Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: oaaBZqG/OyEBdqSVBCR4a4SnMhe4Ub/SAOb9aQFSdcE=
Subject key identifier: 66:BD:C1:83:A6:4C:F1:89:9F:36:CD:A4:6C:B8:F9:31:D3:8E:48:35
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 019D9818FC0E92D9FB117B5FF68ADDF23371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 0705
Signing time: Thu 16 Apr 2026 21:01:07 +0000
Manifest this update: Thu 16 Apr 2026 21:01:07 +0000
Manifest next update: Fri 17 Apr 2026 21:01:07 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: iFymZ3aS3TV1g2mjojkFS9KFvkiXbePSpZikBEmeRIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:fc:0e:92:d9:fb:11:7b:5f:f6:8a:dd:f2:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Apr 16 21:01:07 2026 GMT
Not After : Apr 17 21:01:07 2026 GMT
Subject: CN=66bdc183a64cf1899f36cda46cb8f931d38e4835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:f4:41:db:20:42:1a:75:80:8e:ca:b3:9c:
98:3f:ba:7e:54:80:93:11:27:81:ec:41:50:a9:d3:
11:b9:b9:40:23:41:4e:53:f6:57:a3:2b:a1:b7:3f:
80:f5:ac:d6:0d:6d:d8:af:6e:52:ad:36:95:7d:e0:
6f:57:46:fe:54:b8:f4:d1:dc:52:ba:fc:f2:a5:53:
6e:c2:b9:4a:00:c9:c8:7d:e8:86:8f:5a:0c:e1:19:
b8:6b:51:b9:39:bc:04:db:c0:b5:76:c0:e9:ee:a1:
66:d8:52:d7:e5:48:00:f9:45:3f:75:d3:63:24:15:
01:cc:8c:63:64:66:7a:0f:d9:18:72:fd:f6:61:23:
59:89:80:54:2b:34:cc:26:3d:53:a6:29:d3:4c:7c:
49:bd:81:f6:11:20:bf:68:89:64:55:4e:20:16:fe:
bb:c7:3c:26:96:34:cd:80:8c:37:21:d6:02:31:8c:
fd:f8:de:0f:b9:9e:d2:94:6d:d3:01:bd:a3:52:71:
e6:4e:99:8c:9d:35:26:51:09:26:85:02:06:4e:4b:
27:61:9c:cd:67:ba:7c:28:b5:14:c0:e3:d9:2a:69:
c6:42:87:85:75:78:b0:3e:5c:bd:6e:81:e2:62:e1:
00:ff:35:c5:45:f9:ed:eb:ba:e6:71:ad:2d:28:56:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:C1:83:A6:4C:F1:89:9F:36:CD:A4:6C:B8:F9:31:D3:8E:48:35
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1e:e3:86:f4:97:ab:d9:d6:3f:46:0f:f1:b5:d3:7c:c8:b2:
f4:86:af:1d:25:38:81:da:8c:2c:69:56:4a:47:46:14:c0:6f:
4e:21:67:db:68:b8:19:ba:55:97:dd:6f:2a:08:7a:ab:93:58:
ae:8f:77:ed:be:48:61:53:d2:66:bc:eb:09:1e:f6:b3:72:2e:
05:90:08:e3:dc:9c:ff:9c:cc:9c:77:82:4f:58:41:57:f9:6b:
07:45:0a:16:56:d2:92:60:4e:9e:05:04:10:ad:f7:dd:8a:5a:
99:5e:64:28:e2:8b:e2:4c:18:ac:aa:e9:d4:42:c0:3b:83:19:
81:0a:6a:17:c5:7e:21:ef:8c:18:5b:01:dd:d9:38:99:49:05:
ad:5d:0c:6d:b4:be:80:b9:6a:14:9e:05:3e:a8:6f:0c:e3:02:
24:32:c2:84:9a:b2:35:d0:5f:9a:97:a0:3b:aa:25:a0:ee:1b:
4c:52:7a:27:78:f2:fb:bc:aa:08:3a:d0:8e:19:32:bf:ca:ab:
36:fa:06:4c:42:f3:fc:00:9a:13:f9:b5:6f:df:92:d3:ba:44:
33:05:0e:18:9b:dd:85:8f:a5:6e:ae:61:da:86:d2:58:87:c2:
bb:c3:9e:e7:ef:a4:41:8a:0a:36:59:fc:dc:46:3a:cd:ce:c8:
ec:b3:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:06 2026 by rpki-client