Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: MIyJuPDEPo4yGs8lnPj3b+IvQJ2oLsV/Akq1ZZrWBS8=
Subject key identifier: D9:65:9A:79:62:1E:19:B0:9F:E0:20:9F:CD:CE:F7:2E:D4:CE:CB:A0
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 019CAA586971EBFA7769B5B32C9B19271CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 0666
Signing time: Sun 01 Mar 2026 17:00:46 +0000
Manifest this update: Sun 01 Mar 2026 17:00:46 +0000
Manifest next update: Mon 02 Mar 2026 17:00:46 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: estADTxHlDxJyutl/Bx/pzhKJJnKgE3nQCThbxVVytI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:69:71:eb:fa:77:69:b5:b3:2c:9b:19:27:1c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Mar 1 17:00:46 2026 GMT
Not After : Mar 2 17:00:46 2026 GMT
Subject: CN=d9659a79621e19b09fe0209fcdcef72ed4cecba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:8a:07:5e:2d:10:0e:d9:57:ee:dc:63:70:
8b:f6:53:17:29:df:4c:9d:47:27:82:69:99:0a:3d:
10:25:5d:e5:a9:5f:70:52:ce:87:57:ca:a4:b2:82:
f4:37:8e:12:91:fa:7c:2a:36:51:9d:db:bb:3a:01:
4c:85:9b:40:5b:4a:83:26:c4:c6:ba:23:f8:f9:d7:
c3:9a:c5:55:ab:71:f8:39:bc:9c:4a:bd:2e:63:68:
00:a2:7e:bb:44:5e:24:10:6a:ca:2c:f7:01:b8:4a:
8a:7b:b0:a0:d6:b2:14:34:23:39:0d:27:c3:c9:55:
d6:18:0e:64:73:f6:8d:71:ce:ed:23:d4:19:80:65:
57:10:86:dc:13:be:94:af:b3:67:d0:37:11:88:3b:
04:9a:5a:a8:92:f4:fc:d5:7f:ef:8c:cf:f9:3e:02:
40:6d:8b:04:53:5d:eb:a1:4a:c9:5c:a7:09:48:56:
52:4e:28:a1:92:03:40:0b:b1:70:bc:70:55:6f:7e:
45:e7:32:47:6f:72:f0:e9:99:fd:fc:ea:40:c5:a9:
d0:91:45:2c:d2:e1:24:14:f8:79:39:2e:01:75:91:
69:5d:16:5e:68:10:1b:1e:1a:eb:8f:11:f5:95:67:
30:55:ae:98:ed:33:a0:78:51:a8:63:62:88:fc:e6:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:9A:79:62:1E:19:B0:9F:E0:20:9F:CD:CE:F7:2E:D4:CE:CB:A0
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:9f:c9:b0:48:02:13:63:bf:e8:b4:b2:9e:dc:60:4b:dd:
9b:a4:20:04:9f:ab:86:1c:a0:80:2e:9c:ac:49:66:09:76:72:
54:67:b0:57:69:c4:8e:e2:e7:4f:2e:30:d8:96:a1:da:77:3d:
33:a5:01:85:64:15:44:d6:a2:a7:7b:2b:c5:b0:f8:2f:62:72:
ae:c2:43:01:40:04:4f:15:f3:d1:3b:85:9f:e3:05:6a:d3:f1:
df:0c:59:90:00:05:dc:0c:3e:e2:de:1d:8d:2a:d8:ce:6b:4c:
12:84:50:2b:8c:c5:17:c6:d8:c1:92:06:13:e2:a7:57:78:44:
8f:00:ce:4c:54:d3:5d:62:ce:de:fa:3f:c4:01:12:b4:68:50:
7b:4e:fc:e7:42:3c:83:f1:a1:65:4b:18:28:f9:9e:ab:04:73:
8f:94:28:ac:90:15:8c:08:85:c5:93:05:a9:05:0f:7a:fe:26:
85:81:72:2d:20:25:ea:4a:b0:56:ee:0f:54:01:94:99:ff:ef:
fd:36:46:ed:ea:c6:74:87:d0:df:53:df:d5:61:71:18:0d:1b:
d0:fc:01:d9:55:14:12:f3:af:27:30:a6:71:a8:dc:ac:86:c2:
55:bf:aa:b8:5e:1a:c5:6d:72:b6:4d:2f:d7:7c:cf:a3:98:28:
ec:0a:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:37 2026 by rpki-client