Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: vwvSeF/HtUvZWvt2fCCuss+jvvdkh6Gu/izsPPBX8Hc=
Subject key identifier: B9:30:40:EC:B8:65:67:49:1A:C1:AE:E3:81:61:BE:EB:24:BA:AF:F2
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019D9AE3AB337CCD1D2FCEBC2BF100747338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0ABD
Signing time: Fri 17 Apr 2026 10:01:44 +0000
Manifest this update: Fri 17 Apr 2026 10:01:44 +0000
Manifest next update: Sat 18 Apr 2026 10:01:44 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: u431+eUhEXquHyUAhxMpZdpi3yGJD+xacA/T9/53gIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:ab:33:7c:cd:1d:2f:ce:bc:2b:f1:00:74:73:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Apr 17 10:01:44 2026 GMT
Not After : Apr 18 10:01:44 2026 GMT
Subject: CN=b93040ecb86567491ac1aee38161beeb24baaff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:d7:ab:fe:c2:3a:72:12:c5:bc:fd:69:3d:
0b:e0:7f:a3:df:76:7f:27:30:bf:c4:4e:b8:f4:5e:
02:98:ec:58:06:8d:e9:e2:80:47:f2:5c:dd:41:91:
5d:12:65:a3:7d:8f:61:d1:e3:5e:20:0d:91:f5:c1:
d0:18:5c:da:c8:a0:df:22:cd:ce:7d:f7:91:60:8d:
e0:67:04:f4:17:be:78:ed:f4:36:fc:7a:23:74:ed:
cf:c7:4e:27:d8:ec:43:fb:44:c3:61:f0:b6:d1:db:
bb:d2:a4:cb:af:8d:92:33:de:7e:1c:d6:27:4f:36:
1b:24:88:73:ba:c8:dc:76:7a:24:d4:4c:f4:b5:1b:
3b:2e:23:ee:9d:53:a8:df:13:b0:20:69:bc:02:77:
57:26:f2:18:24:3a:41:15:e0:be:e9:5a:5e:5d:ce:
ec:8a:ea:62:0d:3f:68:2c:94:43:d2:1a:21:63:a3:
b4:55:04:5a:73:b7:87:f8:77:60:33:9e:11:1a:f3:
a7:5f:b0:91:c7:92:80:05:02:33:fc:90:1a:fa:08:
0d:08:8b:d3:3c:bd:42:a3:f4:83:6e:e4:f8:bf:02:
f6:2d:84:56:f6:6e:bd:9f:a0:2b:40:bd:e2:bd:b8:
a0:09:13:15:51:82:c4:c3:f9:ff:ca:00:de:17:97:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:30:40:EC:B8:65:67:49:1A:C1:AE:E3:81:61:BE:EB:24:BA:AF:F2
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:84:0f:b3:78:e0:24:99:c0:92:14:6b:c3:51:73:82:90:
c2:31:1c:62:87:5e:39:69:87:67:c1:17:5e:15:6c:27:6a:2e:
5a:ce:40:f1:03:bd:05:de:79:89:d7:87:a7:83:ae:83:20:b1:
fe:c3:40:78:a3:cc:f9:5f:89:47:7e:45:52:9c:01:25:f5:88:
b2:e4:c1:a9:7d:da:49:57:72:6b:ef:68:3f:ed:89:9b:6d:c3:
e9:a6:5b:88:7f:6c:43:84:d9:51:a7:3f:55:fd:d3:9a:de:90:
95:0b:51:ad:4b:e2:63:29:05:ea:6e:1f:2d:43:31:f5:00:8d:
fe:ef:96:1a:f6:b1:c7:cc:eb:6d:a3:a9:df:a5:57:a2:b6:f1:
90:9c:a4:e4:75:f8:2d:03:39:6d:b4:85:d3:af:f1:ab:49:8a:
6f:a7:f4:30:25:3b:ad:a7:26:a4:65:1f:c9:f0:fa:32:aa:c9:
81:99:f2:d1:9b:ad:05:4e:dd:ad:a0:7a:45:71:f7:ee:56:99:
b3:2c:8e:98:20:54:6d:27:e4:28:d0:ef:a6:c2:bc:f2:00:4e:
1d:ca:29:9f:01:63:82:2d:f8:38:dc:68:98:08:62:f0:3e:9a:
ee:20:c8:eb:3c:d7:9c:ea:ac:a0:54:6f:c9:75:94:8e:ed:0f:
c6:43:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:05 2026 by rpki-client