Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: 599OHom+ZMbSQTyWMf4a1I61mU739ZdANB5VESsbuAQ=
Subject key identifier: 61:FB:02:83:69:2B:87:B5:15:06:13:75:C1:02:18:4B:DD:B6:6A:93
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 019D98F4ECBBF6440A8D857F0D2E6215CAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 0982
Signing time: Fri 17 Apr 2026 01:01:21 +0000
Manifest this update: Fri 17 Apr 2026 01:01:21 +0000
Manifest next update: Sat 18 Apr 2026 01:01:21 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: oiWZWhp2BoR0QO6YJaZr40K9jKqxYh50tA8t6uUiXxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ec:bb:f6:44:0a:8d:85:7f:0d:2e:62:15:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Apr 17 01:01:21 2026 GMT
Not After : Apr 18 01:01:21 2026 GMT
Subject: CN=61fb0283692b87b515061375c102184bddb66a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:ac:5b:ff:f1:f2:56:6a:1c:94:5f:c9:6f:
d8:25:f2:0e:a2:cc:91:fe:90:7c:09:1f:7c:16:63:
65:eb:af:21:d4:3b:1c:52:3c:fb:cf:39:65:10:39:
8c:e5:00:6f:08:73:75:9c:9d:31:9e:c7:97:47:f5:
13:ee:d4:e7:4a:ff:08:98:75:64:09:f0:3e:63:a8:
01:1e:98:4b:8a:b2:00:70:a6:41:8b:54:7c:04:42:
83:72:bc:55:45:5c:cd:d0:8d:c5:10:97:70:7a:67:
ea:05:64:03:0f:70:68:da:1e:ed:a0:af:28:ed:c0:
47:42:9a:a8:b1:b5:2f:e4:8a:f5:ad:a8:67:ef:19:
f1:73:45:c4:7a:7b:a5:3d:da:0c:55:eb:fe:b2:35:
04:06:da:c0:a7:75:1c:ab:cd:ea:45:1f:6c:4a:89:
5d:90:9a:8e:45:f3:0f:88:96:43:ab:ef:c3:08:81:
46:19:25:77:16:77:84:88:20:8e:2d:5c:88:9a:41:
de:85:27:55:e6:ee:32:b6:e3:0c:38:4f:ca:f5:2f:
d5:22:09:0f:b0:da:46:10:46:29:f5:05:d5:a1:7f:
76:ed:97:b5:bd:a0:9e:a7:44:67:d2:75:79:3f:a3:
58:24:78:21:a6:90:8f:89:63:a8:a7:95:93:7f:a2:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FB:02:83:69:2B:87:B5:15:06:13:75:C1:02:18:4B:DD:B6:6A:93
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:91:f5:07:eb:e7:37:b7:66:83:ba:54:aa:cf:23:a5:98:3b:
a1:3f:f3:02:66:44:ca:42:20:e2:dd:6c:43:04:ef:2d:0e:29:
85:89:dc:5a:70:62:da:c3:12:56:11:78:40:e2:ca:54:c2:60:
a3:54:64:87:4c:23:36:9a:fe:69:98:ae:15:aa:6e:86:52:86:
a5:c4:63:94:1b:a9:1b:f8:f3:65:7b:27:4f:1a:7c:98:d4:a3:
5d:b9:d4:ed:58:d2:62:4f:45:f5:6c:04:07:d7:d0:bc:11:38:
9f:ad:28:ee:6d:70:78:1a:39:dc:73:06:ca:9b:8c:3e:c9:77:
d9:2a:28:58:74:1b:58:fa:2e:95:7d:67:51:04:23:20:2b:58:
6b:d6:12:c9:1f:7c:32:f6:47:6b:17:fd:d2:c0:f9:2b:29:d8:
fa:93:ab:67:74:20:2f:1c:28:2e:7e:cd:bf:de:ea:13:18:07:
04:0d:76:d8:3f:61:6e:36:5e:4f:b7:89:93:4b:26:2d:9f:0d:
4e:18:c3:fc:cb:eb:42:59:0e:73:d4:e4:65:45:cb:8b:67:c8:
2e:2f:42:84:d5:2b:1c:53:80:03:fe:ed:fd:27:cc:36:8d:1e:
d6:e6:c2:8b:9b:cb:d1:45:77:ae:4e:88:15:ff:a6:44:4c:3f:
1d:fa:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:53 2026 by rpki-client