Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json)
Hash identifier: RTJpRiOrwPSCLhfkOIIVawyYTN1zgMg8FHfBz1FrzEM=
Subject key identifier: A5:DF:AF:5C:3F:86:01:B2:69:8B:89:EA:C1:44:ED:92:02:70:58:46
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 019CAB6B50F8CA79C97522E2B0FDEB0C0E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: FPzT85XBUQ48/fYaSxEjTSoP5rlFQF/2xuPI6j8QBgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:50:f8:ca:79:c9:75:22:e2:b0:fd:eb:0c:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=a5dfaf5c3f8601b2698b89eac144ed9202705846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:9f:05:ee:ec:9e:45:b2:b3:59:98:bb:8b:
f3:bf:39:44:c6:19:21:9b:fc:80:d9:4e:df:56:2c:
bd:a4:43:aa:8a:87:78:8b:ae:6e:32:ea:26:48:1f:
7a:22:a6:04:fa:aa:f5:4d:fd:25:bd:54:ea:b2:f9:
fb:a5:b1:eb:43:8c:2e:b0:32:64:b0:12:b3:93:ed:
21:23:6a:a2:c6:99:38:3f:9b:b0:52:53:bd:0e:8d:
7a:a1:be:49:45:a6:6b:62:99:a1:b5:b9:2a:d9:3c:
6e:90:44:8f:4f:08:6c:67:cc:9f:c6:6a:eb:ed:e0:
fb:96:b0:7b:6c:84:88:56:68:18:65:16:03:14:1c:
49:7d:c9:7e:8d:b8:c9:08:76:40:fd:59:79:b4:a4:
43:22:d6:3e:bd:6e:93:16:e5:a6:c8:21:10:ed:54:
cd:32:7f:45:a6:65:8f:06:c0:98:56:08:ec:01:ff:
dd:19:52:4a:94:a4:10:cd:fb:a5:95:96:38:ee:29:
cd:be:b7:ae:f3:0e:39:b5:b5:38:0b:f6:2b:21:67:
5d:bb:7c:89:c1:ca:aa:ff:1d:f5:a4:24:5f:79:ef:
c0:25:af:54:30:67:3a:d6:e9:f8:ac:77:c3:81:39:
20:a7:e7:36:04:db:76:56:de:be:c4:2b:b6:d3:c4:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DF:AF:5C:3F:86:01:B2:69:8B:89:EA:C1:44:ED:92:02:70:58:46
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f0:94:40:03:eb:4b:f5:46:23:86:f4:7b:9e:7c:a9:5d:51:
96:d7:b6:c6:7b:94:10:03:ca:6c:3e:00:c8:20:b4:fd:74:8c:
ca:51:ed:67:15:ea:be:cd:ea:f6:98:7d:f2:1c:dc:66:7d:48:
b4:2d:9b:13:5c:02:40:b1:02:1e:f6:ef:ce:37:6d:ee:bd:4c:
e1:92:f0:d2:e7:43:30:a3:d5:d7:e7:7f:8c:d5:99:be:59:10:
39:f5:a3:67:f8:de:b2:23:a3:92:57:45:39:de:4d:43:a1:bd:
eb:64:4c:f3:34:e9:59:64:fb:bb:b6:46:b9:d4:a9:de:74:1d:
4d:85:70:d9:7f:42:0f:21:d0:a6:6a:9d:5a:cb:25:f2:f2:03:
4c:df:64:07:b8:18:60:59:25:af:03:50:32:df:9d:36:ae:e7:
49:f4:2b:5f:fe:29:ac:7a:82:46:59:a6:de:16:a1:ac:c6:79:
ea:69:f0:14:b6:0c:64:66:00:c9:ce:59:80:b9:93:5c:f3:e3:
7a:06:6c:40:95:6c:7d:be:d8:da:10:44:36:93:80:a3:04:d6:
73:ae:03:7e:59:77:43:45:22:fc:14:35:4a:c8:0a:5a:02:02:
9e:a5:af:83:c9:9a:7d:17:7a:41:e2:1f:75:17:08:04:3f:66:
b4:29:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:20 2026 by rpki-client