Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: D0QG8Vjekjrhmcyms+Is0O28poESIwZ65VbHdWhU+LE=
Subject key identifier: 15:93:30:3B:38:CD:35:AC:75:FD:15:6D:E8:55:4F:B6:52:6E:D6:A6
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 019D985085C278651C2798CDF5654D566846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 13FC
Signing time: Thu 16 Apr 2026 22:01:47 +0000
Manifest this update: Thu 16 Apr 2026 22:01:47 +0000
Manifest next update: Fri 17 Apr 2026 22:01:47 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: RCPBGu6eVEW/tf6oBiuudnL/RUBlAuXVst2hZgtEMUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:85:c2:78:65:1c:27:98:cd:f5:65:4d:56:68:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Apr 16 22:01:47 2026 GMT
Not After : Apr 17 22:01:47 2026 GMT
Subject: CN=1593303b38cd35ac75fd156de8554fb6526ed6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:d0:1d:7d:59:a5:3e:df:0c:91:07:a3:1f:
43:8b:fe:90:d2:84:e8:51:d5:b1:ab:16:c6:15:b0:
49:7c:8e:5e:01:4d:da:fc:9b:cb:0b:27:08:74:3c:
e5:83:b3:ea:bb:52:fa:7a:d7:2c:ad:d5:ef:48:a5:
ca:f0:3c:c9:88:e6:2d:89:69:ec:23:d0:5f:f1:cd:
3b:1b:72:61:7f:77:16:37:03:a7:7e:80:c4:4e:84:
84:d3:f9:0b:e8:cc:98:78:56:df:ce:d3:fd:56:c1:
05:71:99:02:28:24:b6:ef:6f:7a:c6:f7:eb:50:39:
0b:16:ce:c8:43:99:81:7c:3d:8c:40:22:7a:1b:52:
69:1c:28:72:a4:c0:34:4b:de:0e:32:e3:6a:74:d3:
68:9c:fd:fa:31:ca:5e:a2:88:51:08:03:83:f2:a1:
5a:bb:07:c9:50:48:e7:3d:42:4e:0d:ef:14:56:20:
ab:d1:0d:68:d3:60:ef:2f:25:d3:76:5f:47:86:af:
01:66:20:c0:49:8c:42:97:b0:62:71:3c:3d:66:22:
bd:48:2c:dd:d8:b5:cb:c3:85:9a:65:a0:69:15:47:
1a:a4:b1:9b:58:36:ee:35:49:f2:90:02:84:8b:95:
61:0b:e6:90:bd:ca:64:a4:40:24:da:ec:e8:c4:34:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:30:3B:38:CD:35:AC:75:FD:15:6D:E8:55:4F:B6:52:6E:D6:A6
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f7:99:de:db:54:51:61:c5:7a:0e:f0:47:fd:a9:06:b6:0d:
53:f7:e7:39:05:ae:bd:e8:3f:fe:6f:1c:8d:5e:ad:3b:c1:1b:
8e:f3:2f:a7:2e:e8:0e:76:8f:1d:5a:95:c2:77:25:3b:73:14:
af:5d:c4:93:6e:d0:9f:8e:56:fa:cc:d3:6f:86:0d:f8:9c:f7:
fe:4b:21:7f:40:4e:30:d8:68:01:6e:fc:a5:e4:d6:42:33:51:
a9:6d:a2:d0:e7:6d:1e:de:2c:d8:74:43:17:9e:8f:99:42:14:
1e:45:35:3a:c4:98:5a:a4:6b:09:96:5c:e1:f1:e7:dc:b6:3d:
af:97:d0:21:80:ad:48:9d:96:93:a4:a1:0a:a6:ca:dc:d1:65:
ef:3a:d2:27:49:65:03:99:bd:3e:e2:45:51:a1:ad:eb:cc:8f:
de:e8:2f:1e:b2:4a:2b:c2:b2:9e:3e:91:7d:31:29:26:f2:71:
12:19:6f:a7:1f:24:f1:57:32:48:73:c6:81:3e:d6:7b:63:fd:
00:bc:51:ea:91:39:a6:ab:cb:5a:24:e3:be:b4:b9:e7:8e:4a:
99:0b:f5:b1:5d:81:3b:12:2a:02:a8:d2:93:ab:61:31:03:2f:
2d:af:f5:db:dd:dd:0a:64:59:47:ce:4e:6b:96:7d:c4:10:5a:
c3:a0:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:35 2026 by rpki-client