Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: QJcF5W9RzUpyCYYQUm8zQL8f2TYkcawyGYBFiWTD2hI=
Subject key identifier: 39:61:D7:CF:22:AC:74:60:00:02:3D:3E:FB:35:6A:5D:C3:C5:4F:B0
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 019D28F2687A952B625EA5CB66AFB904C5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 095B
Signing time: Thu 26 Mar 2026 07:01:08 +0000
Manifest this update: Thu 26 Mar 2026 07:01:08 +0000
Manifest next update: Fri 27 Mar 2026 07:01:08 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: rPRVBu1OuBRihWvscxjc3nkON1Qsw1iyKw8H/z9+vcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:68:7a:95:2b:62:5e:a5:cb:66:af:b9:04:c5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Mar 26 07:01:08 2026 GMT
Not After : Mar 27 07:01:08 2026 GMT
Subject: CN=3961d7cf22ac746000023d3efb356a5dc3c54fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:44:ec:32:93:03:47:83:06:2f:80:21:75:
56:27:58:98:8c:20:e6:c0:94:e6:4c:2a:df:9a:1a:
ed:b9:1f:a2:b0:4e:ed:12:c3:cf:ec:33:da:c1:cf:
a1:e5:85:0c:90:2b:dc:8d:9c:41:80:d3:60:04:7d:
a1:fd:ea:b7:f9:43:d4:8a:2f:51:f5:9c:bf:b4:e5:
23:f7:65:76:d1:bf:02:8f:1f:17:63:f7:27:1f:7f:
15:93:cc:65:84:d5:28:a4:f2:b6:2a:c2:d6:8b:36:
d5:2c:e8:25:72:72:72:bf:a7:5a:23:15:29:f5:4c:
65:1d:1b:ad:74:d2:fd:8e:c7:bf:a0:96:96:67:a2:
7b:7d:d5:4a:d7:2d:69:fb:3d:cc:38:5c:9a:1c:35:
5e:98:61:df:2b:c3:fe:b9:ae:a6:b8:9e:15:00:52:
e0:8f:29:24:cf:e9:c0:17:8f:04:9b:65:86:14:8c:
2d:79:cc:0b:83:43:23:a2:19:77:2a:95:02:cb:e0:
0e:87:93:95:15:f8:5b:84:0d:5d:16:da:04:90:85:
c1:62:1e:b5:da:6f:88:4b:96:1d:77:15:6b:b4:03:
e1:1e:54:8c:77:ba:b4:51:a3:a9:f3:b1:74:43:5d:
87:2b:9a:b9:a1:da:d4:3f:a5:93:47:85:5c:ff:b9:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:D7:CF:22:AC:74:60:00:02:3D:3E:FB:35:6A:5D:C3:C5:4F:B0
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:ba:e8:e2:e7:4a:f1:9f:99:37:f2:5d:23:39:18:3e:51:
29:9d:0f:eb:7b:86:f6:7f:53:82:a7:8a:6e:81:0c:4e:ff:7c:
d7:fa:db:19:e1:b9:6d:67:be:aa:c9:86:9c:60:c3:bf:67:3b:
6a:2e:e8:a2:18:06:48:3c:61:22:f3:ed:b1:49:46:d2:3a:c7:
68:69:91:50:3f:85:2f:74:44:2a:75:de:3d:c9:9c:78:07:b0:
83:65:1f:bb:15:7f:9b:35:8c:0d:00:a2:bd:63:13:35:1a:c2:
0e:96:94:18:a0:c5:88:54:b5:d4:e4:66:16:a8:68:01:bf:26:
6d:c8:99:ff:b4:f9:14:11:bf:51:f9:11:d4:16:cc:35:c0:f8:
53:b7:0f:2a:e8:eb:f7:83:2c:a8:f8:b2:a3:03:9a:e5:e8:3b:
b1:62:c0:bf:45:11:52:b0:17:24:62:d5:45:fc:14:93:44:f6:
25:23:13:d5:97:6f:0e:45:4d:4c:e1:20:56:39:d0:4c:92:65:
2f:0a:aa:83:80:59:60:64:5c:15:7f:74:31:be:6b:11:ac:db:
ca:1f:db:97:d8:f3:ea:da:88:a1:54:46:90:9a:54:7a:f7:1a:
26:f5:21:11:35:0e:64:8c:c9:fc:c4:e8:9f:19:7a:8a:6d:34:
11:45:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:26 2026 by rpki-client