Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier: WjIN2ou6tR7TBJK1aC5ir3CB2/NX9kGtUWwxVlUqp8k=
Subject key identifier: E2:C5:8F:BE:BA:66:20:B3:A9:0A:D1:B7:C0:A3:76:52:30:10:B0:21
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 019D27A934B7098C90CB15F0F5F7586F7B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number: 02DA
Signing time: Thu 26 Mar 2026 01:01:33 +0000
Manifest this update: Thu 26 Mar 2026 01:01:33 +0000
Manifest next update: Fri 27 Mar 2026 01:01:33 +0000
Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: 4k5ao2coyZNSjpVhVeSEqmwzYrItFBExa5fRvYsPca0=)
2: tLR8Xx9kGTwthIYBMxfEvODUS6s.roa (hash: KHsotfa52tk8ozmtkTvPKINqIBAb1ObEd0CzRfZjCVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:34:b7:09:8c:90:cb:15:f0:f5:f7:58:6f:7b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Mar 26 01:01:33 2026 GMT
Not After : Mar 27 01:01:33 2026 GMT
Subject: CN=e2c58fbeba6620b3a90ad1b7c0a376523010b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:f6:5d:16:95:2e:e7:72:80:66:24:42:ed:
5c:02:04:ef:33:48:fc:c9:62:66:91:d4:29:ad:da:
ef:8b:c1:69:74:e0:cc:f6:08:ca:ab:f6:c6:f7:c2:
c6:e7:7a:4d:cf:a8:28:ac:17:70:e4:6f:a1:27:17:
9c:47:8a:aa:3a:d8:70:28:e8:92:48:14:73:80:31:
1d:32:4d:38:e8:17:c2:c1:86:da:c1:c6:ea:82:de:
75:9d:3c:3e:be:ab:3b:73:85:9d:f0:52:21:93:bf:
da:55:2a:69:a3:4b:b5:31:45:1e:b3:48:e5:2d:cf:
00:4c:cf:91:19:0b:ae:a4:d4:31:4b:2a:30:fd:7d:
5d:01:55:25:10:8f:74:ab:13:0e:f0:c9:b6:54:0b:
dc:37:8d:2b:36:a1:fd:7a:9b:1f:a2:de:19:86:9b:
4f:14:58:13:6e:ef:67:f7:e4:6b:82:a9:a4:b2:88:
3f:8f:32:f6:8a:6f:98:d4:29:3c:b8:68:5c:75:14:
d9:41:4b:e7:af:a1:98:68:65:c5:e9:38:65:aa:f5:
e9:33:c5:ff:26:c5:d8:7e:bc:2e:a0:37:0d:8a:b0:
eb:e6:68:06:2f:0a:63:16:57:e5:8e:5e:f4:59:8c:
42:ad:a5:b5:7e:35:2a:e3:68:f5:cf:4d:73:dd:2e:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C5:8F:BE:BA:66:20:B3:A9:0A:D1:B7:C0:A3:76:52:30:10:B0:21
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3e:f2:de:3f:4c:32:b6:75:de:b8:39:c6:3f:94:87:2c:63:
a0:b2:2b:1a:63:9f:a1:ee:e4:f8:e7:0d:e6:fe:69:c9:93:fe:
ab:3f:96:05:48:cb:78:90:28:76:14:7f:2b:08:0e:02:1d:0b:
72:5e:92:e7:0d:47:09:30:78:0c:69:ec:4f:89:a1:9e:23:f9:
71:f3:55:de:73:f0:15:ab:34:76:5f:e6:b7:bc:bc:f0:85:64:
13:c7:53:f8:fb:06:a4:86:05:61:3f:45:81:2b:79:4d:ea:25:
e0:a8:5e:99:e7:2d:20:32:52:93:50:e9:34:70:64:3a:3e:1d:
72:65:ac:fc:9c:89:e4:38:b0:e4:97:ea:47:72:ba:c6:dc:19:
96:b5:d6:f5:8e:17:23:55:31:e2:21:f8:ef:32:ad:d8:38:57:
cf:cf:27:90:85:66:51:f5:bc:e1:5e:f4:0c:e1:b0:de:c8:b7:
35:9e:5b:f5:fc:c3:4c:e2:d8:9d:7a:51:fd:36:e6:45:81:c6:
13:d9:55:9e:83:09:fb:62:c7:53:5a:13:a3:8f:9a:a5:8e:be:
c2:ca:0c:ec:36:0f:7b:78:a3:cd:84:1f:b9:8c:7e:64:f5:69:
73:33:c1:af:4f:32:db:34:f8:fe:65:31:87:f5:9b:85:15:64:
e8:0e:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:15 2026 by rpki-client