Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File: MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier: ONhxWLhr/mByIje/3QJ6wM65toRq8T5cbcpmdJ0qLX0=
Subject key identifier: 98:37:39:2C:F0:4D:E5:AE:A9:91:02:4C:5A:A6:3E:E9:3D:EE:DA:35
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer: /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial: 019D9AE33F518DE7A22F5977DAC3F680391A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number: 0C31
Signing time: Fri 17 Apr 2026 10:01:17 +0000
Manifest this update: Fri 17 Apr 2026 10:01:17 +0000
Manifest next update: Sat 18 Apr 2026 10:01:17 +0000
Files and hashes: 1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: rd/xq0NdU4clZpA2U2y/VlEvv0uqBcGbfG4vUxvLpnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3f:51:8d:e7:a2:2f:59:77:da:c3:f6:80:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Validity
Not Before: Apr 17 10:01:17 2026 GMT
Not After : Apr 18 10:01:17 2026 GMT
Subject: CN=9837392cf04de5aea991024c5aa63ee93deeda35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:1a:74:cf:41:a9:65:fc:60:01:c5:e3:47:
74:45:07:10:32:43:8b:7d:f9:6e:5d:30:d6:4f:f6:
84:dd:0c:9f:6b:cf:ff:f5:d7:d2:f0:cd:a0:ab:32:
d4:23:2e:6f:9e:90:ec:7e:ef:da:77:d6:8b:20:c8:
5d:04:45:8a:99:87:99:4b:a6:3a:0b:8b:22:e5:b8:
7f:f4:ac:03:fa:24:e1:b6:54:20:7b:c9:ce:a2:de:
3d:ea:34:6a:2d:33:64:82:a5:dc:89:a9:62:bf:bb:
fe:d3:05:b3:be:d5:83:55:97:bf:45:d5:a6:e9:0b:
a2:6e:28:e9:fa:81:0d:9f:bc:66:d0:df:bc:fe:8c:
52:ca:44:d2:03:b8:1f:a3:a5:3d:9d:26:55:da:c4:
7f:e1:96:09:bc:b9:57:4b:09:33:72:27:e9:ac:09:
1c:c3:ec:6e:e6:fe:00:39:01:b5:1b:cc:30:f1:ab:
a6:83:fa:56:eb:52:f9:c7:42:8b:85:b9:35:80:be:
25:80:65:76:ed:9a:3c:5d:9c:3d:be:e0:ee:51:6d:
b0:86:02:67:ce:bb:79:85:e4:2f:98:5f:17:8d:be:
58:56:87:1c:f4:17:87:62:ec:a8:13:0e:69:74:32:
e0:06:6c:8c:dc:8a:77:7f:8d:67:d7:92:95:09:e6:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:39:2C:F0:4D:E5:AE:A9:91:02:4C:5A:A6:3E:E9:3D:EE:DA:35
X509v3 Authority Key Identifier:
keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:36:45:72:70:2c:6f:09:d9:61:4f:f1:e2:1b:b2:ca:7c:
10:ac:c3:b2:49:4f:4e:aa:08:a1:9f:bb:00:b1:69:64:e0:7a:
bb:66:b0:ba:ca:ad:dc:a4:95:b7:d9:e4:bc:f9:91:89:39:9b:
50:b8:ab:7e:46:15:e5:a3:83:32:54:1d:f9:cb:e0:ef:50:24:
9b:f3:4f:f5:74:3e:6a:7f:00:87:91:71:47:a2:c1:a6:aa:55:
5b:96:7d:35:79:29:13:7e:e0:74:c9:d8:37:21:c0:ce:a4:96:
ca:61:e0:52:fb:87:09:c4:12:4c:b2:14:56:81:8e:58:29:3c:
2d:9b:67:fa:84:f3:bc:f0:a0:c6:bd:10:9b:82:02:bc:08:da:
b3:b5:d9:e0:cb:7d:6c:1e:92:3e:34:5f:92:81:96:74:06:ab:
66:f0:9a:cd:4e:86:90:d2:c8:f0:33:dc:7a:e7:a0:59:35:18:
8e:63:73:20:06:0b:fe:86:cc:b3:5c:db:7f:48:e8:e3:e0:47:
47:6b:df:31:25:98:2f:c2:e6:da:57:e4:97:9b:e9:99:cc:7c:
4b:dc:89:69:aa:b7:9c:fd:4e:bd:40:70:fd:db:cc:65:60:f4:
df:15:9e:f7:5d:30:e7:12:60:2c:de:5c:17:67:c3:47:7e:77:
f6:68:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:44 2026 by rpki-client