Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: lHXKUpFH6GpteKR6cYNK7L+oACs2Xbjc7YPQtx88KMk=
Subject key identifier: 9D:29:E7:74:B9:F6:22:C5:29:17:AE:31:0D:83:09:B7:54:6C:CF:CD
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 019D9AABAF46DD82AA1A7060EEF6F6158AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 62
Signing time: Fri 17 Apr 2026 09:00:35 +0000
Manifest this update: Fri 17 Apr 2026 09:00:35 +0000
Manifest next update: Sat 18 Apr 2026 09:00:35 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: ACHSj4Pd1tlUdbWxCv5wVhlgzj91MWp3FKiIpFf6uM4=)
2: gledw4240Dyd4ySNd3EiBGN_CT4.asa (hash: M04U7guZmUOlclnnZ5JAo58CmLjMUZmoOonluYoN36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:af:46:dd:82:aa:1a:70:60:ee:f6:f6:15:8a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Apr 17 09:00:35 2026 GMT
Not After : Apr 18 09:00:35 2026 GMT
Subject: CN=9d29e774b9f622c52917ae310d8309b7546ccfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:f0:b1:11:db:13:37:53:0b:ea:79:2c:48:
87:be:cd:44:75:8a:f7:b9:6d:42:d5:db:d1:ad:7e:
13:04:16:34:95:b9:9e:28:a2:ae:34:cb:66:af:2d:
de:0b:f2:b1:4c:ff:f6:2f:d7:e8:66:34:46:2b:db:
4f:43:5c:64:5b:8b:1e:d7:c1:dc:10:18:71:6d:38:
12:49:89:1d:2c:99:fe:e4:18:21:a3:30:87:3c:99:
71:48:e8:92:94:28:51:3c:ea:55:91:b8:6b:e5:88:
b3:bc:8d:d5:f1:95:34:b5:30:cd:ef:eb:96:46:77:
0c:e8:d7:90:c3:c9:63:1d:41:46:3f:ae:11:e2:a6:
20:41:b6:db:bf:fe:ae:c5:77:f1:13:2b:8f:14:ac:
d0:b6:ab:fd:66:cb:a2:56:5d:e7:4f:36:f7:e4:62:
1a:b1:10:7a:d5:13:8d:d5:db:0b:81:57:b2:c9:5e:
f6:83:b1:bd:36:4e:b4:82:e9:1e:89:ea:b9:51:b1:
30:88:d1:d2:f3:7e:f2:e0:7b:8f:69:2d:b1:88:17:
18:1b:0c:78:3d:e0:a5:37:fe:cd:59:c2:68:b5:41:
f5:fa:27:3c:49:ae:76:f1:63:19:da:1a:9e:1d:e2:
ee:f9:9a:bc:99:e1:3e:c7:47:d9:1a:19:a4:42:df:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:29:E7:74:B9:F6:22:C5:29:17:AE:31:0D:83:09:B7:54:6C:CF:CD
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:0a:b0:50:14:5b:48:d3:fc:ee:de:8c:cd:0b:31:b8:52:
db:fb:dd:f9:87:2c:11:0e:bd:e2:8f:22:1a:05:c9:3d:a6:4a:
b1:ea:42:8f:7b:25:c9:1f:4d:a3:9a:d9:55:09:e7:6a:1f:cd:
09:ec:5b:17:9a:63:ed:46:10:e2:1f:dc:62:05:53:82:90:d0:
ce:a8:16:39:77:89:b3:46:e9:d6:7b:f6:77:3a:8b:cc:e0:b3:
19:3e:c6:ad:82:de:82:f0:f6:cd:bc:3f:fb:2c:7b:a6:da:b9:
48:2b:eb:d2:81:cf:ac:81:ae:f8:57:e3:cb:c0:18:d9:db:7a:
77:7a:59:a3:1e:d5:98:ea:8b:3e:cf:ca:82:6c:ba:7c:d4:c2:
61:f4:b4:dc:78:5e:90:fc:82:3a:ab:83:cc:16:d4:19:50:bb:
83:27:6d:86:72:90:29:27:ab:38:c7:be:b1:26:97:70:2c:a5:
48:94:93:a7:21:96:88:d9:42:3b:9b:f1:9c:ea:bd:c8:48:15:
e3:55:2e:ba:b1:45:9b:03:9e:1d:c8:e3:b0:b4:fa:d9:1f:ff:
35:6e:77:00:4d:79:1a:64:52:49:d5:ec:7e:07:9d:d2:fd:36:
fd:29:13:e1:87:20:90:65:1c:08:0b:e4:07:ac:b9:43:a9:67:
ce:73:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:41 2026 by rpki-client