Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: uDJmlPCzbcdaTpnm+ImB3f0g44iflBkDVQfLirbbytg=
Subject key identifier: D9:DB:F9:F3:E8:FB:3B:AF:11:97:8B:A7:34:E6:1F:73:54:B2:9A:AC
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 019D9850A424C5856B596233A3CCFFD2BD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 0900
Signing time: Thu 16 Apr 2026 22:01:54 +0000
Manifest this update: Thu 16 Apr 2026 22:01:54 +0000
Manifest next update: Fri 17 Apr 2026 22:01:54 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: JDy0hXBbi9E3nihuLMo3BeCIMwLUuhjTgdPU9hpEUZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:a4:24:c5:85:6b:59:62:33:a3:cc:ff:d2:bd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: Apr 16 22:01:54 2026 GMT
Not After : Apr 17 22:01:54 2026 GMT
Subject: CN=d9dbf9f3e8fb3baf11978ba734e61f7354b29aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:2a:27:c4:15:7e:5c:b2:74:08:fc:82:82:
ab:b9:3b:0f:b7:88:e8:00:a7:6a:d2:91:93:60:e0:
af:88:28:22:6d:24:39:ee:02:f8:9e:d3:43:55:2d:
bf:2f:01:f0:03:5c:79:df:ca:6a:c8:26:92:02:ad:
8a:0f:ff:ae:df:40:29:e2:28:02:86:0d:8b:da:c2:
e4:b1:81:3e:c6:02:60:de:d5:af:1b:cb:55:06:ef:
68:63:e1:5c:8b:21:df:a0:d6:2f:c2:69:e5:33:db:
f6:5e:2b:8d:e2:0b:ad:fa:4d:b5:6f:89:c2:e8:8f:
85:45:23:49:34:70:e5:7d:ee:b4:d9:74:80:a4:2d:
60:43:fd:49:f0:ff:b0:34:d5:3f:f8:e1:b8:f6:c4:
d6:2b:67:2f:b1:8b:4d:18:0f:57:ff:46:2c:62:8d:
75:15:9e:1b:6a:37:be:d6:3d:99:a3:1c:d3:45:9e:
42:85:0b:60:ad:33:2c:46:43:cd:c9:26:df:3b:a2:
6d:7c:47:90:58:36:c2:90:4d:65:b4:65:5d:ec:e8:
eb:6a:b7:ca:2b:c2:b7:08:6d:c8:f3:ab:57:06:f3:
4b:f9:52:df:23:a5:2f:6b:f7:1d:45:21:37:fe:f9:
9a:1f:ce:ed:7f:58:76:ef:4a:0a:ba:7a:40:ec:b3:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DB:F9:F3:E8:FB:3B:AF:11:97:8B:A7:34:E6:1F:73:54:B2:9A:AC
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:84:61:49:85:01:9b:50:c5:cd:eb:25:52:94:b4:a5:ef:b8:
4b:83:33:92:46:35:71:45:06:2b:3d:d9:31:8d:f8:77:22:3d:
32:64:f3:95:e7:fd:29:c9:c3:97:b9:be:29:44:e0:18:8b:2f:
61:8c:b7:10:04:bd:5a:4f:14:fb:5d:d1:1e:f0:51:f8:f8:35:
69:29:15:b5:43:8e:66:fe:e8:27:1b:2b:4f:48:48:a1:3e:f4:
de:44:40:ba:21:c8:7f:7c:26:da:bb:cd:15:fc:49:2a:6e:e1:
36:27:3e:a6:61:a6:b0:25:b9:3a:93:90:97:13:a1:ca:93:70:
f3:b3:f6:da:f3:f3:4b:a3:cf:e0:31:cd:af:fb:75:b1:5f:57:
06:d8:b0:fe:ce:1a:5c:91:c1:f7:51:7b:29:dc:40:af:b5:12:
b4:40:d5:99:03:71:10:d7:ce:df:66:25:58:4d:f6:68:b9:1b:
8c:4d:77:a4:2f:3b:d3:a1:0e:a6:f6:9e:2e:65:d6:b5:27:ff:
6e:5b:59:ff:42:0e:28:51:1e:07:25:81:78:f7:dc:78:a6:54:
10:f1:c6:9e:0f:ac:fc:10:64:ae:89:41:2b:b1:b6:49:fe:4b:
90:30:fa:c4:71:c0:04:bb:7e:4b:c0:0e:e8:cf:2d:82:93:aa:
3a:ff:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:43 2026 by rpki-client