMT
Not After : Mar 27 03:01:31 2026 GMT
Subject: CN=414845285125a3d414a96beffd6fda64aa69663a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:f8:41:f3:4b:2c:8e:d3:5b:52:85:79:c4:
dc:15:a2:6e:39:28:99:e5:80:be:fc:35:d7:3f:ad:
dd:af:6d:2a:87:ad:7e:a9:27:ac:f4:2d:39:29:6f:
d8:68:d7:9c:60:b4:1c:3e:0d:39:26:ae:24:4a:e0:
93:b5:c3:48:65:31:42:95:08:f7:4e:e6:31:cb:b8:
95:f8:0c:ac:c0:a7:9e:0c:52:d4:47:18:54:fc:f7:
92:b9:54:a9:f6:a3:10:49:b7:6a:cf:be:ab:67:37:
f3:47:4c:0b:f9:33:55:aa:64:9b:b2:02:7b:4a:8e:
00:8b:73:75:26:3f:2b:59:a0:1a:27:19:dd:53:dc:
45:37:16:72:0e:0c:fd:1e:cb:dc:f9:6a:4d:40:f5:
1e:68:2d:d2:e2:06:cc:fd:de:3f:41:ad:e1:98:72:
63:87:37:85:75:d2:30:56:32:48:3c:9d:8a:01:41:
b6:a8:04:95:d1:42:07:44:a6:01:ae:63:a8:1b:05:
dd:40:78:e5:5d:70:01:a4:7e:d3:ca:6e:9e:21:28:
29:c0:81:cd:fb:d9:e2:02:a8:41:c4:8e:71:33:00:
3f:86:9e:81:9f:d1:f3:86:d5:40:3c:26:c1:f3:e2:
2c:de:d4:86:a9:ef:60:7d:2c:a5:72:dc:d0:cf:3a:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:45:28:51:25:A3:D4:14:A9:6B:EF:FD:6F:DA:64:AA:69:66:3A
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8a:74:11:ca:69:63:f1:eb:c2:65:55:1f:3c:20:77:96:d0:
a8:ca:4d:63:e9:fe:1d:2e:1f:f6:69:19:7e:c8:f0:c0:0f:47:
1e:6b:fd:b8:1c:df:91:99:48:33:2b:0b:3f:18:63:fe:6e:82:
58:92:e0:6e:3a:f7:93:ed:e4:3c:12:81:d1:70:df:be:82:31:
a2:8c:18:ba:db:bb:9e:4f:cc:b5:37:5c:f8:1b:7d:66:07:8b:
d7:4e:1f:dc:ea:e1:63:1b:91:2a:4b:83:10:cd:11:96:62:62:
c3:91:f3:ad:c6:7c:b2:e1:04:68:51:8f:aa:11:d8:77:7a:9b:
cf:53:6b:b6:7b:4c:dc:05:ee:3a:ca:aa:7b:a6:b4:71:40:52:
44:0d:f8:20:86:27:39:21:ec:dc:2b:30:4c:a4:b6:af:0d:81:
89:e9:79:5d:c0:82:74:a3:20:b5:2b:6b:9c:db:88:f6:1f:6c:
51:f3:ab:de:b8:a9:c8:a8:fe:4a:61:0c:39:23:25:e8:25:89:
2d:3d:89:79:cb:57:a9:a1:84:35:52:7d:68:66:73:b5:90:17:
68:37:a3:87:2a:63:0e:9a:ec:eb:6a:15:38:c0:93:5b:d3:11:
a1:9c:a1:5b:65:2b:13:31:9e:3c:05:5c:03:75:cd:aa:bc:52:
ba:ff:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:53 2026 by rpki-client