Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier: GfTgVJgiUNHlvVg4MJ/TcEFmtAbVkLIgapIFzuA9wD0=
Subject key identifier: C6:3F:AB:5F:82:18:D8:9C:A6:8F:FA:C0:D7:13:1E:39:83:7D:8E:7B
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 019D37899CF22F2B1B79B1E8BE6B0C1CB830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number: 125F
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: H-zR6ky2pDadloAxkXUrEUDR0Lw.roa (hash: lG6oXiAUIS6xft8V5DugdkR0sps6sV68ctJDl4dFR2E=)
2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: MdohaeGR1qDhhfhbIzcyDCwUrUWXpRPg0Bki0FFqLL0=)
3: cwRccrAENANpUtgyG-cs76t2uhQ.roa (hash: UiM4/U2KaMcgUdcESji12E4Ep2EXmuZnwMAQ53YQTaw=)
4: lLChUBZNxYsI76RgX__pDESB_OA.roa (hash: 5jzvmBS7qQYnrtTH7wbbIQMDBZ7lUHZfG/KhrPJAXYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9c:f2:2f:2b:1b:79:b1:e8:be:6b:0c:1c:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=c63fab5f8218d89ca68ffac0d7131e39837d8e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e6:6e:b7:d0:1d:4e:09:f5:ba:d2:26:63:be:
6c:0e:84:9d:bc:b2:53:2b:90:6b:6f:b8:22:1e:b6:
64:d8:c2:32:7b:85:8a:d0:91:b6:52:f0:51:ab:6b:
f5:fd:92:79:83:58:e2:91:13:87:b4:ef:99:e7:f1:
b3:95:a5:d2:27:0e:27:f5:7b:7a:5e:0c:b4:6a:70:
c6:84:a4:97:d5:a8:9a:96:07:07:c3:0b:b9:50:76:
3d:4d:3d:c8:8a:60:4d:fd:80:21:49:f3:e7:bd:38:
19:18:93:b5:29:ab:69:f3:4c:4e:ee:a0:b2:82:35:
58:76:ae:d6:3a:90:4b:78:cf:22:d1:0a:df:3c:71:
b2:d3:ae:3d:c6:cb:4b:7f:d7:b2:c3:05:81:39:43:
a5:bb:8b:a8:a3:e3:d4:5f:eb:d2:da:a0:a7:38:13:
05:b2:75:2d:fb:2c:66:5c:47:ca:db:52:af:5c:5e:
76:34:c6:2f:e5:9f:6d:dc:ff:c1:17:81:67:81:59:
bf:5a:4b:db:56:21:a4:8e:b5:b3:12:f8:49:5f:47:
20:01:90:37:49:52:e1:f8:6b:a6:a9:d0:a6:41:cf:
54:8c:16:21:9c:40:d1:8c:80:5f:af:bb:85:b3:3f:
e0:64:ea:c4:d6:93:87:5d:78:e3:7a:de:6d:0f:25:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3F:AB:5F:82:18:D8:9C:A6:8F:FA:C0:D7:13:1E:39:83:7D:8E:7B
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:72:e7:7e:44:58:48:5e:d3:eb:01:f2:71:d6:7f:4a:2d:
24:73:12:e0:1e:cc:d7:0b:4e:c9:b8:17:99:e6:72:a7:45:30:
65:a9:91:cc:ae:96:96:19:37:98:f7:c7:93:37:47:ae:45:a7:
0a:a1:5c:71:01:c8:0c:a9:d7:da:88:16:91:b7:1b:c6:56:4b:
ff:1e:d7:e9:3b:be:79:36:c5:ae:23:de:81:97:d3:6f:95:79:
9e:d1:09:62:78:e2:ba:c1:a5:9c:18:ee:13:8f:5b:cf:5e:4b:
06:c1:e4:af:fa:fb:80:5f:e5:56:64:3d:2b:67:cc:85:38:ec:
8a:30:99:9d:36:7b:f7:53:0c:78:7e:cd:df:56:4a:b3:fc:e7:
09:9c:92:2f:ce:40:00:d6:62:93:dd:f9:01:67:d3:fa:40:9c:
66:dd:74:e8:e0:16:0d:3c:10:88:ed:da:ad:59:b2:58:99:db:
a6:e1:f5:ba:81:3c:a4:b8:06:24:6a:01:1b:64:10:6d:ad:35:
57:e0:4b:ec:2f:87:07:d9:8c:ab:e9:90:45:be:96:0a:3e:d2:
e6:62:93:20:89:72:18:44:e2:f4:be:f7:b4:2a:b6:f2:4b:17:
c1:16:65:3c:ec:dd:88:64:b8:22:69:3e:d2:72:d8:48:27:11:
ab:e1:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:27 2026 by rpki-client