Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File: mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier: QcVa4eKjh/S77eop9Cxo5Xs86DJvhYVoM8BhdXElRxo=
Subject key identifier: 57:F1:22:C5:F8:20:A6:76:C6:39:A9:D9:58:5D:EE:E5:1F:EA:62:73
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer: /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial: 019D32D0C186CFAD28AB166527617AEBA645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number: 026E
Signing time: Sat 28 Mar 2026 05:00:34 +0000
Manifest this update: Sat 28 Mar 2026 05:00:34 +0000
Manifest next update: Sun 29 Mar 2026 05:00:34 +0000
Files and hashes: 1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: ls2IKiRPibYX1VWs0IYdVafTKRmXZOwoXljgHkt1DnE=)
2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:c1:86:cf:ad:28:ab:16:65:27:61:7a:eb:a6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Validity
Not Before: Mar 28 05:00:34 2026 GMT
Not After : Mar 29 05:00:34 2026 GMT
Subject: CN=57f122c5f820a676c639a9d9585deee51fea6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:64:dc:20:6e:6c:da:a8:3a:84:83:49:3f:
1e:d6:4b:8c:5e:5c:2c:50:29:49:83:4f:e1:c8:33:
e0:0a:85:b6:4a:15:37:69:fe:e6:bc:26:94:49:79:
04:e2:ac:bb:f3:8f:9d:ac:66:23:7d:f9:e8:d1:5b:
43:c5:c9:d3:73:bc:23:7f:31:fd:2e:59:95:1f:b0:
e7:40:9c:a9:ce:bc:71:f0:67:c5:6d:c2:0f:4f:6a:
cf:7d:b9:ed:92:97:7d:51:6c:91:98:83:23:5e:16:
a7:af:a5:3e:12:a6:d4:41:9b:84:d7:eb:77:7c:2e:
a8:1e:ca:db:39:7b:f6:7e:d3:c5:07:1c:99:e1:69:
1e:91:be:b8:bc:94:62:c1:21:a3:e2:4d:c5:cf:c2:
05:f2:50:20:8c:e6:bc:0d:c1:e3:52:ac:ae:9f:89:
de:11:82:97:29:3c:5f:65:22:25:eb:b3:8c:48:e3:
32:7d:89:99:74:51:65:49:b7:a3:8a:50:65:b1:46:
22:a2:78:3f:79:cf:ac:e2:73:a8:10:eb:74:1f:20:
0a:72:63:ef:5d:6c:9d:4c:36:4a:f8:c8:0a:f4:65:
54:29:3b:33:63:cb:45:fd:36:f9:55:f5:31:bd:39:
e9:21:8b:41:a7:75:09:3c:04:ee:ba:1a:95:2e:5b:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:22:C5:F8:20:A6:76:C6:39:A9:D9:58:5D:EE:E5:1F:EA:62:73
X509v3 Authority Key Identifier:
keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a2:76:14:46:81:11:2c:77:d0:6e:3f:c4:27:42:3c:19:dd:
76:22:58:7f:f0:2e:e4:2b:1c:45:80:d1:e7:70:4e:ce:cb:39:
28:ed:ef:ff:a8:84:8e:4c:e8:9e:41:ee:c7:b2:ae:61:d8:65:
67:91:59:93:05:37:14:3e:fc:c2:c5:e5:45:14:27:22:91:0d:
5f:fa:5a:1f:df:ec:91:85:1f:e1:1e:78:0a:5c:3c:bb:eb:13:
fe:7f:44:fd:f6:f7:ea:7e:70:dc:ab:bf:02:10:e9:43:b0:d8:
a5:40:af:74:df:7c:e0:50:2c:f5:a4:b8:08:7b:a4:1d:68:f5:
76:4a:82:17:fa:25:e6:fd:b8:bf:e8:55:c9:57:cf:4f:a1:7f:
aa:89:f7:f0:72:4a:f9:1f:25:02:78:b3:6a:eb:cb:fd:d2:cc:
e2:ab:c0:e2:b4:3d:09:40:bb:88:fe:1c:1d:66:ca:ea:bd:bb:
16:ec:11:6f:d3:ca:ec:50:4b:b1:87:77:90:00:da:ee:ec:91:
c8:7c:a5:2d:3f:53:b9:06:6b:1f:a1:d6:93:db:76:c2:9a:f7:
48:f3:36:b7:c1:61:48:57:ad:06:5c:26:5e:c0:09:3d:03:df:
89:08:8b:13:cd:74:24:0d:3e:5c:20:95:da:20:3e:5d:42:ae:
fb:41:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:36 2026 by rpki-client