Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: 9mU+uK5f7yMydD0cp8Y7x/weIvCrjO/V9tsyBvmD38I=
Subject key identifier: D6:22:59:9A:0F:DC:91:B5:0E:89:E2:06:82:0C:E2:A4:7A:9F:66:8A
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 019D269621AF45BC74CDF7417FE7E740955A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:06 +0000
Manifest this update: Wed 25 Mar 2026 20:01:06 +0000
Manifest next update: Thu 26 Mar 2026 20:01:06 +0000
Files and hashes: 1: VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa (hash: eyvaXZ1DgOHbc16lk8yXQEwz4POlL+tLjFw5QFZgFv4=)
2: VhZZqyHl4RcvVrDtF9S5qJYdsrI.roa (hash: 8RcjIqSIrUsAtUqmpBMu/l4viLpz4Dni8fqFOKIrXPc=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: 96YN93AVZF5cEHpK94Zfm6qr4sQpAjr2hZUDfoBAbQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:21:af:45:bc:74:cd:f7:41:7f:e7:e7:40:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Mar 25 20:01:06 2026 GMT
Not After : Mar 26 20:01:06 2026 GMT
Subject: CN=d622599a0fdc91b50e89e206820ce2a47a9f668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:fb:fa:13:37:ce:30:26:f0:56:ce:52:7d:
9c:f9:b0:05:dd:d8:ca:cd:4f:19:e7:8b:40:60:f6:
e2:9b:2a:ae:70:cb:fd:6a:a8:af:c3:4a:87:37:05:
c4:40:14:03:d0:83:a5:c1:4c:ad:b3:11:ef:51:8c:
eb:17:84:8d:96:c5:da:72:79:df:e8:3c:18:7a:22:
7c:77:95:92:c7:b9:bc:49:d9:42:ea:b5:5b:7f:bd:
ba:13:0b:a4:31:bc:2b:91:9e:ba:b5:92:84:d5:47:
25:ed:67:b3:7e:6e:50:b4:37:7d:f0:1e:5b:7a:a4:
c6:c1:81:a6:30:4d:68:9b:ba:37:7f:3d:0b:ee:01:
60:05:5a:5e:5a:11:e2:16:e6:80:a6:ed:fb:95:fe:
a2:8c:e1:90:c4:88:c0:a7:63:df:99:56:11:84:7f:
13:b0:77:79:42:2f:6e:0b:4f:13:a5:40:ac:5d:04:
71:8f:f8:7d:b0:26:cc:d6:85:09:df:8b:23:0e:17:
75:7b:35:d7:25:4f:97:45:43:d9:fa:73:22:01:0b:
4b:15:2f:24:fb:10:5b:90:37:bf:67:d0:b7:62:be:
a7:6a:67:6f:5d:4d:8a:90:e9:8d:9a:7b:6d:89:b1:
25:f6:55:c0:5f:91:2d:d1:37:ca:12:2b:c1:c8:83:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:59:9A:0F:DC:91:B5:0E:89:E2:06:82:0C:E2:A4:7A:9F:66:8A
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:ab:df:46:d0:e3:06:9e:42:64:df:c3:fe:43:35:13:0b:
09:f6:8f:1d:cc:36:ab:0f:43:2e:f0:ff:29:63:6f:9e:66:c7:
b8:dd:41:ad:c3:8d:69:f9:cb:0d:de:9f:0a:b6:db:3d:46:c5:
5d:60:17:0e:a9:68:80:d9:2d:d2:38:7b:cb:c2:aa:46:0b:c2:
79:f8:9c:b7:57:26:68:8a:ac:4f:1b:23:7b:1e:10:df:d2:a8:
a8:fc:a3:49:e8:17:bf:74:2f:f5:ce:73:df:6c:e6:ce:40:d6:
29:bd:c1:ac:3b:96:2d:31:b6:b6:f2:ea:d9:48:12:09:ae:d1:
1e:33:45:65:dc:66:e3:6f:2b:d2:57:75:d2:e2:ce:88:97:e2:
cb:fb:b1:6e:2e:4f:bf:be:78:b2:1e:c8:82:76:b3:90:31:c1:
04:32:5d:c2:92:93:be:05:ee:5c:66:42:f6:b0:6c:43:82:8c:
5e:bd:8e:64:07:13:db:f6:5b:38:e7:86:33:fb:f8:11:f1:b1:
e0:05:2d:5a:68:ad:ce:f7:00:b6:d4:79:e4:63:93:b7:c6:a2:
5d:f2:31:f9:fc:44:f1:94:7f:c2:f2:6b:44:7c:8e:0d:c1:c2:
bc:1a:89:ca:ef:63:e5:0f:30:74:97:da:fe:43:1e:b6:bb:cf:
3b:93:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:17 2026 by rpki-client