Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier: pZrF1oG50urXvVpMA376zcn9oGfrNJRG1QymUfSaP14=
Subject key identifier: 69:7D:1E:AD:6B:EC:3F:6E:CA:CE:44:6C:61:4C:62:FD:51:7A:E7:2A
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 019D371B9884994F5CA0B3CA1D53B89F5DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number: 02E2
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: 0XF6TQ4PHHIIkTmg5vtV7AspxJztZeLMNNWFY8KWK5Q=)
2: tLR8Xx9kGTwthIYBMxfEvODUS6s.roa (hash: KHsotfa52tk8ozmtkTvPKINqIBAb1ObEd0CzRfZjCVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:98:84:99:4f:5c:a0:b3:ca:1d:53:b8:9f:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=697d1ead6bec3f6ecace446c614c62fd517ae72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:33:99:f1:ff:a6:35:77:f1:cc:0d:10:05:
75:a7:58:9d:5b:3e:ec:3b:3f:d4:74:f3:29:9f:78:
6c:db:14:cf:aa:06:9b:ca:e7:47:1b:61:f2:40:67:
ca:9e:43:b8:13:7c:5f:cb:e2:cd:80:d2:7f:a8:67:
fe:04:69:a0:f5:e6:72:c0:05:40:b0:0e:ea:b5:b0:
e1:97:3c:7e:1e:33:7b:a5:5a:07:56:e4:d6:7e:e6:
0c:6d:5e:a0:8a:a0:d0:4d:f2:de:1a:27:0b:5b:1b:
79:63:25:3f:f6:61:b6:1f:48:f6:cf:4f:c9:67:36:
e5:2b:ea:a0:f3:6d:28:28:a5:ff:89:42:d6:e9:6f:
89:40:1f:17:ff:a3:a9:af:86:7f:45:c2:cc:73:18:
05:dc:35:a0:74:58:09:e6:17:75:c1:41:47:c4:40:
9f:97:c4:53:29:7f:29:9f:cf:4e:7e:05:72:cc:97:
c2:36:9a:65:ab:e3:a7:55:36:8b:18:8b:b2:13:d3:
63:69:66:b9:91:b6:88:45:45:b7:29:67:e9:21:f3:
dc:ce:82:42:8c:fb:0a:dc:f5:ab:aa:d1:1c:ab:a7:
b8:33:03:a3:fe:46:05:1a:d7:f8:c6:90:32:c3:e7:
f7:2e:0e:c6:a8:dd:41:4c:ca:75:cc:a3:25:6a:85:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7D:1E:AD:6B:EC:3F:6E:CA:CE:44:6C:61:4C:62:FD:51:7A:E7:2A
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:91:e4:62:2d:00:a3:6a:bd:b9:2e:ce:98:09:c9:63:0c:d5:
f2:22:c0:e1:63:74:f1:80:a8:f3:c8:42:c4:f4:0f:bf:96:c3:
c1:df:35:76:c0:85:6f:76:3e:a4:81:c4:77:3b:3b:f9:d4:03:
0c:c6:02:3c:cb:f6:aa:5a:a8:3a:a4:ad:1e:5e:1f:65:b5:b4:
36:30:59:ac:0a:bb:ae:44:b0:81:3f:da:e9:31:96:7d:e7:03:
ed:8d:98:23:fb:71:92:3c:a2:38:1c:b4:44:80:fb:9b:5a:a6:
22:fc:4c:c6:22:81:b1:6d:43:ab:29:bc:97:ec:77:0a:28:83:
7b:9f:50:24:a5:fa:8f:73:7d:85:79:23:b8:e9:d3:6c:77:7f:
e9:aa:85:8b:b4:6b:f2:d0:39:79:2b:2a:3c:63:57:21:0b:cc:
ef:96:d7:04:13:9d:fe:17:da:11:09:39:0b:a0:60:e2:ab:ad:
7f:56:19:c9:cc:c5:a2:04:38:d6:92:e9:a8:c9:90:ff:55:cf:
c4:64:72:26:2c:1b:05:a4:7a:ff:d9:4f:2f:e5:fe:5d:db:40:
4b:6c:dc:38:d9:63:44:70:4f:76:ec:ad:a0:69:f4:d8:e4:df:
15:5c:27:49:4a:4f:89:04:03:c6:bd:8d:b7:c2:17:33:1c:6d:
d5:4d:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:19 2026 by rpki-client