Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: pSa2vyPJWWi3nV/q4/YV28svG4WMF6UoDEt2v5FMtWo=
Subject key identifier: 43:E2:15:21:0C:2A:DF:73:7C:E3:4C:10:57:A9:70:E0:30:EB:4F:06
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 019CAB6BC2805408D269AAA721E12A6D3B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0C2C
Signing time: Sun 01 Mar 2026 22:01:31 +0000
Manifest this update: Sun 01 Mar 2026 22:01:31 +0000
Manifest next update: Mon 02 Mar 2026 22:01:31 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: TSaV8vurPyROeZnI9hkrHZTC/Jsn/Yw/vsQ4MuXQ8Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c2:80:54:08:d2:69:aa:a7:21:e1:2a:6d:3b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Mar 1 22:01:31 2026 GMT
Not After : Mar 2 22:01:31 2026 GMT
Subject: CN=43e215210c2adf737ce34c1057a970e030eb4f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:10:3b:13:f9:0c:42:ed:f2:14:7c:a0:d9:
52:27:9c:da:8a:ae:c3:fa:9c:7a:e7:1e:01:6d:38:
30:fe:19:32:bd:de:e2:78:39:f1:12:2a:d0:50:6b:
0e:26:a5:21:29:36:f7:c8:a4:13:7e:42:9f:3f:cc:
5f:95:80:7c:d3:fe:ec:e5:5e:d5:7f:bf:b1:4f:cd:
16:4e:7a:65:19:80:3c:86:76:3c:92:21:90:a2:b8:
a2:3f:ed:00:61:8e:c5:e3:8c:55:04:9a:c9:ce:33:
a6:08:e7:8f:8c:75:9f:a6:52:13:2b:22:56:5b:18:
12:66:03:1b:bf:cc:da:46:5b:fb:2b:b8:92:f3:c4:
da:67:62:be:ec:6d:db:68:13:ba:56:be:e7:4d:d9:
c5:9c:42:85:9d:a0:5b:44:31:d0:b1:16:3c:16:dc:
4f:b6:3c:23:c4:3b:83:cb:8d:5a:1c:2e:aa:02:40:
6b:c5:ab:b6:5c:8a:1e:63:29:b7:ea:0f:63:4a:74:
ba:0e:9c:12:8d:ab:6e:73:62:d1:3d:b5:ee:54:a7:
8a:28:d8:ce:c6:ae:2e:4d:52:4b:d6:a2:72:94:f9:
1d:d8:de:0c:17:52:15:27:ae:91:6f:fa:31:52:84:
64:c5:c2:78:4a:0a:f9:a0:99:2a:72:cf:eb:63:3f:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:15:21:0C:2A:DF:73:7C:E3:4C:10:57:A9:70:E0:30:EB:4F:06
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:66:92:23:8a:31:b4:4c:f5:62:8b:0a:4a:66:fd:1c:d5:
59:e0:95:77:93:f4:08:78:71:09:88:0a:90:bf:d4:a6:95:bb:
af:00:54:36:4b:87:1b:14:46:ca:15:79:3f:42:c3:d6:5c:9b:
43:8e:88:bf:c3:a8:7a:0e:16:92:d4:7b:18:6e:a3:ad:50:97:
83:7f:92:3d:2e:8d:c6:42:b4:72:41:41:4f:67:06:f7:e6:27:
f3:cb:1c:2d:f8:7c:bf:f7:36:e6:92:b3:e0:48:5a:19:83:de:
2a:3f:fd:fd:56:34:28:3c:f7:72:2f:23:27:28:4d:90:6e:64:
1c:49:d8:d9:d5:ce:30:2e:f9:54:f9:f5:7d:8f:7b:5a:1d:7d:
dd:e2:a2:72:de:64:cc:a1:0e:c6:a1:c3:2e:4a:69:fb:63:15:
cc:d7:54:b1:78:b0:92:1c:26:fb:95:2a:be:7a:46:64:44:9d:
83:82:b4:44:a3:16:39:ee:44:0a:3c:3d:36:a4:af:9c:04:42:
74:9d:a5:92:78:a5:ea:a7:a0:73:00:24:e2:ea:ea:94:24:fd:
a8:dc:38:b4:33:e8:fb:96:ea:c6:97:4e:b2:f1:a9:24:e3:0d:
3e:57:c6:25:8a:13:28:4e:d7:b8:37:35:6c:0f:e5:97:a9:ec:
0c:59:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:02 2026 by rpki-client