Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: /TDf0siHT6S5oRwusc71E2SCsonF8l7l5KeSd1BXXr0=
Subject key identifier: CF:4C:81:59:04:E7:80:95:FB:72:24:A5:75:CE:D3:D2:34:F0:13:8E
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 019D9A3E9E80DD946758FCB05D5E281A8963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 0709
Signing time: Fri 17 Apr 2026 07:01:27 +0000
Manifest this update: Fri 17 Apr 2026 07:01:27 +0000
Manifest next update: Sat 18 Apr 2026 07:01:27 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: INBE5gBvgiLA3yWfKNMRWTMwM1g5qLOyPB9GKEHfDlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9e:80:dd:94:67:58:fc:b0:5d:5e:28:1a:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Apr 17 07:01:27 2026 GMT
Not After : Apr 18 07:01:27 2026 GMT
Subject: CN=cf4c815904e78095fb7224a575ced3d234f0138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:24:43:d3:d9:eb:f5:4f:59:8b:b8:bc:d5:
83:44:f8:9d:45:f5:c5:c9:36:cc:9d:7c:cd:ba:4e:
35:4c:c0:96:ea:3a:66:c3:60:0c:71:32:a3:6e:8b:
98:8e:e3:d3:ea:73:70:bb:6d:fb:f4:34:a3:93:96:
73:dd:64:81:78:9b:50:40:9c:05:28:ee:84:0f:f0:
3e:5f:ea:b9:d2:82:c2:4b:6b:eb:59:e4:3c:2e:70:
23:aa:7b:b2:cd:6d:9f:cb:ef:70:2d:2b:d8:55:84:
21:63:8d:82:46:a1:76:ed:4e:50:3e:ba:a7:65:12:
5d:34:34:51:95:91:4e:b5:6f:6c:46:3f:52:8d:00:
bd:67:47:13:cb:ed:ca:2e:51:e1:0f:7f:5c:d7:eb:
3e:99:42:de:09:3d:ef:22:ff:fb:d8:8e:b9:3a:cb:
ce:a1:8f:8a:21:4d:4f:80:d6:cb:95:95:db:6e:2a:
06:5a:d0:ba:14:54:9b:69:d8:f4:80:0e:30:71:92:
32:db:d3:90:bf:bf:93:e6:de:52:c4:bc:37:ce:fc:
29:5e:7b:01:59:83:eb:65:7b:8a:3a:94:1f:d4:ac:
74:14:53:77:cc:5e:e7:0c:4e:de:67:42:f3:b5:56:
5f:cc:22:92:b8:c7:a0:35:79:3a:e0:56:88:5c:1c:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:81:59:04:E7:80:95:FB:72:24:A5:75:CE:D3:D2:34:F0:13:8E
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:14:fe:a9:65:68:02:dc:21:da:0f:2e:b4:53:06:d0:cc:0e:
01:dc:fe:8a:22:1a:7d:67:a8:c5:58:98:86:b8:62:75:4b:ce:
ee:b7:d8:7a:a7:be:a0:fd:96:20:76:18:e1:23:37:08:d2:07:
4a:84:2f:ca:60:7b:c6:b8:83:af:3e:e0:39:94:c1:93:ee:93:
e9:7e:87:7c:eb:44:41:5d:b7:d1:d4:99:8e:01:35:ba:f7:c0:
77:f0:a7:50:ef:c4:3e:ec:b9:ed:07:87:6b:8c:23:12:2f:74:
ae:09:81:55:96:ab:73:7d:07:b7:22:aa:6a:64:79:11:bb:e1:
70:1f:b4:a9:45:73:59:6b:36:d7:f2:c4:d4:78:88:4b:0a:30:
5f:f3:28:12:09:a1:ee:89:43:93:8e:4a:10:90:07:a5:b4:0e:
b7:9e:00:b0:47:48:ac:38:51:20:33:5f:d2:49:25:da:d5:1e:
b1:e7:5c:ce:42:0f:ad:3a:60:12:88:58:7b:5b:7e:e4:29:46:
7e:db:cb:b3:74:0d:9f:6f:19:af:4e:3f:aa:64:95:82:97:88:
4e:c3:0b:cd:18:00:5e:73:33:75:45:7e:aa:4e:45:3f:be:cf:
98:50:3e:29:c8:0b:26:ff:04:42:71:c8:e7:70:5d:0c:5d:0d:
30:a7:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:16 2026 by rpki-client