Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File: mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier: IV+0inxmQbiYhkclB22bUdepmxkVzUgkEWLTIYAPptY=
Subject key identifier: BB:08:A4:1D:06:6A:C6:D3:9A:49:3F:92:DE:2E:66:5F:CF:E9:A7:E6
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer: /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial: 019D254C8083F4476E4502FB3E39161D1072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number: 0267
Signing time: Wed 25 Mar 2026 14:01:03 +0000
Manifest this update: Wed 25 Mar 2026 14:01:03 +0000
Manifest next update: Thu 26 Mar 2026 14:01:03 +0000
Files and hashes: 1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: Dr3h4hpgYVEc/ElOcoVF7quHXjq67DgDeoiZI97P6Kc=)
2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:80:83:f4:47:6e:45:02:fb:3e:39:16:1d:10:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Validity
Not Before: Mar 25 14:01:03 2026 GMT
Not After : Mar 26 14:01:03 2026 GMT
Subject: CN=bb08a41d066ac6d39a493f92de2e665fcfe9a7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:5b:18:48:30:fe:66:2f:f1:7b:5b:9b:95:
2e:00:71:bc:c5:cd:7c:7e:76:9b:57:89:46:f5:98:
96:7c:ba:10:64:de:81:74:67:a3:37:5b:d3:d0:74:
29:22:57:81:57:72:ea:4e:34:e1:3c:05:22:78:52:
25:98:8b:05:7f:6c:56:40:84:ff:54:5c:ef:a8:02:
23:58:3d:65:ab:e1:d4:c5:d4:59:9a:71:b7:68:62:
47:15:7d:f4:3e:31:5e:e8:a4:a3:7a:4a:b4:fd:a7:
e2:24:9e:70:7d:6b:01:c2:12:1b:b7:57:98:45:6a:
c5:e8:2a:7b:71:78:02:56:14:a2:ac:14:5a:f4:36:
42:56:01:0f:42:1c:55:ad:92:19:29:4b:97:bb:6f:
98:59:c8:0e:6e:94:a6:10:af:a7:6c:86:59:51:f8:
3f:b8:6e:2f:9a:37:b8:b1:c4:c0:31:d5:15:34:d5:
5e:62:8a:e4:18:e7:47:21:88:04:87:58:24:6d:c9:
6f:e2:2b:cf:d2:d6:54:12:2e:20:a2:67:46:01:61:
4a:6d:55:ef:7c:5e:a6:c8:92:8e:24:e0:4b:0f:f4:
d3:42:03:02:1b:f8:b6:78:c7:86:b3:6d:a7:20:1b:
f4:43:05:e4:13:06:9b:8b:28:76:a7:5f:2a:5c:dd:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:A4:1D:06:6A:C6:D3:9A:49:3F:92:DE:2E:66:5F:CF:E9:A7:E6
X509v3 Authority Key Identifier:
keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ba:02:95:27:a6:cd:f8:ee:5e:ae:75:fd:76:4a:a6:4c:7d:
46:98:5c:a0:1b:49:98:62:47:76:8d:40:d2:24:d0:c5:e7:f2:
0e:22:2d:f8:1a:0d:3b:3f:8e:e9:98:08:40:2d:26:52:fb:a8:
ae:67:d3:e3:ac:44:c4:ec:e2:25:d4:43:fd:31:ee:31:b8:48:
59:5e:5e:58:53:1a:71:69:f5:45:73:1e:63:7c:2a:cf:b2:fa:
a8:3d:ac:f0:9a:15:b2:11:41:03:7c:ee:ce:6d:54:73:df:e4:
89:ed:38:6b:3d:46:e1:af:eb:42:74:f7:12:39:cf:cd:43:a5:
26:8d:f8:5d:7b:24:89:e4:53:65:ae:a9:e3:1e:d0:e7:b3:c6:
2f:c8:5b:e0:fa:ad:13:11:a9:af:20:21:48:59:41:77:aa:b1:
43:2f:b8:e7:74:fc:f3:39:a9:e0:a6:eb:44:8d:8b:69:a3:dc:
f7:e2:72:fc:18:e6:75:68:64:90:42:82:71:2c:e8:e2:e1:17:
1b:e5:5e:12:17:d9:63:ec:3f:dc:2a:ef:1c:bd:f1:1b:ea:31:
de:69:bb:a8:53:3e:cd:09:c9:6b:00:d8:df:0f:08:03:2c:a5:
0f:ff:e6:d3:2c:ee:d5:ed:1d:7a:4b:ac:b2:40:ca:f6:79:ae:
90:4c:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:53 2026 by rpki-client