Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: KI/0xMOkw0KEzE6SoEAC3DzKfZFEwp0n9G+dFmVmLj4=
Subject key identifier: C1:2E:BA:A1:52:B5:58:FF:94:44:5B:6E:C2:89:9D:D4:96:CA:E4:C5
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 019D39AEC49812D437B21A3E0CD3D3111B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0FED
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: e65Wm8qSlwABaMwf85baH0X3f0sYm+Xp84othIUJnsI=)
2: ezSfvW2twjkVve5nAqFXyJU1V-U.roa (hash: yCXYqjDBti2IXbGbDipByX+cxf41rBq8hGllPOt86z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c4:98:12:d4:37:b2:1a:3e:0c:d3:d3:11:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=c12ebaa152b558ff94445b6ec2899dd496cae4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:95:06:7f:03:12:e9:80:67:00:36:83:ee:
d8:ec:a8:04:52:fa:46:a7:d3:bc:84:ac:3f:08:06:
12:24:42:ca:a5:da:97:05:d2:df:cf:f1:7c:d6:d4:
f2:9f:93:d9:07:27:06:c5:d9:51:8e:3f:b6:fc:da:
ab:3a:67:5f:46:27:60:01:f5:a4:44:73:34:71:0c:
7a:6e:e7:8d:f5:cf:55:2d:bc:d2:7e:a9:56:8a:ed:
0b:14:7a:44:5f:bb:9c:f4:f5:5e:55:5a:bc:5b:2f:
90:7f:bc:7e:22:ac:a5:81:b8:0e:1d:5b:f9:4e:4c:
3b:09:a8:29:d8:de:bc:c3:d7:bd:03:22:69:ed:c4:
5a:ab:aa:1c:ca:17:d1:95:02:97:9d:b2:3a:d3:cb:
b3:6f:d5:dc:ad:14:3e:8f:c2:96:48:e6:c9:1c:fd:
09:fa:c7:60:0d:83:f7:57:f9:81:d1:2c:89:9b:8c:
12:da:8a:79:02:3a:4f:be:75:9d:dc:ba:f0:df:67:
25:a9:db:94:1d:42:20:f4:7d:92:22:8f:05:0c:dd:
9b:70:b2:ad:5e:28:fb:8d:49:ab:fb:46:9a:77:3b:
ab:29:c4:19:b1:71:2f:fd:14:3e:ec:d5:93:5b:1b:
5f:82:85:f7:97:f6:eb:39:59:c3:85:59:16:86:12:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:BA:A1:52:B5:58:FF:94:44:5B:6E:C2:89:9D:D4:96:CA:E4:C5
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cf:e3:43:b5:86:5b:5b:d5:ae:8d:c2:d6:b8:73:c9:28:56:
b3:75:bc:c7:f2:88:47:ff:bc:a5:d2:12:25:76:d6:91:6c:18:
d1:11:bd:00:15:b5:e3:e4:dd:cc:2a:b7:82:ae:8f:ed:1c:86:
35:23:d7:bc:0f:27:ce:f8:23:62:e0:84:d7:84:5d:18:65:d5:
e9:ac:18:2e:30:7a:5e:a7:25:51:cf:5d:5c:fd:b0:46:93:87:
80:c8:8e:91:d4:ae:15:14:6c:bd:43:28:82:fc:38:90:28:26:
b8:fd:0d:0d:c2:85:f2:b4:e6:28:bf:f8:10:a6:af:c5:1a:13:
e6:d1:56:20:30:34:46:e2:eb:64:14:11:d7:a4:16:71:cd:65:
7a:c4:f8:0e:57:1c:77:33:a9:bd:2c:7d:47:80:b4:cb:bd:0a:
35:fb:2f:c3:27:0b:05:dd:f1:cd:d8:db:5d:25:2f:45:66:1d:
79:55:92:ef:08:73:10:7a:fd:cd:b8:e4:70:8c:81:11:a8:76:
8a:fd:87:a4:31:bb:bc:41:c6:40:76:f8:6c:97:5a:ca:d4:22:
dd:06:cd:a7:51:f1:dd:12:58:ff:46:75:34:c3:d0:41:01:cd:
08:e1:53:57:bd:8f:1d:18:28:a9:40:91:6d:ba:41:17:b6:f6:
f7:e6:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:03 2026 by rpki-client