Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: jGZgPLBm3T2x5AVkY8B8g55/xMTJ3me6PTEGUWpk4bU=
Subject key identifier: 84:E8:45:02:00:42:EE:AE:70:C8:9E:8F:39:DA:BB:58:3A:FD:1E:9C
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019D98F50917561A4456CDB66AF6A1AD12E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0ABC
Signing time: Fri 17 Apr 2026 01:01:28 +0000
Manifest this update: Fri 17 Apr 2026 01:01:28 +0000
Manifest next update: Sat 18 Apr 2026 01:01:28 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: L1vBc/Q37kJd07eHYr0g9xJQx1iCEIR2XHN5Fxx+VD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:09:17:56:1a:44:56:cd:b6:6a:f6:a1:ad:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Apr 17 01:01:28 2026 GMT
Not After : Apr 18 01:01:28 2026 GMT
Subject: CN=84e845020042eeae70c89e8f39dabb583afd1e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:71:fd:58:3e:b3:8f:4d:54:61:99:4e:90:
0c:85:5b:0d:5b:39:8c:a1:45:c5:1d:5e:a8:ec:36:
f5:56:60:26:97:ff:9b:f8:a8:c6:f9:0b:57:73:3e:
6a:61:43:25:99:86:4c:6e:3b:40:c0:65:92:af:4a:
99:c1:19:f1:e9:2b:9d:0c:2a:1e:3d:fb:b0:4a:45:
45:ad:04:d9:60:9f:0b:02:24:26:c8:9f:f5:df:46:
c3:6d:14:13:54:db:40:97:db:60:de:06:23:a1:db:
9b:53:53:93:9b:75:32:e3:17:25:ad:63:bc:9e:c2:
93:05:0e:d8:d3:55:a6:3f:17:32:6c:f6:e6:d5:81:
6e:5c:51:d0:5d:8b:2f:5d:ac:35:a1:e0:85:67:7d:
a8:ee:ff:33:5c:22:42:4c:e0:28:96:38:e1:4e:43:
d8:c8:d1:aa:b7:d6:f9:88:01:2f:1f:fb:c5:ab:fa:
e5:0a:e0:13:7f:27:c3:76:a9:11:67:62:2c:2d:66:
a7:49:d2:45:53:8f:88:9f:f8:4b:f9:62:a9:8d:7a:
62:f5:3d:77:d8:09:5a:9d:73:d3:76:b4:bf:d6:44:
3f:b9:51:e2:7b:2d:35:c5:d2:83:72:f4:ec:fa:34:
78:35:d9:10:46:a7:57:b9:b2:dd:a5:55:5d:b1:ca:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:45:02:00:42:EE:AE:70:C8:9E:8F:39:DA:BB:58:3A:FD:1E:9C
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b5:d6:86:e9:6e:42:f9:78:35:6e:9e:90:0c:39:03:0f:7d:
7c:a7:0d:1b:a5:66:ee:6f:6a:c8:6f:1f:ed:f9:9f:c3:42:52:
8c:d8:14:d9:7a:1f:42:59:7b:38:61:dd:1b:38:16:17:30:99:
f7:cd:55:41:c0:06:9e:0e:54:0d:18:30:52:bc:c0:00:52:54:
f8:d2:b7:f2:e0:90:f9:e0:ac:ad:62:33:a1:03:d0:f5:36:8f:
1a:01:a5:5f:96:82:c3:b9:62:6d:e2:d5:89:96:c0:70:0a:58:
bd:c2:d9:4d:b8:9e:b0:28:a0:c8:dc:23:f7:6f:9e:a0:0a:6b:
e5:f0:5e:13:a5:d3:3a:9e:7c:37:b3:52:7c:86:ad:d8:d3:88:
8f:ea:6a:bb:76:ea:65:7b:12:7f:0f:20:49:df:57:5f:e2:55:
92:c3:68:69:0b:d7:b6:89:be:b5:90:99:85:cf:3d:94:2c:9a:
1a:37:15:91:45:87:fd:fc:11:41:ee:86:e2:37:b3:8b:2a:f3:
4f:39:dc:79:cf:f9:23:50:d2:1b:fe:1b:19:55:24:4b:31:ea:
68:28:3f:e5:4b:c0:6c:f7:c5:e5:f7:a9:9b:8f:dd:10:de:bc:
dc:ca:30:15:d6:c4:92:c7:a6:aa:47:c5:a0:c9:84:e9:4d:7e:
55:c5:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:19 2026 by rpki-client