Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json)
Hash identifier: qrRkw/7Tmq+/StH6vutqBP5JzW7q5Zw422tUjWSbtLQ=
Subject key identifier: DC:58:2D:F8:B3:4C:2F:D1:C3:3E:34:42:AE:AE:BA:84:DB:EF:6F:52
Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64
Certificate serial: 019D37C0A89C38306E81CC28FB009AD2825A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: HZdZOZG7D2oKrLkY2bdU9lK5i9ZJ7E6mYX1+6lC5rLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a8:9c:38:30:6e:81:cc:28:fb:00:9a:d2:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=dc582df8b34c2fd1c33e3442aeaeba84dbef6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:ba:73:e3:c0:de:9e:82:17:77:f1:e4:7b:
2f:e5:dc:04:9f:19:90:ee:b0:97:56:05:fa:0d:ef:
f2:3e:3d:1a:7c:e3:60:f2:d4:3b:16:5d:e5:3b:83:
65:c5:42:ff:16:2c:3f:19:e5:2a:d4:64:c3:b2:c9:
11:88:12:df:3d:4d:46:1c:2c:19:17:8a:73:09:69:
ee:b0:e2:b2:0c:0b:bc:38:d8:95:de:8e:08:bb:e4:
e8:2b:b7:e1:d3:86:f0:f8:47:33:57:59:f0:c5:f9:
e6:3d:38:f4:8d:51:a0:de:ec:db:ab:31:c4:9f:01:
aa:b1:d1:ec:6d:81:45:91:69:d7:0b:c9:eb:7b:dd:
c1:6c:ce:12:a7:56:c0:dd:55:e6:e7:26:6c:fb:60:
25:6d:59:da:c2:40:a1:c2:c1:10:1e:5c:d8:94:80:
e5:0a:a3:f5:a4:31:f2:33:12:be:24:fd:bb:01:99:
48:68:5d:6e:4c:46:9a:13:81:fd:84:bf:eb:18:17:
7a:5a:21:13:47:6a:c5:16:79:46:d3:6d:bb:d1:a0:
3b:22:9a:01:25:51:80:6b:69:ab:d9:22:aa:8d:61:
7f:92:da:7a:00:b9:26:2a:c0:25:43:74:52:21:e3:
14:d3:03:9e:99:5f:5e:ff:0c:c9:4b:1c:7b:49:33:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:2D:F8:B3:4C:2F:D1:C3:3E:34:42:AE:AE:BA:84:DB:EF:6F:52
X509v3 Authority Key Identifier:
keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:78:25:68:1e:5e:68:1b:ec:af:93:94:60:18:be:c9:d5:2c:
18:53:a6:5e:6a:89:49:79:60:b7:e8:51:f9:b9:ee:3f:a2:66:
76:c0:a2:7e:3c:0d:f6:74:5f:7d:2b:94:b6:b1:d0:f9:5e:7d:
6f:d1:c6:1d:1f:86:45:01:67:ef:97:d3:db:6f:90:84:b3:14:
b6:71:33:60:aa:b5:47:00:48:c2:ad:7b:a7:bc:05:d0:82:73:
16:64:e9:9e:b9:1f:3d:3b:9c:bd:5d:7e:28:0f:7c:a9:31:bf:
fa:e9:05:dc:ec:b1:9e:4d:e2:12:6f:64:b9:a7:3c:20:d9:b1:
39:e9:cc:68:ea:e8:1f:e0:d9:ca:38:e5:aa:6a:26:a2:77:7a:
dd:51:c7:42:cd:39:17:3c:fe:48:d5:72:a4:f9:7c:44:66:65:
0d:e4:c1:df:77:ef:fe:c9:72:ec:53:d6:65:64:c7:16:d7:6c:
97:30:61:f1:3b:23:13:fe:18:30:4c:d0:9b:98:58:e7:05:2f:
16:88:8d:83:07:6f:ed:77:d9:0a:e3:1f:d5:65:0c:45:e9:87:
68:2c:54:40:d1:28:9b:8e:33:6e:9f:51:4d:89:33:b5:34:38:
02:d1:1b:06:67:58:2f:1e:87:53:49:3a:19:0e:e1:3c:b9:f2:
dd:30:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:11 2026 by rpki-client