Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: +wzZxlV1pb7Ft29/+uuPmt4KK59I+hix8glRH3FkPto=
Subject key identifier: 0A:70:1E:A2:DE:1C:B9:44:8C:41:7D:38:55:C1:33:4B:4D:4B:94:D1
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 019CAAC6AA2F1B324F3569824E3FADC20E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0C3C
Signing time: Sun 01 Mar 2026 19:01:12 +0000
Manifest this update: Sun 01 Mar 2026 19:01:12 +0000
Manifest next update: Mon 02 Mar 2026 19:01:12 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: xqYQRXQGcdifjw0V52zSqkw4g4oURibpc3v9RAxlhVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:aa:2f:1b:32:4f:35:69:82:4e:3f:ad:c2:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Mar 1 19:01:12 2026 GMT
Not After : Mar 2 19:01:12 2026 GMT
Subject: CN=0a701ea2de1cb9448c417d3855c1334b4d4b94d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:5b:ff:ec:c4:c4:43:66:75:f8:58:2e:1c:
c1:eb:35:eb:e5:86:7a:d5:fe:af:d0:6f:eb:2e:a4:
fb:27:a9:0e:1c:b9:c0:10:08:12:ff:f1:d7:81:c7:
81:04:5a:47:9f:04:1e:26:cb:58:e7:5d:dd:1f:6c:
40:52:61:28:d2:07:38:09:66:b8:70:01:3d:62:1d:
b9:a1:51:59:e1:38:00:67:1a:43:34:6d:5c:37:c2:
58:0a:11:85:cb:f6:00:fe:93:cb:30:2f:db:7e:62:
ba:f9:a7:ef:54:e5:c0:4c:68:f5:bb:60:db:f2:09:
b0:58:03:a4:81:b3:75:c9:83:f4:f1:64:e9:49:4f:
58:43:99:6b:2f:a8:15:5e:2b:b1:7a:fd:3b:e6:be:
fe:16:61:4f:e2:d1:96:7e:6a:a4:ae:93:3d:21:6f:
d3:07:46:7e:60:62:ce:92:84:31:7d:6e:93:dc:ae:
03:4e:35:f7:32:6f:69:e6:21:f5:b5:e6:e9:10:7e:
14:c0:8a:c7:db:b4:b0:b1:ca:7e:eb:03:93:86:4c:
ad:ad:60:6d:d7:d8:e9:3e:f2:c2:77:4d:97:c0:63:
7c:26:3e:9e:d4:6d:42:2e:db:11:cf:11:90:b7:a9:
1c:59:84:16:3c:b0:b2:27:66:ff:02:61:fb:b2:5b:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:1E:A2:DE:1C:B9:44:8C:41:7D:38:55:C1:33:4B:4D:4B:94:D1
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bc:65:1e:41:5b:07:79:b7:fa:21:90:0c:da:d7:be:16:90:
1e:c8:c0:81:eb:4b:cc:9c:ff:5a:ff:8b:a6:ab:40:1a:3e:d7:
20:72:55:6c:af:2d:5e:2a:28:db:a6:41:e7:d1:0f:27:fa:c2:
b0:b7:a0:a4:e5:77:bd:8b:c4:7f:6c:9b:75:cb:ff:4c:ce:c0:
75:4e:ff:49:fa:19:b7:d9:02:5e:7c:6e:3e:9b:9e:13:bd:c4:
fa:91:8b:4a:4b:ad:22:ab:f7:ec:e6:21:dd:f5:04:34:22:13:
b2:a6:3a:d0:b0:33:9e:8c:8d:f3:29:e3:81:a8:c9:ea:7a:49:
eb:59:da:0b:4a:54:f9:54:69:1c:ed:1f:7b:f9:ac:bd:14:df:
b1:ec:eb:74:66:45:b2:ad:60:fa:7f:76:e7:d7:20:d6:99:33:
6b:43:01:77:86:cb:bb:bf:d2:0c:29:82:09:19:93:ff:3a:d5:
53:e3:0f:bb:6e:17:b4:a9:f3:4b:67:f2:a6:a3:14:1d:77:da:
e2:b1:6f:82:22:c5:02:ee:7b:4b:6b:70:41:73:f2:97:a9:dd:
ae:fa:13:91:30:68:bd:0b:6c:35:ef:67:00:ea:fe:d6:40:ef:
c4:c8:34:4c:4d:e2:a9:08:9c:83:c7:74:b6:95:c9:74:4a:04:
e7:2b:5f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:25 2026 by rpki-client