Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: 787MPIghT8MDzQmGdYvafdFh4SSXfPU4zGDS8hZ2Ys4=
Subject key identifier: 3B:2D:09:5D:8E:AD:99:87:45:6E:E2:08:26:D8:78:82:4F:5D:53:4E
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019CAAC69718C1E2CE8450BAE3DA4A4156E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 0A94
Signing time: Sun 01 Mar 2026 19:01:07 +0000
Manifest this update: Sun 01 Mar 2026 19:01:07 +0000
Manifest next update: Mon 02 Mar 2026 19:01:07 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: HM+LkC2wWmh4ExG1uTTmEHmq/mYvUHHwCSvqtC4DZto=)
2: _2CCeE-Uv7qfwwVfdf-mFwT5gbc.roa (hash: TYooW/gUsVFWHXthOPEQi5a4rd+m2KssG9xszmHlKRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:97:18:c1:e2:ce:84:50:ba:e3:da:4a:41:56:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Mar 1 19:01:07 2026 GMT
Not After : Mar 2 19:01:07 2026 GMT
Subject: CN=3b2d095d8ead9987456ee20826d878824f5d534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:b5:f3:ef:58:da:5a:10:f3:db:44:4b:95:
a6:36:c7:73:6d:27:08:71:03:65:f0:35:70:b6:e2:
58:3d:61:4f:7f:32:5f:ee:31:74:8b:26:1e:02:b2:
01:69:e0:46:7b:4f:2a:78:6b:9e:50:10:04:14:d2:
36:01:25:d8:03:fe:70:f6:94:6d:b3:e1:7d:66:0a:
81:24:2c:9d:53:34:25:23:09:85:c6:dc:a7:af:82:
83:d5:a7:ce:16:4d:01:8e:90:a5:5f:09:13:2a:d5:
32:f8:1b:b7:5c:9b:e4:96:57:df:a8:2b:33:ef:ba:
6e:99:3c:3a:10:d7:55:54:3c:4a:14:66:3f:63:b9:
c9:9e:ef:ba:b2:72:95:0a:64:e6:bd:0e:31:75:90:
24:f1:ea:fe:64:dc:96:2d:2e:b4:4c:b2:37:21:56:
ce:8b:47:3f:f8:9f:8a:7e:3a:39:a4:2b:ee:c2:b8:
2d:bd:bc:3d:9a:22:4c:e5:fb:26:68:7c:40:31:28:
c2:bb:b1:2c:c6:b6:a7:30:9d:33:21:e8:b5:42:b3:
c5:08:d5:8e:24:90:bb:a4:18:a7:1e:23:b8:d6:9e:
aa:91:0c:5d:8b:ff:6f:8b:e2:24:42:51:30:a6:a5:
fa:60:51:89:bc:27:9d:cb:55:13:9c:94:49:1a:da:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2D:09:5D:8E:AD:99:87:45:6E:E2:08:26:D8:78:82:4F:5D:53:4E
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:08:df:a4:50:7e:44:03:31:d6:e2:d9:09:1a:69:83:ac:f9:
65:da:60:f1:a7:ae:18:00:4e:88:7b:65:08:34:0d:91:af:36:
27:8b:b3:2a:48:90:0d:97:ca:47:06:57:52:aa:45:ed:75:21:
99:29:53:8c:7f:de:76:90:f4:be:a1:7a:d4:84:ba:d2:68:5c:
2d:43:42:7a:40:9d:d6:78:d7:dc:ab:21:6c:75:d9:21:12:54:
b7:65:2a:a8:54:71:e0:7a:eb:c9:e3:7e:3d:59:c0:96:8f:86:
95:2f:41:52:24:4e:f9:c9:89:50:14:61:c8:5e:b3:b6:88:48:
98:61:07:73:66:02:30:79:47:74:bd:9c:a4:f4:a6:a8:61:ca:
72:49:f3:e3:b5:b3:e1:28:d7:e0:ab:29:07:3f:66:af:28:68:
3c:fb:5e:4b:8f:5b:2d:4c:74:13:41:e1:2b:37:4f:da:48:41:
3e:83:14:ad:03:0d:e5:74:30:ad:d5:33:24:d0:13:d3:ec:a9:
f0:7e:03:bc:5a:b2:dc:9c:ed:2e:2b:d2:86:a4:60:65:f0:67:
dd:e9:e4:35:0f:8b:89:95:e2:31:e4:9f:56:ba:fc:da:49:61:
4f:c3:d1:44:be:a0:2c:82:0f:2f:55:54:89:c6:cf:57:50:38:
f5:02:40:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:50 2026 by rpki-client