Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: VJUreEkz3Hv7ZlyqsVshA516JDfpWn6qDXvpPuYz1BI=
Subject key identifier: 73:5F:E0:D3:CC:E2:68:57:AD:0C:11:33:89:E3:75:71:90:B1:66:30
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019DCF3E1B80FB9E27F0311CCDA7E74078AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 14:00:47 +0000
Manifest this update: Mon 27 Apr 2026 14:00:47 +0000
Manifest next update: Tue 28 Apr 2026 14:00:47 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: pBxsOHMt8MlqrXYpryPZB4L2XzSkFPXrauTufakZoeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:1b:80:fb:9e:27:f0:31:1c:cd:a7:e7:40:78:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Apr 27 14:00:47 2026 GMT
Not After : Apr 28 14:00:47 2026 GMT
Subject: CN=735fe0d3cce26857ad0c113389e3757190b16630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:cd:01:04:4b:27:a5:ae:34:8f:a4:92:11:
83:76:ee:b9:c8:b7:32:cb:10:a9:6a:3e:b5:42:0d:
8b:24:02:4c:ba:18:b5:50:13:82:37:6e:6f:2d:e0:
50:ad:69:d1:0e:d5:22:c3:7a:df:72:66:51:a5:7a:
07:c1:15:a4:2c:56:12:49:15:67:0a:e8:bc:7d:48:
9d:ef:ef:3f:88:66:e2:24:91:22:38:9d:63:b2:73:
a1:96:2b:10:88:f0:2c:5c:61:92:51:c0:77:d3:bf:
09:8c:51:63:29:6e:73:e9:b7:44:44:49:fa:04:5a:
5c:69:b9:78:da:62:00:bc:87:37:3f:ce:f9:ba:99:
bf:a3:4c:73:4f:4b:3e:4b:8b:05:50:cf:29:8e:31:
b0:7e:19:e7:37:0c:54:11:5f:ee:dc:46:12:ad:31:
4a:ec:87:71:8f:0b:2f:a2:9d:8a:13:19:b2:fb:e3:
02:f3:bb:4d:2d:a7:28:7a:ca:b3:9b:a8:c4:1a:12:
b3:bb:fe:c2:ce:bc:d3:8f:de:79:da:6e:d6:c2:e5:
3a:a7:f1:33:3c:b1:26:28:f2:42:1e:13:a1:f5:65:
db:f2:e0:d7:a1:f1:5c:ae:fb:a2:f8:a2:8b:d6:98:
40:1c:aa:41:86:42:fc:51:7f:ad:37:77:78:bc:7f:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:E0:D3:CC:E2:68:57:AD:0C:11:33:89:E3:75:71:90:B1:66:30
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:d3:b2:58:33:b4:59:ac:2b:31:8d:67:bb:d8:6c:f8:19:
df:18:4a:de:bd:21:87:9e:e0:08:7f:ab:6b:59:a0:74:2e:c5:
50:42:f4:50:c4:d5:65:81:21:8e:82:57:c6:17:53:df:62:0a:
1d:97:ad:3f:1d:5e:6d:f8:a0:8c:28:cb:9d:c4:f1:15:4e:5b:
28:27:a2:df:72:51:86:7c:50:75:3d:ff:c2:a2:dd:d7:1b:23:
1d:37:71:c4:e9:5a:4b:7c:30:87:10:f3:d0:a3:83:97:10:29:
00:64:8b:9c:56:bf:85:66:fc:45:f2:29:a5:71:d4:9e:0d:1e:
b0:61:dd:88:66:21:6a:c1:56:43:58:3e:32:00:55:61:d1:bc:
1e:f9:4b:7b:9d:26:ca:7b:14:da:2f:ed:c6:99:77:4d:45:50:
53:64:6f:bc:f7:e0:ef:3f:2d:4f:2b:51:a8:49:72:36:47:5e:
63:37:2c:ca:a4:99:68:c4:f7:7a:d6:36:a7:fc:a1:42:a9:8a:
b5:0d:5e:98:7a:89:a1:64:45:23:5c:b8:1e:fc:65:dd:96:06:
38:92:2b:4a:c7:3b:71:6c:01:17:90:a1:6c:1e:5d:a6:73:9a:
49:b1:d1:bf:99:a1:61:d0:6f:44:79:3a:1a:b7:47:6b:15:bb:
0f:0f:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:10:05 2026 by rpki-client