Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: mvhZtpUp8Pi0Qy9oRg5VCGPXo+j7zmXGLxmP6TnljAI=
Subject key identifier: EC:F4:A9:4D:24:32:F9:57:63:58:28:60:95:D6:77:FC:98:E3:50:BD
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019D375249DD0E387513EE02E592BE2BA0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 15CA
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa (hash: j1who2P7dA+z1wAH/SO7xSlnqBCmbnDiBNhev3xgB9A=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: MHnv2CIl4Ju18J0ElAzqNHa4fMU3dW6jSHUcctfPdzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:49:dd:0e:38:75:13:ee:02:e5:92:be:2b:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=ecf4a94d2432f9576358286095d677fc98e350bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:be:29:34:19:13:fd:41:31:22:05:48:6f:
dc:c4:15:59:09:0b:73:0e:45:09:79:66:52:7d:de:
80:4b:4f:b6:e9:ec:3d:80:e3:57:c0:51:d6:d0:fb:
ef:50:09:2a:9f:07:1a:26:02:06:49:e0:31:d7:67:
b4:7b:56:f0:e5:33:12:13:e2:43:b1:44:f5:29:fa:
18:99:61:c0:70:ac:b7:7a:31:cc:14:d8:f2:c1:9d:
6d:7b:39:68:18:32:ce:b0:b3:bc:53:d3:be:78:30:
fe:0f:11:95:88:d4:c1:ed:44:fe:4e:1e:08:86:a9:
28:cf:41:c3:7a:7b:45:12:30:9c:5e:18:aa:20:f3:
ee:82:f9:6c:a4:de:66:c8:ee:15:da:e5:c9:70:2b:
cc:37:89:86:bf:a9:e7:13:1f:4b:33:93:c1:8b:7a:
1f:d1:96:24:ae:8f:37:c9:1c:88:bf:fc:1b:7b:0c:
3f:2c:e4:62:a0:f0:f3:7a:6f:1c:9c:a3:1a:5a:de:
46:85:dd:dc:87:92:e5:fc:a2:9a:16:64:90:bf:1c:
be:e0:54:5e:cd:b4:bc:c7:b0:80:99:5a:51:d7:da:
7b:73:b2:f5:93:4e:8f:ad:7d:c7:1c:3b:b6:ba:90:
8b:2b:82:97:b7:59:88:85:6c:63:38:c8:5f:45:b3:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:A9:4D:24:32:F9:57:63:58:28:60:95:D6:77:FC:98:E3:50:BD
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e6:6e:68:9b:74:8e:2c:0d:22:23:ec:25:19:4b:e8:11:d8:
71:24:ce:d7:16:cf:a7:3c:93:db:78:4f:34:b5:94:fa:6a:58:
08:0f:b8:9a:f9:7d:87:c4:76:d6:cc:25:1b:ea:94:a1:50:aa:
5e:d8:34:fd:18:04:53:64:0e:bf:b2:98:15:9c:f9:5a:0a:fa:
63:4b:e6:27:ff:6a:05:9b:bf:8f:94:29:64:a4:83:64:d2:76:
7f:2e:a8:f9:c9:b2:a5:fe:b8:f5:ef:d5:03:c9:fe:fb:f1:29:
7c:d4:92:c8:21:1a:ba:c9:97:18:22:d7:ef:f1:b4:e8:c3:d8:
21:7b:34:a4:2c:48:8f:96:13:0d:5a:7c:85:a7:f1:4f:fb:bc:
37:6e:96:47:cb:d6:1e:49:30:9f:bd:32:d3:ea:cc:48:15:57:
74:f6:9b:22:52:26:04:09:49:fb:ce:d9:3b:8a:f1:8a:2d:11:
8d:67:c5:c7:5d:ed:82:cb:2e:f4:ca:f0:34:99:d3:de:4d:db:
0a:44:ae:47:78:c7:e2:45:f2:97:61:15:fb:be:29:70:7b:f8:
04:33:ea:fa:6a:09:4f:65:40:5a:59:0d:21:b3:9a:9e:f5:f6:
59:7a:8b:ed:5d:5c:52:35:de:9c:a1:71:82:9d:09:9d:a3:a1:
f3:e4:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:32 2026 by rpki-client