Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: mfqVXxLODv4RyvbLpWydFfCWe6RwRQUVzKDQWmrwY8M=
Subject key identifier: 15:7A:E5:53:BE:D8:7F:8C:55:93:60:D8:6F:50:4E:66:11:35:15:8E
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019D270408AC68FA7A03DCCCB8C8AC7C1F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 05B5
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: lhoknmf1r5/WISpwdplWWBn5UL2n5Gq3ZqB0tfxGvhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:08:ac:68:fa:7a:03:dc:cc:b8:c8:ac:7c:1f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=157ae553bed87f8c559360d86f504e661135158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:ac:97:a2:29:88:6f:36:06:b8:32:c6:e2:
ed:4f:ee:fe:95:16:45:f3:fe:83:5e:9b:6d:c7:02:
56:1a:37:d9:52:7d:0c:95:5e:f7:23:02:88:4f:7e:
9d:88:d0:dc:fa:0b:21:eb:44:b2:74:78:54:8d:92:
54:2c:b6:cd:bd:32:bd:4a:9e:56:9d:bd:16:25:76:
f2:95:8b:07:9f:69:77:41:04:08:84:21:5c:29:74:
52:eb:24:6d:53:87:28:e4:2d:05:9a:34:74:26:e3:
88:dd:1c:48:ff:03:71:f5:13:9e:27:22:19:5f:1a:
42:a8:c0:49:62:2d:68:94:ea:7d:94:ee:80:4f:66:
90:68:bc:e2:5b:d6:60:ca:32:e2:05:9d:6b:54:ef:
1a:c7:aa:b4:87:60:66:35:19:68:9f:3e:fc:21:4f:
41:22:a0:f4:d6:a4:a8:e7:65:8e:36:5b:b8:46:67:
03:86:c1:99:08:d7:6b:f4:c4:e1:34:54:50:15:f0:
ea:a7:d3:04:95:86:19:18:d1:54:77:02:29:14:d9:
1b:bb:fc:0b:0b:6b:38:04:03:bd:25:cd:64:17:73:
9f:ff:f5:f3:07:6d:dc:99:2a:61:fe:ed:cb:04:02:
fa:bc:cb:0f:c7:07:ff:ce:06:92:6c:fd:6f:1e:39:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:E5:53:BE:D8:7F:8C:55:93:60:D8:6F:50:4E:66:11:35:15:8E
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:2a:36:39:dc:17:8b:3c:76:44:e9:61:76:07:8f:c5:b2:
9b:6b:54:36:a4:4c:ff:f9:4d:ea:6d:c3:38:0a:a5:af:47:88:
41:95:42:4d:6e:eb:7b:58:73:d2:5f:10:a0:23:b7:d7:ec:63:
4a:ab:a6:f8:a1:33:b7:37:b7:71:fd:06:ff:b1:4b:0c:84:89:
57:22:23:d8:ce:ff:b5:d3:af:8b:de:11:97:2c:d1:70:ce:e4:
b0:cf:d9:94:f0:12:ba:f6:4a:fa:96:7a:dd:14:4b:08:8b:8d:
4d:41:f2:43:1e:44:e7:c3:f4:e7:0d:f6:d1:7f:b4:f7:27:25:
83:de:00:93:04:dd:a0:2d:3a:fc:44:c1:4f:dd:c8:7c:1f:dc:
c5:eb:92:8f:7f:86:a3:ad:83:3c:33:52:1f:7a:26:5d:3d:06:
f6:fb:fe:0b:e0:a5:65:51:78:83:f9:0f:e7:8f:ff:2f:2b:4d:
c1:27:06:4d:36:6f:ef:09:fd:1d:95:3e:10:dc:e3:96:98:81:
f0:fd:b7:3e:7e:b6:aa:85:25:93:d4:87:42:3c:d9:d8:3c:6f:
06:3e:9c:c0:23:37:39:0a:8e:8c:ce:56:4b:de:b9:4b:c0:11:
56:7c:1e:5c:9f:02:35:9d:61:1a:bc:da:22:31:ba:ba:ee:bf:
b9:f5:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:34 2026 by rpki-client