Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
File: mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json)
Hash identifier: 4emfDq+hl8TOml6xajBdziETqIUVezKkcCc+VAHa0gA=
Subject key identifier: E7:1B:E6:31:2F:C5:57:5B:48:E9:04:44:96:4E:7F:EB:16:8F:CC:DA
Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
Certificate issuer: /CN=9a351493af887e544dcc01a113b77528bc987bce
Certificate serial: 019D9B5155E1BB6A4D3E85D505DA321E9FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
Manifest number: 123E
Signing time: Fri 17 Apr 2026 12:01:31 +0000
Manifest this update: Fri 17 Apr 2026 12:01:31 +0000
Manifest next update: Sat 18 Apr 2026 12:01:31 +0000
Files and hashes: 1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: MDZDS3kreISdWYwFl/uKKbNzrThM2HsZ0Tzs+gMLpcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:55:e1:bb:6a:4d:3e:85:d5:05:da:32:1e:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce
Validity
Not Before: Apr 17 12:01:31 2026 GMT
Not After : Apr 18 12:01:31 2026 GMT
Subject: CN=e71be6312fc5575b48e90444964e7feb168fccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:48:83:e1:6d:b4:04:d7:2a:7e:d0:2c:c2:
0c:8a:eb:46:48:4e:8f:f3:44:6b:0d:59:07:ad:f9:
36:a4:a3:4f:1c:a7:27:5f:a1:f5:80:21:5a:9a:4b:
c1:e8:7c:07:22:9c:43:bf:2b:49:52:9b:14:61:ff:
62:08:a5:f3:e2:1c:ce:27:b5:73:32:f9:79:4a:ee:
5b:b4:8e:3c:1f:d5:d1:3f:e6:d6:9b:98:2f:5e:ae:
13:36:6d:ca:40:77:2a:c0:09:95:57:f0:ee:93:9e:
9c:65:78:98:57:9e:d1:8b:82:06:a1:60:f8:a1:59:
f2:28:3c:f2:ce:d2:85:6e:77:e4:d8:b7:bc:c0:d8:
a7:a2:76:2f:5a:72:09:bf:42:54:ac:37:0c:ad:f0:
93:59:4d:6a:d0:f7:9d:ab:7e:94:bc:5f:4b:9c:7d:
5e:77:31:30:d0:aa:35:89:fc:8b:41:d6:26:12:8d:
21:f4:6a:12:b3:09:43:8b:6c:98:fc:d5:10:c5:e4:
43:76:c3:24:81:45:81:d1:eb:b8:fa:de:ec:97:5f:
86:2c:1f:02:e5:a9:23:d7:66:22:bb:d6:63:e4:10:
3b:8a:bf:e5:cb:20:b9:8c:69:41:f4:77:5f:48:ca:
f9:4d:5b:e8:7a:56:91:bf:21:42:12:44:21:00:ad:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1B:E6:31:2F:C5:57:5B:48:E9:04:44:96:4E:7F:EB:16:8F:CC:DA
X509v3 Authority Key Identifier:
keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:17:c3:e7:4c:c1:75:ca:74:41:44:ec:b5:cb:74:80:92:c1:
76:49:c1:56:7e:e7:e0:ce:5c:88:f6:09:a5:c8:34:ca:37:96:
ef:c0:14:53:f7:f7:46:cb:41:03:56:96:c1:82:20:e9:66:d4:
59:a5:81:11:e7:8c:58:16:22:29:f9:bb:41:1a:e8:6a:a7:b1:
b9:9e:ae:2e:ac:20:53:5e:29:75:01:0e:f7:b1:1e:55:06:0f:
6a:df:8f:cb:f8:07:02:7f:92:33:7a:42:46:4e:8e:27:55:67:
11:90:20:da:ca:51:33:d9:12:10:43:1d:a1:ba:4d:5f:08:42:
e5:14:86:4d:fb:7a:64:a6:8a:fa:57:8c:25:e7:c3:7f:c5:25:
ae:e8:67:0c:f2:c7:84:ae:05:4c:8f:a2:f0:fd:3a:bf:3e:15:
56:24:e2:00:a2:b7:da:7d:00:4c:06:31:02:f3:15:57:6b:0f:
c4:e9:65:8c:ce:f1:df:64:b3:2f:b0:f7:37:1a:0d:bc:52:f8:
a7:03:94:4d:bf:14:8a:bf:46:18:b3:62:1c:09:c7:5a:4b:7d:
4b:d0:14:a0:42:23:75:ca:b9:41:c7:f1:49:a6:18:41:e5:7d:
d1:87:f8:36:5b:18:6c:90:9e:ad:05:e5:22:08:5b:fc:30:bb:
76:56:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:29 2026 by rpki-client