Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: QCnd3MaIY23YRrgL+EgF7o9AMgfolDXhPsUo6/iIdMw=
Subject key identifier: E9:07:EF:60:71:03:54:15:75:7A:3D:54:05:1D:55:46:74:8A:60:79
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 019CAC7DBA29C037EDB5CEF078FF36B480B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 068B
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: h2DefxuELGi26ZO6hMXjhbfuKTa9/xm2jKVVH5zox4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ba:29:c0:37:ed:b5:ce:f0:78:ff:36:b4:80:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=e907ef6071035415757a3d54051d5546748a6079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:d8:a0:a5:8f:70:e0:1b:e3:14:5e:67:65:
e5:d8:88:c7:90:41:2a:fa:19:f9:e0:3b:37:0c:e3:
cb:85:c9:ed:69:0e:69:9b:17:95:29:37:c9:3f:21:
e8:4a:80:3c:36:aa:11:7e:f2:e6:03:ba:db:eb:6a:
41:53:94:34:c6:a3:7c:38:2d:36:81:09:12:e1:48:
d1:70:f8:c9:20:c8:1f:22:08:ea:7c:5e:49:e9:ae:
26:01:7a:b9:f0:c1:bd:50:e8:21:7f:cb:af:6a:fa:
ac:d0:b9:4b:d0:8c:cf:c3:02:95:d7:61:da:07:65:
8f:ce:03:5c:b9:50:ce:66:4b:ec:f4:03:01:17:ff:
63:00:d6:90:d4:b0:8a:73:7f:74:50:58:e5:cc:38:
b6:b9:b3:49:56:c7:a3:1a:2c:b1:0c:8e:2a:c1:d8:
34:f9:05:ec:87:d4:db:d2:43:02:45:e5:27:73:0c:
70:87:90:f5:4e:68:8e:07:40:11:44:bd:61:fa:9f:
28:3a:9c:d0:b7:a0:39:df:fb:82:aa:9e:30:b5:46:
05:5f:93:44:fc:d8:14:87:c9:3a:de:68:c4:44:39:
f7:5d:f4:6f:ad:1f:c6:50:b5:50:48:31:9c:8f:20:
23:b6:81:db:f5:d7:6a:66:1e:ed:9e:ab:e9:fa:77:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:07:EF:60:71:03:54:15:75:7A:3D:54:05:1D:55:46:74:8A:60:79
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fb:ad:7a:2c:6f:9d:c3:68:4d:61:23:d3:3a:5f:bd:be:e0:
93:52:16:ea:c3:0c:e6:22:44:85:cc:13:53:d7:cc:32:f7:88:
c2:d9:dc:d8:8e:9a:cf:26:a1:27:30:bc:96:78:68:b2:04:c5:
27:69:b1:de:98:41:ca:5a:c5:c3:3a:41:75:4c:b3:8e:e4:fd:
dc:41:f5:51:a3:4c:f9:c8:7b:0d:3a:de:c2:9f:28:f9:b9:b7:
d9:32:30:f6:8e:d7:53:70:86:9e:a4:61:c0:72:cf:8c:82:97:
ff:d2:42:c5:e9:3a:b0:3e:7c:ca:df:3f:32:8d:87:29:9e:93:
ea:0b:b0:8d:05:67:f9:ba:35:39:0a:2b:03:5f:1a:09:ac:49:
f1:50:f4:32:57:34:8a:0e:37:c4:c0:55:f1:43:90:f0:9d:8f:
28:a5:b9:fe:89:43:31:ec:53:8e:c1:77:c6:31:d0:56:42:44:
c1:6f:18:c2:a2:f3:63:b8:da:de:2b:9a:92:4b:12:dc:84:6c:
82:72:e1:a9:ee:73:01:a1:33:c6:30:79:ed:0d:17:59:c1:f6:
4d:3d:84:4f:ca:59:b4:f6:79:9b:1b:b3:53:6c:24:09:24:91:
cd:03:c8:8e:82:6f:3a:8e:6d:9b:58:ea:67:09:f0:e9:5a:18:
28:4a:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:18 2026 by rpki-client