Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
File: MqD9Xa9E_FXXzlk452RKFyOEjDI.mft (raw, json)
Hash identifier: glE25uloxMPHBCA3pUU6sYNLzGFnF8jDSbE/bMs3ICA=
Subject key identifier: 17:B4:30:A0:63:5A:31:40:40:42:A3:5B:AD:F4:3D:AD:58:2F:A5:1C
Authority key identifier: 32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32
Certificate issuer: /CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32
Certificate serial: 019D389C195C9527AFE71D02F109C413F0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
Manifest number: 0197
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: MqD9Xa9E_FXXzlk452RKFyOEjDI.crl (hash: C7ywDjpS+mZcFTPWIH7tuT0bUobXXUTVLb0wR4n7HBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:19:5c:95:27:af:e7:1d:02:f1:09:c4:13:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=17b430a0635a31404042a35badf43dad582fa51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:f1:c0:38:22:cf:92:26:fb:22:5f:cd:b4:
2b:76:87:72:95:3e:e8:c6:56:59:b6:da:ce:db:a6:
91:6c:c2:2e:5d:62:62:5d:a1:9a:dc:28:1a:32:b7:
27:a5:5e:9a:0e:9b:42:30:89:b6:f0:65:c9:da:a2:
90:a6:4a:53:ac:dc:1f:81:1a:1c:c6:a6:1a:5b:e1:
a6:5b:5b:a6:6c:7b:ed:23:d9:d8:54:93:81:23:84:
86:e1:bb:1b:1c:56:cb:bd:64:7e:ab:a0:4c:6f:17:
56:b6:15:7b:02:2e:de:55:6b:40:6c:d0:e0:6b:7e:
51:5d:8a:66:7e:50:88:23:7d:26:1f:66:d6:6d:aa:
8d:71:fb:42:cb:dd:80:71:f1:da:27:73:b7:72:39:
aa:d9:32:23:7d:65:ce:3c:8e:b4:46:a0:1c:8c:ce:
1e:96:aa:6a:ae:e5:be:f3:3b:a3:87:98:32:20:bd:
96:e0:c2:0a:f3:41:0e:fb:98:66:30:d0:f9:96:11:
dc:75:71:ba:d3:b2:a9:96:7f:77:f8:98:73:e6:40:
68:b0:aa:6f:2e:8b:64:3c:25:68:c2:aa:31:91:14:
0d:11:20:ea:d6:41:bf:43:41:10:48:df:47:71:81:
9a:47:d2:bf:c1:8f:03:62:c3:8b:8e:fc:08:c6:18:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B4:30:A0:63:5A:31:40:40:42:A3:5B:AD:F4:3D:AD:58:2F:A5:1C
X509v3 Authority Key Identifier:
keyid:32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ee:7f:43:3e:96:09:6c:b4:c1:c2:f0:04:d4:d5:e5:f4:c6:
a5:40:6c:f1:ff:e7:6c:ab:f7:28:5e:1b:de:6f:f5:77:66:33:
80:81:e1:3a:f5:2d:c6:ec:c8:b4:4c:0f:72:57:b3:91:fc:f7:
38:5c:60:1c:64:26:c2:48:bb:b3:79:33:f8:f2:75:93:b5:50:
e6:5e:75:a0:f3:96:32:a1:6f:98:34:62:2c:3c:94:4e:d6:83:
13:e4:06:90:9e:05:50:e0:5c:16:ad:84:a6:26:40:4a:73:b7:
76:7f:94:e2:12:e9:5e:81:4a:b7:14:78:d0:5b:14:d0:62:e4:
c0:7f:a6:05:86:2e:5a:4d:77:01:bf:c8:c4:eb:9a:6c:3e:f2:
e9:15:a2:2b:cf:d0:07:b7:a7:8a:ce:2c:f1:7a:28:93:eb:3c:
a8:03:14:56:eb:e5:7a:ee:c3:2c:f5:69:d0:97:06:6b:5b:d2:
a4:77:c6:86:20:48:d9:4b:56:67:3b:db:28:f8:82:2d:33:2b:
e6:54:df:33:e7:2a:db:92:76:9f:a1:1f:c5:f5:10:2e:73:f7:
11:10:62:b6:fa:f2:38:6d:fc:1a:36:f7:28:a8:0e:4c:cb:59:
26:7d:b7:6f:3f:43:2f:62:a2:08:4c:db:5f:9f:32:51:5e:cc:
28:52:46:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBlclSev5x0C8QnEE/DyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYTBmZDVkYWY0NGZjNTVkN2NlNTkzOGU3NjQ0YTE3MjM4
NDhjMzIwHhcNMjYwMzI5MDgwMDQ3WhcNMjYwMzMwMDgwMDQ3WjAzMTEwLwYDVQQD
EygxN2I0MzBhMDYzNWEzMTQwNDA0MmEzNWJhZGY0M2RhZDU4MmZhNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqADxwDgiz5Im+yJfzbQrdodylT7o
xlZZttrO26aRbMIuXWJiXaGa3CgaMrcnpV6aDptCMIm28GXJ2qKQpkpTrNwfgRoc
xqYaW+GmW1umbHvtI9nYVJOBI4SG4bsbHFbLvWR+q6BMbxdWthV7Ai7eVWtAbNDg
a35RXYpmflCII30mH2bWbaqNcftCy92AcfHaJ3O3cjmq2TIjfWXOPI60RqAcjM4e
lqpqruW+8zujh5gyIL2W4MIK80EO+5hmMND5lhHcdXG607Kpln93+Jhz5kBosKpv
LotkPCVowqoxkRQNESDq1kG/Q0EQSN9HcYGaR9K/wY8DYsOLjvwIxhhC8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe0MKBjWjFAQEKjW630Pa1YL6UcMB8GA1UdIwQY
MBaAFDKg/V2vRPxV185ZOOdkShcjhIwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXFEOVhhOUVfRlhYemxrNDUyUktGeU9FakRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jZjk4YzYtYmM2Yi00Yzk4LWI2NTAt
OGEzYTM2ZDcxYzY2LzEvTXFEOVhhOUVfRlhYemxrNDUyUktGeU9FakRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jZjk4YzYtYmM2Yi00Yzk4LWI2NTAtOGEzYTM2ZDcxYzY2
LzEvTXFEOVhhOUVfRlhYemxrNDUyUktGeU9FakRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXe5/Qz6W
CWy0wcLwBNTV5fTGpUBs8f/nbKv3KF4b3m/1d2YzgIHhOvUtxuzItEwPclezkfz3
OFxgHGQmwki7s3kz+PJ1k7VQ5l51oPOWMqFvmDRiLDyUTtaDE+QGkJ4FUOBcFq2E
piZASnO3dn+U4hLpXoFKtxR40FsU0GLkwH+mBYYuWk13Ab/IxOuabD7y6RWiK8/Q
B7enis4s8Xook+s8qAMUVuvleu7DLPVp0JcGa1vSpHfGhiBI2UtWZzvbKPiCLTMr
5lTfM+cq25J2n6EfxfUQLnP3ERBitvryOG38Gjb3KKgOTMtZJn23bz9DL2KiCEzb
X58yUV7MKFJGag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:55 2026 by rpki-client