Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File: MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier: h7L7TMC/wmCseMGiR5h8SZ9J1v5X160KgleHEpfL2Tc=
Subject key identifier: FF:8E:86:31:8C:D3:8F:D7:C9:65:C7:13:2E:33:57:74:CA:B6:C0:86
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer: /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial: 019CAB6B5F529659193F81BC892283107E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number: 0BB5
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: 2677gkGXAxYToRnR5ULYAqSDdoWlRvoxOR4ne2PW1Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5f:52:96:59:19:3f:81:bc:89:22:83:10:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=ff8e86318cd38fd7c965c7132e335774cab6c086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:34:af:94:99:f2:64:14:f9:d0:69:41:fb:
c2:68:5b:97:cc:71:36:44:59:35:e5:2b:1e:ea:f9:
cf:b7:9c:07:e9:8c:e4:8e:ee:3e:2c:55:5f:b0:e4:
f0:7b:d6:90:2a:2a:14:5c:cb:4d:07:2e:d6:7b:ee:
d1:20:79:be:1e:3b:5a:e9:4c:01:13:22:30:0d:25:
61:8e:35:5b:75:f8:e6:c0:50:e4:71:fa:64:da:cc:
0f:04:36:39:00:d1:ad:db:73:dd:f0:ad:9c:5e:ab:
52:7e:e9:b8:13:0c:2f:7d:d9:bf:c5:c8:7a:db:9f:
0f:73:bf:f7:b9:35:3f:8a:08:36:b2:c2:1f:a0:b3:
4b:28:79:60:65:15:33:7c:b9:f9:d9:90:42:06:11:
3f:19:80:aa:95:95:b4:e7:30:c3:aa:da:ec:f5:a5:
c1:f7:0d:a9:11:c2:89:41:78:36:fc:11:98:4e:af:
a9:90:f9:33:6f:c4:75:18:86:e3:34:55:da:42:43:
a6:58:95:a4:ab:33:8e:54:eb:30:14:37:db:6e:85:
51:5e:81:a7:e1:18:25:14:76:2a:f0:42:0e:d6:13:
b2:33:a9:89:f8:3b:63:db:c5:2e:c5:52:f8:a6:29:
b1:48:7d:dd:97:fc:35:7d:33:43:24:6b:89:b7:9d:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:86:31:8C:D3:8F:D7:C9:65:C7:13:2E:33:57:74:CA:B6:C0:86
X509v3 Authority Key Identifier:
keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:16:c2:10:8b:22:62:dc:1c:0a:f1:41:f3:7a:e0:09:46:ed:
d7:56:22:3b:fa:05:bc:d3:7b:08:4a:db:85:93:be:09:5d:ba:
19:60:65:25:53:7c:91:7b:f3:79:49:65:f0:94:15:8b:16:df:
19:6e:d1:8c:4e:b8:f5:f1:48:bf:ee:b2:df:aa:a3:58:26:61:
3f:f6:ec:f3:ce:18:a1:a1:dd:b8:5b:f7:02:0f:d0:91:3d:17:
d1:2c:45:59:6d:4c:be:bf:1b:7a:17:b3:ff:c7:f3:01:4b:49:
2c:54:61:0f:77:33:01:84:f5:fa:9b:c2:7b:09:7f:50:6d:61:
96:45:fb:1d:2b:66:8e:b4:51:c8:cb:19:2f:f2:11:50:de:85:
8d:69:13:f1:fb:a9:df:1b:5f:18:d3:57:ec:6c:00:fa:52:57:
75:1d:05:30:50:a8:ed:5f:83:db:99:8a:32:4f:7c:8e:31:c4:
09:d4:7d:26:bd:1d:a0:79:14:10:a2:03:eb:6e:63:82:42:53:
a9:a2:c8:ee:a6:7b:4c:a6:4d:51:d4:5f:bf:0e:3c:5b:59:98:
b1:73:1e:2c:34:d0:ef:c7:b6:80:11:1b:bb:91:a1:c3:ef:c3:
f3:2d:94:b3:cc:eb:74:ad:85:45:c4:b9:d2:eb:f9:8a:d3:cc:
9a:53:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:15 2026 by rpki-client