Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
File: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft (raw, json)
Hash identifier: 6h+qJzzLwPAyntMDjMp0pAmZ1hzb60LOhkzJQwpKs3k=
Subject key identifier: 68:55:4F:30:55:37:9F:E4:C1:5D:67:FA:7C:F6:2E:81:50:85:A4:2A
Authority key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
Certificate issuer: /CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Certificate serial: 019D27E01B799468D3BE986B0D3CABAA0306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
Manifest number: 1444
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl (hash: +nFo3HEZ2ZlhRtyHMRmK7m94hMBiLiY2x/xpLFm2Gs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1b:79:94:68:d3:be:98:6b:0d:3c:ab:aa:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=68554f3055379fe4c15d67fa7cf62e815085a42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:db:e3:c2:67:85:83:59:46:95:ab:89:ae:
27:80:f5:56:27:0a:c6:84:51:8b:e9:6e:ea:3d:08:
a2:cc:72:f6:7a:f5:88:da:5d:43:27:4d:c2:64:90:
a1:33:04:24:d6:fe:a7:5e:6e:cd:cf:9b:ae:80:0f:
ab:f7:1f:a5:4a:af:e6:37:ae:56:9a:fa:84:ef:da:
12:5f:a0:0e:c9:5f:42:f8:60:fc:f3:00:7f:f4:91:
50:46:24:5e:58:1c:81:a6:85:01:f7:21:f4:0d:a5:
cd:8c:94:d4:6b:89:a0:88:24:8b:c6:45:05:24:fe:
63:63:b1:1c:10:d4:b4:66:5d:86:31:c2:1e:29:6a:
63:d6:db:ea:b4:f2:4c:52:b9:5e:c4:b5:59:de:f2:
5e:bc:7d:ff:2a:be:77:03:96:10:be:65:e5:fa:ef:
43:73:11:6c:f3:08:81:c3:2b:2f:71:f7:40:9d:f6:
92:ba:8a:48:2e:7d:03:ee:53:cc:e9:b7:00:f6:71:
dd:45:20:19:a8:57:c3:ff:37:bd:0a:a3:14:3a:84:
a6:50:ea:11:d1:bc:c2:89:a3:81:c8:25:fb:0d:2d:
a1:23:08:dd:7b:2f:37:cd:67:41:73:79:b6:20:ac:
2a:79:d6:b1:3a:9e:d4:bc:7a:d0:d2:a2:cc:6f:4d:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:4F:30:55:37:9F:E4:C1:5D:67:FA:7C:F6:2E:81:50:85:A4:2A
X509v3 Authority Key Identifier:
keyid:99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:de:99:38:6f:9f:e0:95:42:42:33:5d:8b:b6:3e:8a:da:
af:c6:f6:2e:da:bd:10:9e:b2:fb:6a:37:5e:ee:c3:77:c3:c4:
d0:00:8d:70:1b:5d:b3:26:3f:84:be:6c:04:9c:12:bc:06:20:
ad:c4:4c:05:29:2d:a4:3d:98:95:fa:19:70:18:3a:d4:87:4d:
07:4b:21:86:b4:67:6a:3d:68:4e:90:ee:e1:be:80:c9:af:09:
20:b1:f0:aa:38:a3:19:2b:1d:d9:89:c6:25:8b:f5:c5:dc:73:
a3:10:25:3f:9f:84:50:c6:66:7d:11:c9:97:ef:43:d1:06:77:
9e:e7:44:69:50:c6:66:5b:71:cc:eb:d3:70:c6:c1:9d:04:4f:
fd:68:66:d7:23:25:ac:f4:73:63:80:1a:cb:ff:6c:70:89:3c:
0b:2a:49:7e:c9:a1:b1:b1:93:54:ac:4c:3a:d3:ac:b4:00:f7:
5e:03:a2:9f:61:13:34:c1:5e:a3:9d:44:58:56:8d:13:09:cb:
68:aa:b8:bc:4e:ca:39:e2:da:93:0d:ca:b0:5c:7b:cd:49:da:
ff:35:18:d7:3a:c4:07:b0:9a:51:8b:84:d2:e2:05:f6:28:68:
c7:b0:7e:32:d1:6e:9f:9f:30:ec:ec:00:22:92:a5:dc:2a:e1:
84:c8:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:34 2026 by rpki-client