Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
File: meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json)
Hash identifier: dh2l4PkCppLI9YAng6FGvZUGCm83a7MkkwiOMiunDyE=
Subject key identifier: 2F:E8:39:7F:0C:9A:01:98:B8:1B:5F:45:3A:2D:DC:58:E1:EB:19:67
Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
Certificate issuer: /CN=99e07a31abfec24909b188463846fdf655872423
Certificate serial: 019D38665B5DF9331E026F7FC8BDBD5F023F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
Manifest number: 1471
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: NUckeSCEzlEZgxkhTtpkpugMs5bp2lJIEhKZYldp+/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5b:5d:f9:33:1e:02:6f:7f:c8:bd:bd:5f:02:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e07a31abfec24909b188463846fdf655872423
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=2fe8397f0c9a0198b81b5f453a2ddc58e1eb1967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:cc:72:63:2a:a2:c5:c2:fe:e4:99:69:bd:
a0:c1:3a:2d:18:17:0d:c8:0d:43:4a:7f:1b:13:80:
97:38:a3:83:df:80:95:ec:63:f0:c1:af:2d:26:6c:
84:2a:42:5f:03:3a:14:dd:97:fc:f2:4b:16:a5:18:
c8:91:1b:4c:a9:a1:72:a4:3d:b1:ad:2f:a2:8c:6f:
8e:e4:3a:18:8f:55:44:18:de:f4:bf:6d:2e:f9:7a:
5b:40:7c:9e:fb:3a:5d:53:67:f6:ce:f3:d8:e1:24:
05:16:60:86:99:1c:49:e5:94:11:86:f2:9a:3f:7b:
0c:dd:e6:88:89:a5:77:50:17:24:70:89:2c:1c:9f:
fb:04:ff:6b:44:dd:7d:9a:1c:b0:d5:57:13:51:9b:
f7:d1:d5:6e:49:cb:ab:a9:80:e7:07:3e:5e:c9:0d:
94:89:d7:5d:49:71:26:a0:c3:4f:b1:8c:3e:26:32:
a4:8c:28:63:6f:6e:32:e7:f6:9a:c2:d4:06:92:0e:
d7:2d:ae:cc:97:0b:cd:7b:6a:e9:ae:38:56:d5:9d:
44:75:f2:89:48:57:51:b7:fd:e5:0c:c7:ff:a8:d0:
ec:19:17:4e:2f:14:82:3d:8a:38:0b:d3:dc:50:4b:
e8:1f:8a:3b:b0:03:8c:4c:43:54:56:06:c2:20:bc:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:39:7F:0C:9A:01:98:B8:1B:5F:45:3A:2D:DC:58:E1:EB:19:67
X509v3 Authority Key Identifier:
keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1a:0b:ca:e3:d4:32:db:aa:13:97:43:04:e4:6c:b3:55:5a:
0c:a4:a7:13:31:61:5f:99:c3:13:12:4c:b9:e1:4f:37:6d:82:
98:af:eb:07:29:3f:8a:82:23:ad:ee:00:02:96:ce:e4:cc:9e:
58:b6:39:19:02:5b:1a:a0:70:c5:5f:df:4f:bd:76:8f:3f:b4:
0a:8d:3d:a4:5e:9c:64:d7:8b:b7:bb:9b:ff:b1:ef:31:e8:b5:
65:a6:95:67:94:ad:9e:94:de:50:7a:8b:be:a9:7b:63:b4:5a:
2b:7c:ed:51:6c:48:2d:7d:7c:62:ef:24:4c:c6:3d:e1:ed:8f:
f2:b6:c8:70:d0:27:8c:ef:14:07:ca:5b:26:53:e1:51:bd:b9:
37:c2:63:1c:77:73:61:d8:19:62:81:89:c5:54:88:09:e4:70:
17:37:f7:ed:ab:4b:1a:ec:9e:43:a2:bd:56:d7:bf:56:0b:be:
e1:b1:12:eb:0b:3e:80:d7:c9:ef:3c:9f:7a:0b:5b:c7:c8:69:
55:fc:a7:95:16:09:3f:c5:e5:58:4e:e3:96:33:12:d6:6e:3b:
b9:f5:85:52:e9:e7:8a:ff:64:94:d6:ae:fb:9f:13:44:b9:19:
0c:a5:ec:4a:00:0e:5e:69:f3:b9:68:bb:56:ff:f0:fe:a1:7d:
1b:37:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:47 2026 by rpki-client