Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier: LBGomjgDzTiLzbrFzoS7CMuhSFkb3oPnIO8HhHkeipE=
Subject key identifier: 6A:38:DC:97:C6:93:8D:55:20:F6:25:C7:8D:0D:98:45:46:A8:35:1C
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 019D2703A8E66E0F595CFBBCC687A5E4DF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number: 15CB
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: 24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa (hash: aZJOy0CyZGrP4yrwBkGXYusHSlYLrLzIGIdzThr5g3M=)
2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: wOyJCUX0GWACyNPWqPcZ/16nn/wm7Ee7qzDuf5Xm0MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a8:e6:6e:0f:59:5c:fb:bc:c6:87:a5:e4:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=6a38dc97c6938d5520f625c78d0d984546a8351c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ee:44:95:08:41:77:06:6f:50:ac:34:b0:77:
58:8e:5b:84:72:28:a3:a1:7e:ca:ef:28:fc:68:9a:
8e:32:eb:06:1c:b2:dc:62:63:8d:5c:df:de:0b:1b:
0f:59:1c:8c:64:91:20:e5:44:13:c4:5c:6d:8b:f8:
b1:24:a8:70:d2:b4:ea:c6:a7:02:8a:ef:ba:dc:8d:
3f:76:27:26:7d:99:30:84:41:0d:c5:2e:db:52:b7:
7c:ac:84:5a:c7:0f:5d:f4:1e:2c:67:24:6d:43:c6:
91:f9:4a:54:b4:4e:44:3e:e8:3b:5d:9c:a3:e5:be:
1f:6f:28:86:3f:e1:4a:b6:63:44:c9:07:77:13:de:
59:a2:70:ce:c0:9e:f5:47:03:b6:b4:b0:ad:72:76:
93:8b:39:3b:ef:08:be:01:ca:31:8a:c6:58:ff:9b:
70:70:c0:70:65:ec:d0:d8:80:12:fc:62:29:4b:c7:
64:f2:2e:3c:1d:08:98:21:26:f4:ee:80:82:e0:0a:
f2:f1:8d:c2:31:dd:66:18:32:b0:24:a6:a9:02:f3:
e4:c9:4d:ac:a7:93:2e:38:2f:5a:72:a6:dd:9d:b0:
02:17:0c:ab:49:bf:bc:02:c4:92:e9:fc:c0:81:9a:
4f:2c:8a:36:49:c7:e6:74:74:2f:9c:4c:b0:0a:9c:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:DC:97:C6:93:8D:55:20:F6:25:C7:8D:0D:98:45:46:A8:35:1C
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d7:46:90:60:be:23:e3:f7:54:be:01:b4:10:09:6e:a2:96:
32:03:fa:e1:21:5d:0b:15:de:59:7f:f5:6d:b8:1c:3a:be:e1:
82:76:06:67:78:80:13:53:86:b1:45:e4:4c:10:a1:a3:a8:1b:
e4:3d:e8:3c:9b:f9:12:3d:3a:1c:1a:50:99:df:e4:2c:9e:2a:
ae:53:b1:9f:38:b3:3e:f6:f5:cd:66:ed:f5:27:32:93:4f:75:
b9:bf:76:c7:36:c6:20:fa:da:a5:f7:2f:21:b8:01:ce:23:d7:
5e:2c:b2:6d:c1:20:1e:e1:bc:a2:8d:4b:18:a4:57:7c:b9:8b:
0b:27:3d:8a:11:b8:8f:b8:59:26:df:4d:04:67:ae:ef:8b:21:
1e:ab:52:2b:7a:3f:7e:ff:5e:3d:ff:0d:44:a9:2f:c0:97:58:
3f:c6:43:68:81:8d:ca:1e:ab:11:22:57:fe:39:09:91:4b:79:
e1:c6:52:51:24:cd:c9:4c:d4:00:51:25:7a:c9:b0:0e:54:07:
96:3d:c0:12:9f:38:41:93:f4:ed:36:c2:ca:0e:ea:ca:f5:ff:
e7:0c:ef:f0:08:7c:d4:d6:7c:db:64:14:a8:88:b5:7b:41:c8:
4b:b9:d3:6e:8f:00:21:f7:9e:af:6e:f2:fe:80:5f:64:1c:14:
fe:d7:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:19 2026 by rpki-client