Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: YJNATMn4TniyIAmdz8pxP/JDj5B5wpWNlrvXFHPalAg=
Subject key identifier: 2D:A3:C7:78:32:04:20:9C:6A:29:81:88:71:97:4D:FF:F0:F9:71:F7
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019D27E0601B0063D69D2087E142830BC83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: 3piWMGxuCQ2plFOj0afJd5eidU5mIHnWV39Nj7JrMZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:60:1b:00:63:d6:9d:20:87:e1:42:83:0b:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=2da3c7783204209c6a29818871974dfff0f971f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:d2:bc:9b:6a:5d:92:d8:35:4e:25:75:0a:
7d:40:5a:e9:da:30:2e:89:cb:0c:78:6d:03:23:e2:
67:f9:83:a6:ef:0d:99:f5:b8:6c:34:5c:55:26:c5:
65:b6:83:38:71:5a:9d:41:7e:4c:cb:d8:31:20:84:
7f:3a:39:16:67:89:71:08:a3:3b:92:f8:7a:73:dd:
d8:52:93:ea:46:37:25:37:b9:39:42:c4:27:ab:ca:
2e:7a:3e:81:eb:24:46:15:21:5f:3d:f3:8a:d2:3f:
2e:92:6a:0e:ba:2b:63:6c:7a:c5:c4:90:d4:5f:1e:
0f:b1:88:7b:dc:17:aa:83:2c:21:bf:df:15:bc:ca:
f1:d9:90:4e:84:43:f5:dd:51:ba:cf:c8:b0:01:68:
6a:ba:37:5c:4f:e3:cd:9e:4d:a4:f8:3b:8f:fd:02:
b8:e4:3c:73:8a:1b:1b:13:9e:de:d9:11:2b:6d:78:
6a:4e:69:20:d1:46:3e:66:8d:f7:33:01:47:5c:a9:
d1:3a:61:dc:4a:66:be:41:a2:12:66:a5:20:7b:7b:
7c:ce:44:b3:97:26:07:d1:94:59:c3:14:46:e6:62:
1b:49:14:f1:7f:c0:dd:9e:3f:7e:af:2c:a3:2a:58:
23:b1:d9:0c:53:a5:85:aa:4e:b9:ea:30:10:5f:ab:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A3:C7:78:32:04:20:9C:6A:29:81:88:71:97:4D:FF:F0:F9:71:F7
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3c:31:f4:5b:16:4b:3f:b8:91:4f:2e:44:97:f0:02:28:9f:
03:ef:2f:78:04:0b:a2:4c:b6:3e:65:0b:6f:56:61:0c:72:d1:
99:7f:df:5c:e9:ec:1f:53:4f:f3:d6:8c:98:0f:df:74:3d:3d:
0e:2a:fb:e7:84:39:00:7c:70:75:c8:af:3b:2f:ca:84:76:5b:
1b:86:a3:96:d6:a2:70:4f:75:e6:3e:63:c6:b5:bf:89:ce:16:
a4:d2:ee:06:13:f4:8d:49:e4:e3:c9:30:05:32:0d:a7:dc:be:
0a:1f:5b:35:ba:4f:b0:e7:e2:45:df:c6:96:1d:8e:ba:32:d7:
8b:ec:d8:cf:64:28:34:63:0d:ac:2f:49:46:47:1a:33:0f:fe:
73:6f:21:30:47:e1:3f:e4:16:c1:65:92:5b:df:47:ca:14:0c:
f6:5b:f6:60:fe:75:67:07:d2:8e:83:b4:9d:37:98:12:8f:59:
9a:4e:b4:d2:13:a7:8b:c4:be:28:10:b8:be:53:e1:75:88:a9:
0e:09:ad:7b:29:1e:dd:f5:c8:76:fb:43:3f:0b:d9:ed:bd:5f:
9a:c9:65:0b:3f:c5:cc:9c:b6:ca:ed:f4:c2:26:8d:57:7b:34:
2f:06:1b:06:65:5b:56:1d:f4:87:24:46:75:bd:fb:30:55:0c:
d5:0d:35:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:37 2026 by rpki-client