Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
File: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft (raw, json)
Hash identifier: y5/oT3JqVKsY1TIkLkRlkorqm4wpZF/r8uBkT0koohs=
Subject key identifier: AD:07:17:78:51:4E:7C:59:0F:AB:82:A7:D8:A6:72:00:6B:2A:E3:16
Authority key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
Certificate issuer: /CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Certificate serial: 019D996211B309136BD76BD944E4D4EA9371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
Manifest number: 0BB2
Signing time: Fri 17 Apr 2026 03:00:34 +0000
Manifest this update: Fri 17 Apr 2026 03:00:34 +0000
Manifest next update: Sat 18 Apr 2026 03:00:34 +0000
Files and hashes: 1: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl (hash: 4qy5Eebj1Ax3Y3H5b2qj41U5HWnIWnbnw6xJknIa1m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:11:b3:09:13:6b:d7:6b:d9:44:e4:d4:ea:93:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Validity
Not Before: Apr 17 03:00:34 2026 GMT
Not After : Apr 18 03:00:34 2026 GMT
Subject: CN=ad071778514e7c590fab82a7d8a672006b2ae316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:dc:24:ec:41:67:aa:2e:37:bf:9d:de:ac:
67:d1:9f:d8:1c:e7:e1:1e:86:4d:e3:11:ae:c0:15:
2b:a7:bc:78:9d:1c:40:37:6d:cf:08:e5:62:ae:24:
68:42:61:0a:d5:4f:7b:20:98:05:d3:09:a1:c2:21:
16:fc:ff:5c:d6:b0:af:48:f0:de:fc:e0:74:53:09:
e8:63:92:8d:55:91:56:51:47:e9:c8:26:7a:b3:bb:
af:36:6b:44:04:3f:9f:25:e7:ab:e7:69:6a:3d:da:
8b:fc:c2:9a:cb:b0:17:57:2b:52:03:c1:52:0f:a7:
df:c3:d4:59:34:07:9e:9c:f0:7d:56:a5:b3:a8:c2:
89:40:38:cc:2c:9d:e2:9e:e4:35:dc:ad:39:e8:f0:
17:b8:3a:3e:61:0e:5f:dc:d6:03:a1:11:fe:77:44:
0d:9f:5b:98:fc:26:96:14:bf:e7:0f:a8:9a:60:a1:
b3:c1:66:22:b7:04:9c:13:19:b4:ef:e6:31:f7:d1:
1b:04:c9:31:51:95:c2:6c:26:9e:37:f2:20:62:ac:
0b:bb:56:89:34:29:35:09:b6:8b:69:0b:9b:99:ec:
d0:c3:2b:db:f8:d1:03:f7:0b:aa:f2:2e:69:c3:7f:
db:93:11:e8:4f:11:43:60:60:74:0a:21:58:42:e5:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:17:78:51:4E:7C:59:0F:AB:82:A7:D8:A6:72:00:6B:2A:E3:16
X509v3 Authority Key Identifier:
keyid:31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:a6:1a:b2:3f:9e:a5:b9:9c:0a:96:e6:a7:d8:ad:b6:d8:
0b:67:a7:04:85:6b:af:b9:49:fe:8a:5e:b9:1e:9a:d4:cd:c0:
a8:51:48:bd:5b:b6:02:16:59:27:b1:0d:89:7a:5d:bd:bd:6b:
36:58:6e:3a:62:2a:bd:99:e3:3d:79:e2:e2:be:d3:3b:56:28:
34:45:4b:54:2a:e1:74:2b:3b:10:b2:9b:03:a9:35:25:28:52:
e8:ce:c1:60:a2:d8:95:af:e7:da:a9:3f:d0:30:07:d5:ae:76:
97:3b:e7:75:f5:3b:c7:75:ff:5c:89:8b:4c:1e:12:c3:f2:0f:
cb:e6:26:a1:0b:ab:84:45:e1:c2:21:f4:bc:9b:dd:15:df:13:
2c:09:37:a5:fe:ab:e6:ba:ec:6f:7d:5e:85:98:5b:17:40:5a:
a9:10:4a:42:e8:d0:35:b8:0a:a1:54:d1:85:f2:00:61:44:d7:
ef:38:73:de:ba:6c:41:b4:f8:04:92:ed:3e:d6:6f:4b:55:56:
e0:95:1f:61:45:c5:70:1b:bf:85:5a:52:40:9a:4a:2c:3b:86:
f2:9e:dc:00:a0:9f:d2:95:c3:92:17:54:5a:c5:e4:80:99:06:
80:fb:3b:70:d5:e2:c7:36:8c:d0:95:34:4a:57:56:ad:34:ef:
56:3b:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:46 2026 by rpki-client