Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json)
Hash identifier: 7MXH3veHugN446271m6oXRiCyPZztVxx08l4xbaS0Vo=
Subject key identifier: 9D:89:29:7C:C9:DC:A7:CA:CD:A0:92:4E:F2:04:25:88:CD:93:04:59
Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Certificate serial: 019D3909CDFA14522B5ABB52AC0072CE27A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
Manifest number: 0440
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: XGuM0473azxefrUNHJrKvy0xhL2n74hP7k70klxpnh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cd:fa:14:52:2b:5a:bb:52:ac:00:72:ce:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=9d89297cc9dca7cacda0924ef2042588cd930459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:1d:d1:31:4a:dd:fb:4e:d8:d6:45:cb:e5:
61:11:57:ff:bd:b1:74:47:58:ff:2c:4c:0f:20:d4:
e5:69:e0:fb:71:e7:34:1c:5a:74:d0:73:ea:0e:05:
fd:cc:ee:d8:a4:28:9d:ea:e2:43:c9:6c:71:e1:05:
69:64:bc:19:08:28:0a:49:6f:68:3c:ad:90:d0:48:
a3:a2:cf:96:db:ff:5b:05:a8:59:90:e9:02:b5:fe:
00:26:7e:5b:e8:83:4e:91:7c:57:28:16:17:6a:55:
09:30:ee:29:0c:c4:71:18:9e:05:3b:53:d9:e4:1e:
03:e5:d5:39:12:f7:8d:3d:db:8d:0d:f8:5f:84:f2:
4f:16:19:33:a6:31:da:1c:f3:94:ab:15:d7:65:5c:
1f:c1:3c:03:81:03:c5:59:00:8f:52:2d:29:92:ba:
dc:6b:38:83:00:68:86:90:a2:c8:7b:bb:2d:a2:0a:
f8:70:6c:44:ef:7f:92:98:bc:3d:76:b9:d8:ad:b9:
f7:49:84:01:93:e4:b2:b4:3c:ac:70:c0:79:b5:02:
99:2c:dd:d8:58:df:6a:5a:3c:e4:0f:d3:c7:f6:51:
ad:4d:63:63:99:2b:b4:eb:0b:73:fe:1f:bc:ed:44:
8c:63:20:67:a3:47:2e:f0:ae:e9:8b:49:47:b0:0e:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:29:7C:C9:DC:A7:CA:CD:A0:92:4E:F2:04:25:88:CD:93:04:59
X509v3 Authority Key Identifier:
keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:38:7d:e8:c9:66:43:62:ed:3e:58:12:64:be:5f:db:5c:1a:
05:0f:21:35:69:6d:90:2d:8b:c0:05:d4:94:84:6d:5e:48:6a:
f5:32:59:c7:98:e9:32:0c:64:47:28:28:35:27:98:11:87:b1:
9f:f6:7d:21:19:54:c4:9f:e2:0b:17:d9:62:50:52:f6:a3:b4:
b5:8a:f4:6c:17:1c:15:03:bf:c7:0d:52:63:38:a0:ff:6b:70:
33:bf:b9:2b:a0:dd:87:25:c0:bd:25:bf:a9:fa:fe:60:f4:13:
9c:0e:53:da:1d:fd:59:b9:e1:00:8b:64:61:b4:33:60:ac:89:
4f:2e:8b:1c:bc:92:89:f9:f5:e3:a5:42:78:1b:33:bb:d0:f7:
32:d4:a0:eb:dd:e4:df:86:a9:e2:76:fd:be:c2:a9:f5:dc:7f:
b9:63:27:2d:9d:6a:d5:4d:aa:1c:d4:50:91:22:5a:28:15:f9:
4e:fe:be:92:b6:30:bd:c3:29:24:bd:90:ae:d7:62:cb:01:57:
53:af:b7:fa:15:48:ac:da:8f:58:f8:ac:bc:92:34:8b:d3:6d:
de:cf:64:3c:54:24:41:f7:15:c9:b8:0f:c0:9a:6b:b7:3d:ab:
ef:75:d0:51:97:bd:2e:29:49:5d:4c:e7:6c:ed:6a:9b:67:23:
97:a2:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:18 2026 by rpki-client