Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: TwjuI/wPgbpM1jic+OlgY14r3iVjaXV0TC1F/qJUID0=
Subject key identifier: 67:5C:9A:88:6A:14:2F:CE:DE:EF:B7:43:79:34:B0:D9:B5:A6:6E:17
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 019D98F4744942E61FD8457A9C5333E8282A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0CA7
Signing time: Fri 17 Apr 2026 01:00:50 +0000
Manifest this update: Fri 17 Apr 2026 01:00:50 +0000
Manifest next update: Sat 18 Apr 2026 01:00:50 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: hJHPY/AFmb4K5ivFKp6ZRkKp30O5rhgbCjif5rP6ass=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:74:49:42:e6:1f:d8:45:7a:9c:53:33:e8:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Apr 17 01:00:50 2026 GMT
Not After : Apr 18 01:00:50 2026 GMT
Subject: CN=675c9a886a142fcedeefb7437934b0d9b5a66e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:94:54:a9:8d:40:da:fd:e3:13:66:14:e4:
4b:a4:dc:ce:ef:86:fb:19:58:73:a3:b8:83:89:69:
6d:f2:8c:da:8f:b5:98:e7:84:ee:65:55:17:4c:db:
88:73:0a:8f:3a:53:3a:35:5c:76:f2:c4:8f:06:0f:
ac:97:2a:7f:0e:39:35:70:80:2c:85:3f:1c:f0:3b:
ad:e3:13:d9:aa:c8:96:59:cb:a8:0f:29:1e:1a:fa:
d3:96:42:30:c1:74:d7:62:f4:ae:0d:bd:21:1a:2f:
21:21:66:7d:cb:2f:76:7d:aa:a6:7e:50:a5:e4:77:
d7:c1:7e:d2:c9:3a:5d:24:d0:fc:a8:cd:28:70:da:
a5:29:21:9c:50:6e:eb:e0:c7:5f:3a:12:46:95:db:
0a:73:90:c2:b2:5f:f5:7f:f0:5e:b1:63:e8:7c:6e:
a0:fe:f0:58:3c:a0:cb:7c:2a:b8:65:44:af:5a:10:
2f:fc:ff:1f:5d:8a:49:7e:58:ba:9d:cf:39:30:06:
32:e5:af:36:1c:4c:94:64:2d:86:fd:ab:4f:83:79:
ee:a3:58:e3:f9:be:53:ba:f0:d4:e3:61:c5:56:a7:
a2:4d:40:96:2e:ac:78:a4:72:65:c4:a6:0e:4d:39:
e9:b6:73:a2:d2:ab:6b:d1:f6:f4:50:28:c7:25:a9:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:9A:88:6A:14:2F:CE:DE:EF:B7:43:79:34:B0:D9:B5:A6:6E:17
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:ce:ba:f9:bb:ca:2e:57:4a:45:eb:25:60:9e:7d:9b:6d:
a3:be:f4:47:09:c8:46:0d:24:45:88:b6:00:06:a5:fd:27:0a:
d6:c3:a2:be:5d:3e:03:4f:7a:15:3b:e4:37:49:d5:75:5f:5c:
40:e3:4d:6f:78:ce:f4:b5:f7:eb:30:43:75:85:b1:f9:fe:66:
2e:d3:c2:6b:26:8e:cd:f9:9c:3b:ef:4e:9b:8f:d1:a0:31:c8:
e5:93:ab:e4:8d:e0:3a:1c:36:06:e3:d5:7b:6a:31:3a:dc:3b:
d2:33:45:38:e2:ab:bd:0b:21:30:51:bd:5d:86:5b:48:54:86:
1e:1c:50:8b:c3:4c:02:03:f4:07:6f:66:da:18:9d:36:01:28:
73:2b:a8:ab:3f:06:cb:49:ab:2e:03:9e:76:69:6c:96:bf:05:
60:ba:72:a3:5b:ac:ef:1a:f5:ce:a8:2d:cc:16:fc:d4:a8:75:
ca:0b:8d:fe:13:78:c7:a1:e7:9c:03:e1:51:4d:4b:03:ac:2c:
7f:8e:e0:3d:8f:37:0f:ed:2f:cb:c7:93:e7:3d:45:f2:d2:19:
0b:3d:27:2b:6d:de:ce:0e:87:33:d5:77:af:7d:fe:65:c5:15:
e4:e9:2b:52:29:40:fe:5a:a2:65:e9:18:3c:74:f4:3c:58:d0:
9a:d8:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:39 2026 by rpki-client