Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: e/FFp0tGG4/uodpwVUw9p+n11U198SQb1svSOPvwMeM=
Subject key identifier: 6A:1F:59:1B:73:C3:91:57:1D:92:7A:C8:00:D0:AE:D5:CD:B4:DA:56
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 019CAAC6D98CE6B2FD8B80E521FB04A3CABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 068D
Signing time: Sun 01 Mar 2026 19:01:24 +0000
Manifest this update: Sun 01 Mar 2026 19:01:24 +0000
Manifest next update: Mon 02 Mar 2026 19:01:24 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: STZu09fw5g0OqkUJxp6pwApo6iM/5IOKFjl3LPKFusc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d9:8c:e6:b2:fd:8b:80:e5:21:fb:04:a3:ca:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Mar 1 19:01:24 2026 GMT
Not After : Mar 2 19:01:24 2026 GMT
Subject: CN=6a1f591b73c391571d927ac800d0aed5cdb4da56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:14:ee:f5:80:a5:21:c8:a7:c7:b3:fe:34:
41:68:7a:28:e8:40:3a:08:c7:e3:d7:56:90:8c:c0:
e8:1c:37:73:e9:27:5f:ec:39:69:5c:74:2a:d5:f9:
0e:17:74:4e:8c:63:1a:2c:c1:c7:40:e3:b1:8f:de:
c2:2e:7d:83:7c:f6:b6:43:b9:bd:78:3d:58:e6:c0:
c1:58:08:24:35:35:47:df:81:9a:a8:43:5c:00:ff:
fb:f1:75:4e:b6:71:6f:42:5b:26:34:29:02:b1:81:
75:58:21:b4:26:91:c2:30:38:69:aa:a0:dd:d0:89:
9d:f9:d3:fb:8a:0b:7e:90:13:8e:17:1e:d3:c2:d1:
8a:17:8d:c3:ac:a1:c0:f0:73:55:b8:d5:4d:69:bc:
63:f7:dc:91:00:dc:17:d2:4a:54:d7:09:2d:0c:f1:
ee:01:1e:3a:15:c1:35:19:85:ca:af:40:73:4e:03:
2d:b1:d2:42:24:9c:fd:bd:3f:1f:02:a0:47:65:33:
fa:44:cb:ad:34:52:d9:5d:1f:d7:d7:b2:90:7f:d4:
bd:30:18:e4:94:2f:7c:1c:88:bb:23:36:3d:13:4f:
8f:7e:6a:4e:01:d3:77:53:bb:33:e4:05:f1:eb:81:
0b:32:5f:51:48:c9:32:97:e8:e2:ea:c5:c2:24:ec:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1F:59:1B:73:C3:91:57:1D:92:7A:C8:00:D0:AE:D5:CD:B4:DA:56
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:50:3b:2e:8d:81:b1:fc:75:85:b5:8b:77:21:7c:81:b3:3b:
d3:cc:24:ce:4e:dd:a2:16:be:5a:b5:d3:aa:30:36:fd:48:98:
ed:18:80:d8:b5:aa:00:25:a1:f6:a4:49:25:91:2f:02:51:cb:
48:e8:1a:a8:85:e8:9e:b4:a1:6d:49:88:a1:65:2b:b1:18:06:
68:fb:f2:6d:ec:6e:25:2f:b4:a5:d7:e9:15:61:d0:b9:09:26:
38:4e:5d:eb:65:51:3a:92:0e:f2:0c:c2:1f:65:c6:f1:76:9f:
72:a4:86:b8:c1:77:4e:98:02:8a:3d:52:8a:ce:6d:12:1b:37:
c9:d8:64:40:bd:a9:42:7a:94:b4:5e:56:c9:10:f4:4e:93:c6:
51:ba:0d:a4:cf:3e:3c:06:aa:ec:9b:0a:94:c3:25:2e:7b:1a:
75:bc:8c:80:17:78:d0:5a:19:53:cf:8f:ae:27:f5:ff:fa:d1:
77:d6:a3:2d:dc:40:3e:3f:7e:93:e5:17:fb:b8:4c:02:f1:49:
32:b5:6a:dc:da:e0:f8:10:2c:d9:e3:90:61:cd:1f:59:62:71:
31:96:58:81:1c:78:b4:31:c9:c7:e5:45:b9:dd:d9:a4:5d:41:
93:18:0b:a9:fd:ff:54:d4:b6:7f:1e:ba:2a:ef:d6:21:cb:ca:
00:3d:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:52 2026 by rpki-client