Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
File: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft (raw, json)
Hash identifier: ErhXaH5Y9K13TomUccLvBl9URxDAT5iScXUUhbGPzfg=
Subject key identifier: 72:EF:28:10:26:CD:FA:DE:6F:8E:56:B7:E4:2D:1A:B7:2B:B7:5A:6E
Authority key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
Certificate issuer: /CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Certificate serial: 019CABD9E1F8F85954921D51F5A3E39E230D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
Manifest number: 0B37
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl (hash: AoRmd8oVvVoNuGgTE3xY7eialdpDub2n2hnBmwU382Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e1:f8:f8:59:54:92:1d:51:f5:a3:e3:9e:23:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=72ef281026cdfade6f8e56b7e42d1ab72bb75a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:a0:0b:cb:23:94:28:85:f8:51:8c:7a:1a:
83:64:08:20:5f:f1:c7:c7:43:8e:2e:a2:49:04:37:
94:34:5c:39:a6:f0:93:1e:58:f2:bd:8f:16:3b:51:
c9:5f:77:f9:3b:fd:18:eb:dc:c1:94:4d:a2:28:2d:
f0:44:d5:9b:5f:de:c4:59:e2:6c:af:97:a8:99:8f:
28:f5:99:f4:22:8a:ca:51:8c:33:0f:9b:db:27:61:
dc:29:cb:34:7b:35:9c:7f:82:2c:79:86:40:f6:74:
71:3a:f2:77:f9:fa:6d:6e:29:03:a2:57:b8:b0:d0:
24:50:da:1b:fc:45:36:1e:37:b8:b9:23:2b:7a:4c:
10:b6:af:ac:4f:e3:ad:4d:3d:02:fc:17:5e:bc:63:
37:1b:ec:29:6a:f3:6f:0b:2a:3a:e9:ea:45:fe:ce:
a2:ea:21:4f:b4:7e:ec:d4:61:28:ab:06:ea:44:5c:
5f:fd:0f:93:33:18:df:15:7a:0e:5a:dc:83:2a:e6:
99:2b:d9:37:c8:e9:18:bd:e6:41:71:16:9f:f6:fb:
2c:f1:6e:60:5c:e3:fe:74:a5:f2:8b:ca:b2:49:7e:
4b:6b:c6:4d:60:fe:53:81:36:18:7b:3c:96:f4:02:
1f:72:04:ab:42:2e:2f:c4:51:91:95:19:51:80:ed:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EF:28:10:26:CD:FA:DE:6F:8E:56:B7:E4:2D:1A:B7:2B:B7:5A:6E
X509v3 Authority Key Identifier:
keyid:31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:4e:2a:f0:30:64:b2:0d:5a:a1:59:4c:33:6f:a5:35:ba:
06:0d:98:73:e8:7b:8d:00:24:07:53:07:bd:a9:42:6e:93:00:
87:98:9b:2a:18:4b:b1:06:06:a8:52:90:a6:0a:0f:38:3b:7a:
63:74:57:4e:d6:6c:60:3f:15:b9:33:44:60:16:e3:83:e3:a2:
2d:cf:8c:22:97:88:74:e3:05:77:35:e8:2e:5d:06:24:0c:6e:
47:ce:95:e5:68:dd:a3:9b:d9:54:6e:97:79:04:bb:e5:1b:05:
0c:53:b6:07:e3:d6:24:ff:22:fc:85:1f:1d:de:80:c0:d9:81:
b0:4c:6b:c8:2b:11:61:fe:5e:6f:d8:1c:f4:69:e0:dc:5f:50:
4b:ca:8a:65:9b:c2:a0:dc:b1:a6:76:e8:1f:e9:6b:84:0d:78:
3f:0b:b1:34:2e:a6:58:72:38:87:7b:f0:fd:8b:f8:23:13:0c:
5b:60:ee:9f:dd:e7:89:67:df:eb:ed:5e:56:76:6f:68:d3:c1:
ce:8f:27:77:fa:c7:63:c4:58:c3:80:6f:af:7f:ca:32:f4:77:
52:06:95:6c:c8:0c:c8:a5:f5:8e:e1:d9:51:a8:3d:02:41:d8:
6d:2c:79:9a:4e:d7:92:5b:2c:c3:90:65:84:50:26:d3:0e:c6:
b4:3b:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:35 2026 by rpki-client