Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
File: MMOt1700croWgExJC2ahCXZZvTE.mft (raw, json)
Hash identifier: e81hMw5XqTZf8zptT8jkXN+vEEnD9fJzo9ITmnJO30M=
Subject key identifier: 48:F5:6D:3B:3B:BC:C9:57:8E:39:E5:2F:97:3D:37:4F:FE:AA:16:60
Authority key identifier: 30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
Certificate issuer: /CN=30c3add7bd3472ba16804c490b66a1097659bd31
Certificate serial: 019DA3780A82EF48AF6CB526DE2769C21552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
Manifest number: 0E79
Signing time: Sun 19 Apr 2026 02:00:46 +0000
Manifest this update: Sun 19 Apr 2026 02:00:46 +0000
Manifest next update: Mon 20 Apr 2026 02:00:46 +0000
Files and hashes: 1: MMOt1700croWgExJC2ahCXZZvTE.crl (hash: HbWt/BnoHRvZbUtElPkEJ6e9YhjB4G53lPFJ0U8z/rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:0a:82:ef:48:af:6c:b5:26:de:27:69:c2:15:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c3add7bd3472ba16804c490b66a1097659bd31
Validity
Not Before: Apr 19 02:00:46 2026 GMT
Not After : Apr 20 02:00:46 2026 GMT
Subject: CN=48f56d3b3bbcc9578e39e52f973d374ffeaa1660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:89:b6:23:51:78:13:b6:66:41:50:ac:2a:
34:c6:0d:56:3e:cc:4f:53:4f:2b:24:d6:5c:5f:82:
94:94:8a:27:67:c8:a5:bf:d6:63:09:38:b1:e9:c3:
d0:7a:00:9d:1b:0a:46:bb:58:0d:e5:41:dc:39:c9:
bc:aa:8b:9e:d5:bd:5f:e1:b2:11:26:de:7d:96:19:
1a:5e:37:18:3b:b6:97:aa:58:d3:03:b8:60:89:5d:
01:08:81:75:1b:31:0b:26:aa:0c:36:0f:d1:d0:ba:
15:1a:67:cd:5d:03:34:7e:16:50:84:28:a1:63:22:
7f:e2:12:5e:aa:14:53:df:26:f1:30:ee:df:08:10:
a0:8e:37:6a:f2:7f:23:e4:39:9d:8a:c0:a9:1d:7e:
d1:24:49:a4:02:77:bb:c7:7f:3f:47:b4:d8:21:01:
f0:6d:d0:5a:16:28:d4:da:7a:c1:00:dc:d9:d8:84:
2e:cf:e7:4b:09:9c:60:fc:42:cd:74:97:21:3e:76:
02:09:12:aa:33:89:7b:91:df:50:de:ee:d5:8d:7f:
d0:ce:8b:ae:84:17:22:46:3c:f3:db:33:60:25:98:
97:2e:c8:83:7f:d2:e1:78:18:db:c1:cc:78:fa:da:
13:42:d8:ec:31:3d:17:2c:ae:1e:a7:a0:5d:85:a4:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:6D:3B:3B:BC:C9:57:8E:39:E5:2F:97:3D:37:4F:FE:AA:16:60
X509v3 Authority Key Identifier:
keyid:30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ac:31:c3:23:7d:fd:62:42:88:7f:40:12:40:51:28:90:32:
33:7a:84:57:d7:0b:ba:51:29:15:dc:01:2b:79:c9:c2:61:f1:
c7:06:4b:e2:c0:aa:e5:c1:06:51:4c:9d:82:bf:db:86:72:9b:
fc:81:a5:e0:9b:0e:1d:c6:ae:39:d0:26:d6:04:ea:63:26:9e:
52:1f:c9:09:a6:29:90:d9:3c:d9:69:bf:53:b2:fd:1a:80:8d:
0d:e6:6f:8c:73:d1:e7:d0:d2:4e:f1:7a:27:5f:d2:b5:62:61:
07:67:de:5a:ab:60:1a:73:20:0c:54:17:e2:66:2a:aa:e7:38:
26:c4:7f:9b:47:69:ed:2d:a2:3e:91:cd:79:6c:ab:6e:76:02:
d9:b5:0a:5d:54:c5:32:a2:69:13:38:29:44:cf:54:3e:77:7a:
ae:3e:77:f3:64:fb:25:ba:7f:69:b0:dc:2e:d1:5c:92:69:27:
82:12:56:43:eb:5e:b7:d0:91:42:3b:f3:3d:02:ec:c8:87:62:
a9:2c:57:20:37:4a:e0:e0:8c:2c:d1:a3:e8:28:0f:47:7c:0a:
e3:2b:23:d9:82:c3:a5:10:35:c3:bb:f7:5c:4e:4a:4d:00:36:
73:03:9e:0a:f3:a0:ac:ec:dd:1a:02:fa:d0:11:01:3a:4e:76:
1c:17:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:53 2026 by rpki-client