Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: FKFMGabBJ19Hwf+foboDX8FR/ma7zU5vzthNBz7F4gc=
Subject key identifier: 70:AB:9A:06:87:75:8B:ED:6E:6D:21:53:14:40:D0:64:07:6F:07:B8
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 019D2627ED75EDDAA1D63893E0159B179CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 151A
Signing time: Wed 25 Mar 2026 18:00:44 +0000
Manifest this update: Wed 25 Mar 2026 18:00:44 +0000
Manifest next update: Thu 26 Mar 2026 18:00:44 +0000
Files and hashes: 1: jgN5b340IqujXH8DiLAcaLBDPQg.roa (hash: vjTTYKgnFfE85jmKgHsh0LqEiHa9mFhJMA/4cn0Av3w=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 8iH49WBytS3H7Ykh0ldXeSddytlED7A+ulaXjl8HNsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:ed:75:ed:da:a1:d6:38:93:e0:15:9b:17:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Mar 25 18:00:44 2026 GMT
Not After : Mar 26 18:00:44 2026 GMT
Subject: CN=70ab9a0687758bed6e6d21531440d064076f07b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:91:fb:6d:96:3f:6c:eb:90:82:0c:12:b3:
9b:0c:c7:45:70:9c:0e:86:81:6a:90:d5:41:20:5e:
73:c3:35:a4:34:fc:2c:75:d1:dc:0d:37:36:3e:4a:
d0:30:b6:e3:b0:13:2e:10:9f:68:ea:23:6f:a1:c1:
02:a7:08:68:62:03:99:0e:5c:6e:bb:c7:31:49:f2:
cd:ab:64:ce:d9:b7:65:21:0d:6a:26:80:6c:34:7f:
5b:05:ee:1b:23:4a:ac:83:a1:e1:2b:84:6b:62:d0:
56:e3:56:eb:21:de:6d:d2:90:ca:15:b1:ba:0f:20:
73:ba:f8:a8:02:ed:86:b9:85:92:d6:10:dc:b8:9a:
f6:51:82:56:a0:f5:fb:5b:aa:e2:3d:40:b9:24:09:
9e:9b:70:91:8a:34:2d:1b:2d:19:1b:7f:7d:16:52:
69:3d:91:f0:41:08:34:80:d4:a1:be:e4:e3:f4:87:
35:a0:17:4e:52:48:bf:c0:6d:1e:0e:ea:ea:0c:11:
fa:7a:7e:b8:e0:70:6a:1d:8d:eb:9c:ad:d9:b2:16:
5c:e7:d7:28:7c:a6:8c:31:30:0f:af:26:d9:65:b1:
b3:de:6c:c4:f0:85:a0:ed:21:f2:39:d9:6c:f8:35:
ff:5f:3f:d6:f5:d1:b3:b7:ca:30:ee:e5:b9:ef:bd:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:9A:06:87:75:8B:ED:6E:6D:21:53:14:40:D0:64:07:6F:07:B8
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:b2:88:56:9e:d9:c8:17:e7:77:28:cd:1a:18:67:3d:8b:
50:91:ce:c4:fb:69:16:b2:2c:de:08:82:98:69:ed:9a:96:7d:
14:ec:8e:70:2f:e3:d9:4c:3f:63:fd:d8:05:f0:59:b9:93:a2:
a6:b1:68:9f:3a:76:d2:32:e4:13:bc:b1:e3:8c:87:28:b6:c3:
46:8d:5a:20:98:16:09:17:6d:1f:c9:70:0e:45:ef:5b:5d:18:
96:ee:a9:11:60:c1:72:4f:ab:c6:09:8b:fa:73:0b:4d:68:2f:
34:85:f4:e1:17:be:19:aa:26:0c:fe:0e:e9:dd:8c:02:77:eb:
dc:ff:c6:41:ef:c2:61:7d:0b:10:1c:d8:63:51:ae:7a:fa:82:
bc:37:b8:9e:92:b3:16:46:88:27:9e:32:a8:2e:93:49:1a:3c:
57:b9:8b:b5:4b:6c:10:63:a8:1c:29:99:2c:77:c3:49:37:54:
3c:7b:8b:c3:0a:c4:03:95:06:4a:f4:90:a9:c0:f5:dc:dc:d7:
8f:99:68:90:a3:3b:f9:30:6b:85:43:13:29:8c:9d:7e:a7:28:
6e:92:95:cd:93:6c:04:66:c8:8b:8b:79:00:09:b0:df:dc:75:
5f:d4:b1:c2:e0:f8:8c:d4:8f:8a:b7:dd:24:20:e8:22:26:21:
75:5f:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:29 2026 by rpki-client