Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File: MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier: Bzthw8xbekdC/qzZ3zmwJoftvbmecbD5jCaPEDS1vDQ=
Subject key identifier: D5:20:B9:50:81:F9:8A:7A:D6:11:62:32:F9:60:D5:9B:D4:BA:AE:67
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer: /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial: 019D2704C3876057A934CC0F3ED211695FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number: 0BF5
Signing time: Wed 25 Mar 2026 22:01:56 +0000
Manifest this update: Wed 25 Mar 2026 22:01:56 +0000
Manifest next update: Thu 26 Mar 2026 22:01:56 +0000
Files and hashes: 1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: NYe7TkA41cDA+sk6uWg/qbrAtdOEt0jMzgPOioFHM3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c3:87:60:57:a9:34:cc:0f:3e:d2:11:69:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Validity
Not Before: Mar 25 22:01:56 2026 GMT
Not After : Mar 26 22:01:56 2026 GMT
Subject: CN=d520b95081f98a7ad6116232f960d59bd4baae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:6b:27:a6:f2:7f:3d:30:9a:0b:9c:be:a2:
f2:a0:2a:e5:d1:69:2e:e5:74:29:36:ab:ae:9d:40:
dc:6d:5f:51:b3:51:82:3c:83:25:64:5d:98:0c:28:
48:e5:c3:91:ef:8d:6f:fc:49:4d:33:5f:04:1d:98:
22:61:2d:91:20:82:46:17:c5:8d:78:d7:6a:2b:83:
43:a7:f5:45:12:78:bf:d8:76:ed:6a:68:7a:bf:95:
04:1b:ff:f5:55:11:93:89:3b:00:dc:35:26:6e:70:
53:46:0a:a9:ad:27:7d:04:8c:43:16:4a:39:ee:de:
6f:b7:e0:7f:fb:91:ef:65:5c:fa:34:9d:32:85:60:
4f:eb:ca:85:1e:0b:f7:2d:aa:72:5a:ef:4e:0c:9e:
88:59:de:11:20:7a:8a:1e:e1:19:26:4b:33:2c:86:
ce:7c:83:5a:9f:52:b0:6e:04:61:89:6b:ca:ec:21:
6e:44:f7:48:68:54:51:7d:7b:be:79:17:ac:0c:0c:
5e:ab:05:fd:d0:d4:06:0f:70:5c:dd:6a:79:5b:c9:
ba:ff:99:02:47:bb:9f:f6:7a:96:3f:8a:62:f6:3f:
d1:d0:17:be:fb:6e:58:b0:3d:c4:6a:c1:22:64:c8:
4e:bf:82:35:60:45:08:cb:26:d6:4d:af:f9:25:16:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:20:B9:50:81:F9:8A:7A:D6:11:62:32:F9:60:D5:9B:D4:BA:AE:67
X509v3 Authority Key Identifier:
keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0e:6e:b2:44:8d:8c:75:ee:bf:a6:29:3f:4d:1d:a8:19:c0:
9a:25:a7:5d:b7:5f:54:5a:ac:39:48:91:ca:e9:8d:87:de:d0:
72:01:43:3f:58:2a:63:38:fd:2b:35:1a:48:d8:86:86:28:89:
2b:b1:81:c0:86:48:ad:83:b1:d0:66:02:02:47:f9:c2:16:52:
c9:3c:02:1e:f4:48:d0:1a:49:0b:a8:19:0b:c9:16:36:98:43:
8f:0a:50:dc:47:4f:d4:ce:fc:9d:f0:71:52:ee:5c:d8:25:dd:
4c:d9:59:34:83:8b:b4:cd:66:f0:42:78:1b:b3:9b:1b:06:54:
9a:77:67:68:b9:70:37:57:e9:c5:90:f4:80:27:28:21:99:7e:
5d:3d:c1:a8:8b:98:07:e3:3f:36:5d:f4:bb:2a:f2:d1:2c:9b:
78:9c:58:ae:8a:cf:e9:82:2c:7b:ae:83:b4:a0:49:68:a3:aa:
89:6a:09:68:14:c7:cf:e7:81:99:01:e5:b0:33:d0:b4:0c:a4:
f0:6c:34:5f:30:20:d1:f6:74:6d:46:9f:44:a0:46:ca:c0:3c:
bd:df:b5:90:59:27:26:cf:05:6c:ff:99:c5:64:f1:88:e6:7d:
35:85:c6:ee:2f:e2:26:53:f3:17:f8:57:a2:51:b7:d5:e5:3d:
ba:7a:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:52 2026 by rpki-client