Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: nPQVhb6Jd1xXVW9U9XQK81C2+bO22cgyqrvhsIRZ6kw=
Subject key identifier: C7:17:B6:9B:7A:6F:91:B5:81:F3:C5:94:41:AE:9E:80:53:12:FA:F7
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 019CAC0F9D97CA58AF3B6CF6AC5487E278FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 16F1
Signing time: Mon 02 Mar 2026 01:00:30 +0000
Manifest this update: Mon 02 Mar 2026 01:00:30 +0000
Manifest next update: Tue 03 Mar 2026 01:00:30 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: wWYJMYPq9kA71DLfQoowjB0vgTG8IkIEiHaInFcWrEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9d:97:ca:58:af:3b:6c:f6:ac:54:87:e2:78:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Mar 2 01:00:30 2026 GMT
Not After : Mar 3 01:00:30 2026 GMT
Subject: CN=c717b69b7a6f91b581f3c59441ae9e805312faf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:e0:40:d4:d4:b6:e0:fe:bd:8e:8c:cc:9c:
79:c5:16:46:65:b4:78:c6:81:f0:49:23:c8:0f:1d:
e9:7a:76:4a:37:b2:f7:eb:05:cf:27:b1:a9:6c:4b:
21:00:fe:d4:28:49:83:5a:0c:d1:92:fc:00:c4:8c:
3e:d8:98:2e:50:7c:19:e4:8c:bc:e6:1f:27:31:98:
f4:7a:5d:ac:a0:75:a2:e8:9e:81:78:df:31:92:02:
4c:66:3c:7a:a9:d0:00:d7:49:05:63:8d:6d:f5:78:
58:0c:8f:8d:63:a1:ad:22:c6:1b:3c:cd:a2:5d:0d:
3e:63:2f:57:99:05:63:43:70:24:ac:45:5c:6c:ca:
d1:f3:94:b9:65:6d:ac:0c:6b:cd:23:8e:1b:95:26:
1f:ff:17:f9:f2:e6:7a:a7:eb:d9:ae:46:04:ae:d8:
7e:99:70:52:4b:b2:12:96:b1:2d:06:93:d2:53:06:
74:a7:8b:72:70:5f:a9:bf:65:d8:d1:23:0d:ad:ef:
e5:40:3c:77:84:62:98:0c:7e:c9:9e:f3:92:9b:cf:
cd:69:f9:36:ad:0f:30:c9:15:9f:78:7c:29:3b:c0:
c4:3a:65:ec:9f:f2:3c:92:c0:df:a2:83:95:46:ee:
f5:0d:3a:83:6c:d1:e3:ed:19:64:60:1d:38:63:b2:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:B6:9B:7A:6F:91:B5:81:F3:C5:94:41:AE:9E:80:53:12:FA:F7
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5a:0b:ac:75:cf:76:6a:43:2f:26:bb:57:65:b4:0b:8b:9d:
29:71:ec:a9:ce:15:f9:a7:a8:2a:25:5d:9e:04:ca:64:e4:7c:
d9:40:9b:a7:8b:94:f8:f4:3e:e4:96:8d:3e:23:22:d3:54:3b:
8d:05:9c:bf:34:24:ab:8b:68:ee:e7:b2:56:8d:ce:6c:88:76:
1b:96:55:b5:6e:6c:9d:5e:d8:3c:67:74:66:63:c6:a9:09:d3:
ee:d8:19:9b:ee:cf:0e:7a:ad:87:21:95:16:1e:da:4c:fd:85:
5d:f1:f6:05:cb:af:7d:db:49:0c:ac:9c:42:6d:3a:a4:65:38:
04:8d:2d:ec:31:0a:ac:16:54:40:57:a1:cf:9e:eb:98:cd:96:
b9:ef:61:fc:a5:59:a7:76:6b:88:e5:b5:c7:6d:79:58:74:26:
00:40:e8:86:5b:b0:1a:63:db:56:38:98:5f:9f:df:a5:e8:23:
f2:4a:e1:10:8d:b3:96:54:07:6a:7e:3f:15:2f:a5:f5:07:cb:
75:f9:cb:7e:1a:b8:4f:60:9d:69:a2:6b:fa:ca:c6:4b:37:11:
ef:76:9b:bb:23:cd:f6:56:5a:c8:b1:7a:f3:7f:cf:32:00:47:
70:62:2c:6a:90:b5:19:43:f8:1f:3c:c2:4d:24:e6:bf:5a:95:
b3:15:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:23 2026 by rpki-client