Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
File: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft (raw, json)
Hash identifier: im+XYXlJnBW8NXWQ4XApw8mHBCa2jO9OsalSNm6ijZA=
Subject key identifier: 84:33:A0:54:7A:12:72:DD:AA:F2:76:49:A4:B7:4C:95:DC:8A:CD:67
Authority key identifier: 99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
Certificate issuer: /CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
Certificate serial: 019DA48AAEFF69F8BE8ACE351FE122CE0B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
Manifest number: 0BF2
Signing time: Sun 19 Apr 2026 07:00:45 +0000
Manifest this update: Sun 19 Apr 2026 07:00:45 +0000
Manifest next update: Mon 20 Apr 2026 07:00:45 +0000
Files and hashes: 1: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl (hash: 362lAHj+vx0DesohyHfNe1QMqJLPbcifm47Q8C8DrU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:ae:ff:69:f8:be:8a:ce:35:1f:e1:22:ce:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
Validity
Not Before: Apr 19 07:00:45 2026 GMT
Not After : Apr 20 07:00:45 2026 GMT
Subject: CN=8433a0547a1272ddaaf27649a4b74c95dc8acd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:0e:f1:41:98:91:1b:60:b7:fd:4b:d8:2c:
aa:f6:1e:8f:02:96:96:33:3f:79:51:da:dd:6f:a7:
6a:94:71:cb:8f:a8:bf:03:f8:bd:c4:be:d8:a2:6c:
24:93:51:dd:b7:7f:cd:3a:a9:c5:20:10:b8:8c:73:
9f:f2:59:c3:bf:d3:7b:f4:90:24:f8:13:c8:0f:53:
c9:bf:2c:5e:a5:d3:3c:9d:78:cf:7e:39:28:e6:4c:
73:bb:5b:d9:a1:dc:2c:81:bf:b1:3d:39:03:eb:e6:
d0:e7:3a:c4:07:08:a7:92:29:7b:fe:50:cd:f1:c9:
fe:a8:e1:c3:f4:89:61:67:a4:7d:a6:67:7b:29:6c:
51:8b:61:f7:40:0d:32:4a:4e:6c:2d:d8:77:bd:8a:
f8:69:01:19:35:c2:20:b0:61:f7:fe:21:f4:8f:44:
04:0f:90:38:08:76:e6:ee:e8:a4:9f:80:e3:5f:d9:
d0:08:66:bd:12:e6:2e:e5:75:64:23:51:dd:3c:21:
a4:f0:03:6d:16:e2:b0:b8:42:97:4d:6a:51:8a:13:
0f:d5:74:d5:e4:50:71:de:6e:c4:b0:c2:20:78:e2:
cb:1e:70:3a:26:f4:a7:5b:70:ec:77:eb:15:72:81:
4e:77:99:e1:15:fc:66:c0:31:04:89:74:35:ab:45:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:A0:54:7A:12:72:DD:AA:F2:76:49:A4:B7:4C:95:DC:8A:CD:67
X509v3 Authority Key Identifier:
keyid:99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ee:d4:19:df:17:52:62:aa:4f:fe:25:5b:44:12:57:cb:91:
8a:23:ef:7c:1c:63:ff:86:0e:ea:71:df:ce:04:ea:28:8d:61:
a6:27:e4:d5:57:0e:37:e7:90:10:5f:9b:0e:48:8f:39:e9:ff:
0b:c2:29:9a:7f:d6:00:49:63:0e:47:6b:38:35:f8:fe:f6:08:
c9:e2:bd:0a:58:b6:59:5e:3b:4b:5d:1c:53:55:77:2d:03:63:
41:b5:2e:54:2c:62:2d:f0:fd:a6:83:0a:b4:19:d7:fc:4f:d1:
6a:46:da:2c:e0:c5:82:72:2f:91:c4:b2:47:15:c7:03:f3:d3:
35:04:b5:fc:77:2d:aa:d4:00:3b:81:49:24:37:f9:a9:32:ac:
b1:90:92:fa:4e:ba:23:d4:e7:e6:9e:fd:db:3c:56:2e:4d:6d:
88:d9:bd:fb:27:66:cc:ef:cb:08:52:dc:dc:4e:e1:d9:ff:62:
c0:2e:45:bb:c5:a6:fb:24:e5:ac:f2:da:21:b9:d8:e0:12:ce:
46:d3:b1:a7:6a:98:d6:80:e0:14:56:62:45:10:e0:72:78:33:
78:33:d5:bb:4a:74:90:34:9c:0a:0f:fd:2d:54:cb:97:24:c2:
d0:d5:16:dc:24:87:21:8d:1b:f1:14:19:fe:6b:fb:0f:a5:12:
b6:a7:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:16:28 2026 by rpki-client