Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
File: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft (raw, json)
Hash identifier: +QQoe459yZ/70eMVWi4SEaVhMaajr3susQjPDw6q2FQ=
Subject key identifier: 25:6A:5E:CB:E4:AD:70:95:CB:FC:09:0A:7D:5C:70:F0:18:87:6C:70
Authority key identifier: 98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
Certificate issuer: /CN=98ae843e7bc8748d015bc47f635b17561be72850
Certificate serial: 019D386625432D711968FBF26601A31B8686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl (hash: Dp43/GDi6dmIOBzAcg8BH/qgTqetJzoSHttrQZnoJgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:25:43:2d:71:19:68:fb:f2:66:01:a3:1b:86:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae843e7bc8748d015bc47f635b17561be72850
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=256a5ecbe4ad7095cbfc090a7d5c70f018876c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:6d:87:79:a8:c1:f5:6d:47:25:86:2f:cf:
a0:3e:c2:55:f9:df:1c:db:89:12:76:5a:12:0f:d8:
aa:38:d9:c0:f6:a9:5e:59:09:41:67:5d:df:77:5f:
2a:4d:75:ad:f4:19:92:ff:37:99:b5:d9:81:a2:6c:
20:ba:41:86:45:ca:f9:7e:28:62:74:2c:04:8e:c2:
91:e6:bc:ff:37:62:84:70:60:89:8b:d6:f3:6d:87:
41:cb:9a:51:85:f4:aa:e7:b6:81:e9:d1:97:d6:40:
dd:31:e8:39:5c:3c:1d:23:05:4f:e4:b1:c9:30:b6:
fb:09:28:1f:66:14:d8:79:8a:9e:b3:28:2d:92:ad:
a9:2d:2d:27:05:e9:45:25:a5:94:05:85:41:72:24:
2a:11:a9:37:9a:78:50:8c:aa:57:c3:5f:64:13:9f:
b9:0f:2e:f1:9c:47:55:d8:6f:a5:3f:26:1d:85:0e:
74:92:02:40:e6:26:fb:9a:f3:b8:c5:f6:8a:29:83:
56:2d:2f:83:f0:05:a2:90:9f:f0:21:f1:5d:a3:40:
b1:c3:5a:ab:f1:c6:cf:0a:4d:7e:01:53:36:81:c0:
1c:7d:f9:ce:ef:57:97:57:82:ba:03:95:dc:99:0c:
ee:6f:99:46:1c:c2:d1:65:f8:57:dd:23:54:0f:20:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:5E:CB:E4:AD:70:95:CB:FC:09:0A:7D:5C:70:F0:18:87:6C:70
X509v3 Authority Key Identifier:
keyid:98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:85:e8:01:ae:79:ef:a9:e9:fb:25:f6:c3:86:be:ed:2c:52:
b0:b0:3d:7f:09:02:41:78:a3:2a:60:b2:7c:61:d0:e3:9a:03:
16:4c:3d:02:8a:95:76:0c:c0:13:4a:08:81:56:77:3a:ad:35:
04:3b:30:9a:de:0c:70:7c:fb:c9:d5:4b:51:b3:16:b5:4b:ed:
71:82:c6:49:ad:f2:71:e8:06:e9:28:97:03:b2:a7:08:3f:55:
a6:a4:90:c5:76:3b:a7:52:61:88:31:e7:28:08:8d:99:3c:18:
65:88:46:02:fa:17:2f:a6:d7:19:2f:c7:ba:af:41:94:4d:a2:
39:fc:42:43:e1:0e:07:d8:42:8e:a6:a9:1b:4d:99:ec:97:15:
bb:9b:8c:24:1f:ea:04:8a:2e:01:5e:78:1c:3c:5f:57:8f:2a:
d4:1e:87:a2:8c:d1:a1:1a:5e:4d:ac:3b:5e:66:67:f0:3b:df:
65:35:1a:60:88:93:d9:e7:67:d0:f7:c5:08:77:28:9a:79:15:
d6:2b:5e:39:e8:3c:90:94:56:aa:cb:ed:79:20:08:f9:0a:51:
ad:d8:2b:91:f6:5c:9d:a8:b0:61:0a:23:13:eb:f1:9f:9c:7c:
39:ae:8e:70:66:3e:cc:47:82:36:98:ed:df:60:2c:dd:6c:4c:
19:38:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:00 2026 by rpki-client