Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier: lyFPrTJjGrs38vEvdgsD9Eg3F59jDyWOw6ewPAf8j3Y=
Subject key identifier: 3B:E0:C6:E6:38:FD:AE:BB:47:B5:0A:22:34:EB:B1:6E:76:A3:75:1B
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 019D2A046A12EE08A9E7C26D7F233F49A97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number: 1258
Signing time: Thu 26 Mar 2026 12:00:25 +0000
Manifest this update: Thu 26 Mar 2026 12:00:25 +0000
Manifest next update: Fri 27 Mar 2026 12:00:25 +0000
Files and hashes: 1: H-zR6ky2pDadloAxkXUrEUDR0Lw.roa (hash: lG6oXiAUIS6xft8V5DugdkR0sps6sV68ctJDl4dFR2E=)
2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: Ddqddy1Jyqegeo5iccTM14iALlzdw1Na2cX1gercw80=)
3: cwRccrAENANpUtgyG-cs76t2uhQ.roa (hash: UiM4/U2KaMcgUdcESji12E4Ep2EXmuZnwMAQ53YQTaw=)
4: lLChUBZNxYsI76RgX__pDESB_OA.roa (hash: 5jzvmBS7qQYnrtTH7wbbIQMDBZ7lUHZfG/KhrPJAXYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:6a:12:ee:08:a9:e7:c2:6d:7f:23:3f:49:a9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Mar 26 12:00:25 2026 GMT
Not After : Mar 27 12:00:25 2026 GMT
Subject: CN=3be0c6e638fdaebb47b50a2234ebb16e76a3751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:81:ef:53:2d:82:fe:1d:e7:0b:82:0a:b7:
8a:7f:a5:ff:13:04:1c:ff:38:91:cd:74:de:fa:ab:
c8:90:4f:1b:b3:40:1d:fe:66:77:db:31:ab:cf:95:
29:06:bc:80:03:a2:f0:50:4e:0a:f7:db:43:1c:a7:
7b:58:8a:58:6b:b4:d8:8f:93:5f:bf:ba:54:fd:40:
98:b9:bb:3d:73:3e:b8:ee:7a:ef:6d:24:04:3f:0d:
cc:16:86:2d:b4:7a:d0:c2:16:9b:46:e2:82:18:34:
63:8d:99:41:e9:e9:ee:05:f3:3f:ad:8d:b4:01:5c:
6c:7d:03:81:68:c9:c1:51:8a:34:91:c1:f4:c5:b2:
b9:bf:22:d7:df:6f:5b:9b:8e:a8:f2:12:da:7c:3e:
a7:97:03:7b:29:ed:36:ac:6a:d8:e6:dd:7c:ef:49:
55:e0:12:fc:f8:5a:d3:42:77:6c:45:0f:a1:96:17:
3d:3c:83:cb:20:0c:7c:25:33:f0:53:5e:6d:2b:14:
7f:cb:4f:9f:1d:f6:6e:76:0b:39:92:c3:f0:2b:d3:
22:4f:31:1c:01:a6:0a:c0:9c:1c:2e:76:ae:8d:e4:
65:09:8d:a3:aa:b1:9e:c7:ac:11:c1:ce:7d:b3:b7:
02:a4:47:ef:64:28:b9:a3:1d:1b:d6:02:32:7d:e2:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:C6:E6:38:FD:AE:BB:47:B5:0A:22:34:EB:B1:6E:76:A3:75:1B
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:26:3f:24:d9:2f:6f:2d:7c:41:20:84:b2:4c:40:db:d6:8c:
84:0c:63:0f:49:99:bb:53:ab:f8:1c:a3:45:55:af:37:2e:58:
8e:ad:7e:c6:2a:f8:8b:63:00:6b:c1:c0:13:47:51:f0:b6:0b:
c2:53:c9:0b:8f:76:ee:4a:29:70:3f:69:9e:b8:3d:b1:7e:b9:
53:6c:dc:6b:56:33:aa:f4:27:86:78:05:8e:db:0d:1e:b2:78:
a1:c2:2b:7a:a1:31:78:48:da:dc:f1:6c:ff:46:c3:86:bc:a5:
61:30:68:ed:70:82:f8:91:d0:51:07:70:62:1f:30:28:1a:0a:
3d:d6:11:cd:43:23:22:2a:61:6e:71:42:52:f5:14:da:79:d6:
7e:dd:17:63:17:71:e0:5d:c0:ae:8b:9e:ff:8e:c3:6d:a0:35:
87:9d:97:48:3c:d9:82:85:cb:16:66:fd:7a:2b:e7:0a:0d:06:
50:b5:0c:13:47:c1:27:42:9a:bc:5f:92:d4:57:25:5e:52:19:
0d:a4:aa:15:d8:3f:57:c3:9d:4d:e6:69:e8:1b:98:4a:86:61:
01:18:d1:5f:c5:1c:00:3a:aa:bd:37:e9:5a:97:61:5c:b5:db:
fa:81:15:ec:2e:2a:ea:a3:ab:eb:0e:79:4a:d9:56:16:83:6b:
cd:49:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:28 2026 by rpki-client