Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier: kyFVbqe2ZXor2qWlHRV5giraBVgusBz399/mT/xLCJM=
Subject key identifier: 29:E3:A8:B0:A6:C4:AB:28:CC:20:67:5F:22:04:12:5A:39:E9:DA:7F
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer: /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial: 019DA59D49E8A78CA23BBA99F0DC979A0ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number: 12BF
Signing time: Sun 19 Apr 2026 12:00:41 +0000
Manifest this update: Sun 19 Apr 2026 12:00:41 +0000
Manifest next update: Mon 20 Apr 2026 12:00:41 +0000
Files and hashes: 1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: eUc3g9hPzxk7yYqeSUFkBHqZ49KCvOcT0Yfk8L/BYnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:49:e8:a7:8c:a2:3b:ba:99:f0:dc:97:9a:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
Validity
Not Before: Apr 19 12:00:41 2026 GMT
Not After : Apr 20 12:00:41 2026 GMT
Subject: CN=29e3a8b0a6c4ab28cc20675f2204125a39e9da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:40:2c:d7:2e:35:6e:3e:54:03:3e:d5:b3:
76:0c:e2:5d:2c:27:9b:52:86:11:48:26:d6:fd:20:
06:3d:17:b3:c2:1a:e6:a6:8b:5b:98:6e:66:17:2d:
bd:5d:aa:c6:19:7c:4f:99:3f:11:38:4c:0b:93:fb:
4e:c9:5f:8e:58:f9:4e:c1:84:a3:c2:73:31:4a:ed:
6b:f1:94:8c:e3:fb:28:11:ff:f0:d4:a2:08:37:b8:
1c:7f:10:2d:14:5d:d0:87:e2:4f:05:de:34:82:29:
91:8f:9d:78:ec:52:4b:ed:1f:4c:66:d4:c6:74:3d:
31:23:33:2b:9f:9b:0e:11:7c:f4:91:99:7d:90:85:
3c:bd:41:a3:d3:2c:f7:89:97:d7:f4:39:52:05:50:
20:6c:ce:4a:65:ed:da:47:d8:19:84:8c:06:36:57:
8c:80:11:8d:72:5a:f1:92:98:04:32:41:50:69:94:
0c:33:10:a6:2e:31:ae:c1:77:76:19:72:fc:0e:54:
d4:a0:7e:ab:49:08:f5:34:4c:0d:b8:e2:13:8d:c4:
38:d5:41:a2:09:66:3c:1c:a9:4b:96:c4:37:37:73:
6e:2f:83:9b:b2:09:cc:af:cc:f1:d6:21:81:df:d6:
7e:cc:7c:fe:96:31:20:24:e0:14:4c:e4:cf:03:0c:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:A8:B0:A6:C4:AB:28:CC:20:67:5F:22:04:12:5A:39:E9:DA:7F
X509v3 Authority Key Identifier:
keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fe:6c:e2:54:58:8a:38:aa:c9:6f:39:26:1e:d4:de:dc:0d:
27:62:ca:46:0a:4d:85:45:64:13:03:2a:11:a9:c2:ed:06:3d:
71:20:63:dd:b4:13:2e:ec:84:37:11:eb:13:23:59:bc:5c:91:
56:3b:a6:ec:74:52:08:9e:d5:56:fa:f0:58:5f:99:b3:ae:e6:
1c:c7:ca:3a:42:ef:e7:6a:fd:9a:fa:b1:fe:82:a8:1a:2d:e1:
68:d3:50:97:1f:e5:5d:01:4e:41:29:95:2f:23:de:1c:7a:c2:
bd:fd:3d:5c:6d:40:f9:26:03:09:91:a3:a8:81:8b:c3:6d:8e:
ed:bf:f9:ec:23:e5:56:a0:a4:2b:71:52:dc:e6:d7:c6:35:5b:
e9:c6:e1:e4:bd:59:d7:59:52:14:55:89:23:54:bf:0e:e9:f3:
68:04:69:61:e4:dc:d0:30:85:16:0a:8b:13:fe:50:f0:06:e6:
ae:cf:29:da:64:03:10:6c:11:87:d8:d5:07:7e:79:14:18:c6:
28:6c:8e:c1:c3:b2:b2:0b:35:db:bb:82:d0:60:db:1b:0d:39:
64:4b:aa:ee:2f:1f:95:56:e6:99:b9:13:00:6c:31:fa:00:da:
9e:b1:7b:ed:73:c6:3d:46:27:fa:ba:85:a8:89:87:81:c1:a2:
f1:10:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:57 2026 by rpki-client