Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: BCLsmAcj3NipXb4SVpenr7Jw/s+U16OcK9+lkkJBDXo=
Subject key identifier: 03:72:88:F4:F6:42:BD:4E:54:33:D6:CE:B7:A7:B9:F3:0A:C2:43:9F
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019D9AE3056041126F48B06BA99C2AD04223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 099E
Signing time: Fri 17 Apr 2026 10:01:02 +0000
Manifest this update: Fri 17 Apr 2026 10:01:02 +0000
Manifest next update: Sat 18 Apr 2026 10:01:02 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: NlZbIn0znXvUTezmDIoAW973gMEu/RQMMsTtyWztv7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:05:60:41:12:6f:48:b0:6b:a9:9c:2a:d0:42:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Apr 17 10:01:02 2026 GMT
Not After : Apr 18 10:01:02 2026 GMT
Subject: CN=037288f4f642bd4e5433d6ceb7a7b9f30ac2439f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:d5:24:1b:1d:10:e8:8d:a0:2f:ec:e1:65:
13:bd:22:41:34:bd:82:39:27:fc:57:0c:69:2f:b7:
a4:ad:bf:9f:20:9b:d4:04:5b:15:fc:45:7a:8f:31:
90:5a:d2:65:d8:fd:9b:df:e1:57:68:26:9f:9c:8e:
31:b2:25:98:2e:2d:00:ad:a4:1c:df:67:17:4e:a3:
aa:85:10:a8:86:4d:19:92:5d:2a:a2:96:c4:40:95:
67:15:43:50:49:24:43:8f:e5:cb:48:22:f5:c2:dd:
d2:5e:e8:5f:26:4f:f5:32:7c:6f:c7:9f:bb:f8:4d:
e2:4f:cd:d1:f6:ac:a4:c4:66:06:26:72:de:a5:23:
29:dd:93:10:69:54:b6:83:30:e0:53:5f:e5:d5:39:
e1:27:69:8b:68:72:06:64:89:c1:3c:88:a0:91:eb:
70:d0:9c:e1:bc:0a:e0:35:ee:4c:20:6e:43:60:e5:
4d:8a:da:bf:79:e3:18:f9:43:a5:ed:a3:42:bd:c2:
6e:cf:04:00:d6:77:4e:01:05:58:bb:f1:7b:32:f4:
fe:f8:82:5c:5d:ea:1e:2c:e4:7a:39:1d:89:82:a5:
6e:de:b6:8a:da:9a:19:fa:ac:96:9c:01:f1:0c:0d:
ea:93:db:96:1b:42:b7:67:e7:af:f7:3f:d4:d9:5e:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:72:88:F4:F6:42:BD:4E:54:33:D6:CE:B7:A7:B9:F3:0A:C2:43:9F
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:12:6b:73:3f:26:a9:c7:d3:c1:51:31:35:4d:86:1f:cd:c2:
4c:1a:5c:f6:18:af:8b:17:78:1d:f9:2a:d4:d3:17:bd:8e:04:
3d:df:c1:f9:6b:a5:64:36:31:db:bd:54:d1:1f:20:a6:7f:6c:
94:bd:e6:4c:53:e1:8f:fb:a9:00:c4:d4:81:06:ea:73:c7:80:
98:66:01:2c:55:f5:02:b0:ee:62:f6:33:9c:ab:91:5c:ff:5d:
1d:ce:41:5e:15:33:6f:d3:6d:93:c4:0d:58:a7:1e:33:f3:24:
56:ff:ad:1f:b9:56:10:ab:4b:d3:91:af:20:fd:f7:c0:37:92:
bd:42:af:b7:2b:95:f2:28:b6:42:b0:e8:1e:94:87:a1:f1:9f:
b7:88:d0:6d:04:79:b2:e7:ad:76:eb:20:75:40:11:c3:37:3d:
fe:64:d8:17:47:7f:3b:60:7f:0a:50:f8:bf:20:1d:7c:fd:b7:
84:09:20:07:f0:3c:1a:df:d5:23:fd:64:88:4c:0b:e9:9b:c3:
60:f3:a2:d3:55:3c:c6:b1:4a:13:c4:75:42:b4:5e:9a:62:59:
55:ec:5a:6f:76:89:d8:3f:15:22:97:c9:aa:83:e2:77:fb:4c:
7d:02:15:18:a6:a1:84:93:4c:7a:91:b3:a6:53:8c:64:f7:d0:
a1:f1:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:15 2026 by rpki-client