Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: xew4HB4UXs9Om1+5g1Nh1KGEMe5yzMDRYVrOSFJg6a0=
Subject key identifier: 23:38:B6:55:61:8A:E1:83:B2:ED:B9:D2:AE:EC:D1:55:91:19:CF:65
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019CAAFD04C13B1558BABB4EFB7FA42FD537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: Q7VBLYQQHeBoRUmAxxPLMeIEEXyq3iHspY0tPcXMVRk=)
2: Y4Ztj_LvVduFmJe-S8DAGQ8C-Xw.roa (hash: PnJYtORtq7q9TMkof+95kidGWv4p60mPQyI6Q4NduWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:04:c1:3b:15:58:ba:bb:4e:fb:7f:a4:2f:d5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=2338b655618ae183b2edb9d2aeecd1559119cf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:b7:e4:fa:c9:88:84:a1:8a:0b:c3:2d:d3:
e2:ae:8d:71:a9:59:83:91:d8:61:17:00:f1:f8:89:
f4:20:40:50:13:ea:fb:f5:0b:62:ee:2b:6d:03:2c:
7f:80:c1:b6:19:8a:91:6b:3d:de:ce:b1:eb:78:04:
47:b6:11:8a:e9:de:36:b2:48:d1:42:9d:3b:ce:34:
f3:77:55:fc:9b:30:5e:9b:a8:0c:75:55:bb:1e:88:
65:65:57:f8:f4:ac:76:24:7f:c8:2c:d9:88:45:72:
87:69:80:1e:f2:7b:42:86:04:b2:30:1e:0e:1e:a6:
98:85:60:fa:b1:e4:95:90:2c:ee:54:ab:6a:91:7a:
dd:52:cb:85:ad:90:2c:6b:4b:33:85:26:c3:96:e9:
75:50:69:c6:50:3b:0e:65:49:fd:9b:40:0b:61:25:
95:44:52:ef:29:24:39:f1:a2:7b:93:fb:79:ab:97:
4a:40:d4:60:90:cc:d1:43:a5:c6:24:d6:b4:f5:cb:
34:64:d0:28:bc:6d:8e:05:ef:ba:7d:e8:21:bd:5d:
91:85:cc:d4:d3:f7:c9:48:1c:1b:bf:6d:03:32:a1:
c5:f4:21:44:e1:32:70:09:b6:87:45:12:a0:6e:5a:
46:2c:a6:48:d7:55:1e:d9:15:d8:1d:c5:c0:af:8e:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:38:B6:55:61:8A:E1:83:B2:ED:B9:D2:AE:EC:D1:55:91:19:CF:65
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:85:20:6c:d7:19:a1:ee:0b:4c:95:f8:00:8d:85:82:14:e3:
51:32:58:c2:65:c1:e4:14:f5:29:fc:3c:62:f4:2f:d3:60:3d:
ea:15:01:a7:12:70:fe:39:c9:50:ba:e5:f3:92:8c:ab:82:1f:
ee:7e:6d:95:37:3b:75:66:4a:f8:da:5d:0f:2e:db:6b:1c:6d:
2e:0f:9e:34:23:2f:ae:d7:fa:ea:8a:d4:18:fe:4b:e7:33:5d:
f2:68:e6:e1:e2:b2:e0:24:d6:8f:6b:06:53:7d:15:7d:e1:dd:
4b:e7:f7:26:6a:4d:58:03:2b:f9:c5:91:10:e2:4e:4a:3c:49:
b7:28:90:a7:80:0b:5c:6b:ff:bc:cd:38:7a:df:61:6c:6f:f9:
77:7d:06:b5:cf:a7:f4:e8:ac:d1:98:7b:c5:4e:9c:68:8b:00:
09:82:0e:e4:b1:f2:d8:9d:0e:43:00:4e:94:43:0c:bc:55:34:
26:40:eb:44:81:dd:b4:6d:6c:ef:93:fc:5f:1f:08:4c:c6:fe:
4e:77:c5:cb:e1:ad:e3:af:f4:97:87:ca:3f:f9:f4:28:35:cd:
25:f6:ed:fd:96:e5:82:a2:49:60:c6:c0:9f:54:c0:3b:f3:9a:
1d:70:2b:98:c4:37:40:41:bf:82:47:c4:95:74:a4:d8:86:58:
78:e7:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:59 2026 by rpki-client