Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: lX8249AKyYUqKyuRT/K8qI5FOecNFwlTJnkp7tFUUxU=
Subject key identifier: C5:92:C7:74:2F:C1:34:10:18:E1:D5:8A:3C:3D:E6:07:4D:22:E3:37
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 019CAAC65EF302175176A55238DFDFBACECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 1381
Signing time: Sun 01 Mar 2026 19:00:52 +0000
Manifest this update: Sun 01 Mar 2026 19:00:52 +0000
Manifest next update: Mon 02 Mar 2026 19:00:52 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: HzXWrIhIOwAEqwLF0qQNx8WnCb6MoEgKRwVRNTPP+a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5e:f3:02:17:51:76:a5:52:38:df:df:ba:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Mar 1 19:00:52 2026 GMT
Not After : Mar 2 19:00:52 2026 GMT
Subject: CN=c592c7742fc1341018e1d58a3c3de6074d22e337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:62:83:9c:73:bf:41:48:5b:77:c9:fc:49:
e0:f3:6d:8c:a9:0e:c1:85:22:b4:c5:ac:2e:61:ab:
77:82:84:d2:9a:70:e1:bb:08:fc:2e:5d:97:3d:10:
2b:0c:ef:ba:ce:66:6b:aa:74:a1:42:35:79:62:be:
26:be:6a:a5:42:4d:88:44:43:81:58:66:f1:1b:b7:
01:93:ae:ea:72:b9:da:be:86:d8:55:6a:1f:d7:a7:
b4:fa:98:02:9d:f4:28:62:b3:64:00:6e:6a:80:cb:
4f:b1:de:8b:5b:65:39:60:1f:d2:eb:3b:10:20:29:
41:57:21:2c:07:7f:4e:92:06:bc:15:6f:00:c5:ad:
64:93:a3:d3:94:8a:70:e1:fb:2e:e0:fb:39:57:d0:
c3:bc:ad:b5:1b:c4:06:70:a2:8f:85:8e:0c:d5:13:
d8:b1:1d:a5:f9:a3:16:b3:b0:07:aa:93:0c:bd:4c:
46:d2:80:47:c2:2e:3f:c5:35:ee:83:d2:5f:02:fe:
fc:25:19:64:ec:23:b0:34:65:73:b9:fc:c6:9f:64:
af:80:1b:27:c0:72:4e:fd:3c:0c:c3:1d:f7:81:ef:
de:92:06:c2:9b:19:24:c1:19:64:c5:c9:57:4a:08:
eb:33:78:df:36:8f:d7:7c:c4:0d:77:c8:1d:dc:34:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:C7:74:2F:C1:34:10:18:E1:D5:8A:3C:3D:E6:07:4D:22:E3:37
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:23:85:8e:f3:12:06:6d:18:6c:d2:32:2b:a0:d2:ae:81:a7:
ef:3d:5f:43:f8:22:1e:1a:98:21:4f:ee:f8:e8:2f:9c:15:e1:
c2:43:54:c3:c0:d2:0a:bc:2f:4d:1e:45:a0:88:10:fd:6b:eb:
3f:67:3b:83:83:f7:39:d8:3c:b9:9d:fd:71:30:92:0a:64:ba:
8c:fc:3e:e9:f2:66:73:a8:28:a7:d7:9a:9f:b5:88:0d:7b:4f:
75:83:c4:76:6d:85:ee:73:2e:08:64:ca:ca:30:f4:22:cd:6b:
93:82:59:c7:f3:51:6c:7f:6d:54:44:3c:59:d5:e6:1b:fa:3a:
7b:ed:e0:95:a8:97:c9:9b:cd:a8:6e:ae:e5:e9:b2:12:44:d2:
d3:81:2b:e0:48:fa:53:84:9d:dc:04:d6:df:f8:34:9c:de:7e:
67:8a:98:a0:0b:b0:e0:d5:38:7b:b2:e7:f0:54:ba:91:e7:a2:
66:f8:21:d3:c2:c4:05:05:76:36:54:8e:0f:eb:99:59:70:02:
5d:0d:72:99:20:b0:2f:e6:86:ad:68:08:b1:36:fa:e6:4f:46:
4b:cf:35:94:7f:59:5c:02:1d:ca:11:83:0c:7e:55:5d:07:54:
89:37:fd:6d:78:c1:c7:32:e3:3c:41:31:f2:7c:a7:73:e1:93:
0b:d8:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:53 2026 by rpki-client