Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: uRCthkas87j3CNdXeh0yj36c3f5wzERZzoGcA1H/wJM=
Subject key identifier: 41:89:53:C7:BC:8A:91:49:B5:69:0C:5B:D0:9B:9B:DC:38:7A:94:B8
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 019D3865E271477D3FC13AD40A1100F7A7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: Wy5RGKDLHiCY7OMz89ei3SQ+IwilgcrBR+mBx570o/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e2:71:47:7d:3f:c1:3a:d4:0a:11:00:f7:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=418953c7bc8a9149b5690c5bd09b9bdc387a94b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:71:9b:86:e4:79:64:e8:e0:27:62:a3:80:
af:d6:ab:71:f2:e9:07:59:ec:3a:70:ba:0b:ff:37:
00:15:db:b3:42:34:e6:8f:1b:92:69:b0:ac:46:89:
40:18:1a:da:c6:25:ab:c0:8e:b3:03:a9:21:5e:05:
f9:5e:e5:c2:eb:dc:52:20:b1:e0:f1:ff:ac:dd:66:
58:99:f5:dc:a8:40:6c:c8:7f:60:76:97:15:52:ed:
98:65:d8:f7:34:3f:16:3d:7c:f9:6f:97:ab:f0:b7:
64:9f:9f:47:bf:61:cf:6e:b6:7a:90:ab:34:03:e1:
d8:49:81:2b:22:bf:ff:c3:17:a8:74:e1:e1:a3:3d:
d0:03:8f:63:b8:fc:7b:95:7d:ea:49:bc:17:91:71:
3c:57:d8:23:f9:13:3e:3d:38:de:fa:32:70:1b:b9:
c6:e5:5d:24:b0:37:f2:c7:db:fc:22:a8:0c:52:48:
2b:d6:80:b2:9b:85:15:39:5a:24:d5:88:6e:4d:38:
36:87:20:59:f8:cb:62:d2:df:cd:ae:bb:da:57:f3:
8a:0f:dc:0a:b9:5f:67:a5:b9:5a:d7:83:1a:8c:67:
64:6b:73:58:89:fe:c4:21:55:25:c9:ec:33:24:ad:
6e:04:73:9c:4b:70:3c:ae:d3:cf:f4:4d:af:e5:0b:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:89:53:C7:BC:8A:91:49:B5:69:0C:5B:D0:9B:9B:DC:38:7A:94:B8
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5d:a8:94:34:c1:ff:96:6f:e3:bc:b1:62:87:10:b4:46:39:
cd:47:07:6c:d4:bd:e8:c5:c6:4e:7b:08:27:93:1c:e3:d0:28:
29:a4:f4:f6:23:87:c1:98:f5:88:0d:13:9a:ee:d3:4f:17:b0:
b7:e2:f6:c7:32:90:85:a6:75:f7:70:7b:55:54:51:a9:b4:90:
97:37:5f:28:f5:ae:a8:1f:ff:95:c7:37:0d:44:a4:0d:47:b8:
e5:f8:7d:52:ac:35:54:e9:bd:de:be:bb:1f:ec:74:4a:f4:ed:
d5:ad:87:7e:15:73:6b:0d:83:a7:5a:8d:4f:42:e3:ed:59:20:
7a:88:a1:d4:3e:cc:d1:b0:cc:86:53:ed:0d:85:43:b3:5c:f3:
d4:c9:db:12:03:fb:aa:d6:0e:07:25:4e:fa:18:b1:26:52:4b:
c3:43:ba:4d:8f:e6:0a:e2:6a:f5:e3:c6:b9:09:7c:b7:7a:83:
43:76:84:46:40:9b:17:b3:1a:dc:b5:ba:2a:d3:66:84:db:47:
18:6b:57:83:85:8d:c2:97:b9:02:62:69:99:c3:1a:26:9c:62:
36:0a:38:50:a5:36:a7:0b:a0:73:ca:db:ad:95:e5:f6:71:47:
92:7f:bd:13:3f:42:94:46:55:fa:a4:68:64:b0:49:f1:46:69:
a6:fc:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:43 2026 by rpki-client