Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: 3GA+h5QTY2D66keaUGvPhWpkzSoSKodhrTTmugWR/H0=
Subject key identifier: C9:E1:8E:08:CC:01:26:F8:D4:C4:5E:66:40:83:5C:13:25:72:59:E8
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 019D3866464612D3FB23AA73FB72670B8E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 0963
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: e7ww9gEaN1kotSJ60z05QfqpBInevBs5OglULpg1Nno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:46:46:12:d3:fb:23:aa:73:fb:72:67:0b:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=c9e18e08cc0126f8d4c45e6640835c13257259e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:8c:cc:de:a6:71:17:6b:28:4b:bb:16:63:
4d:58:9b:7e:00:1b:23:d8:e6:3f:b6:17:c0:77:93:
0b:e6:a8:c6:bd:dc:5f:c9:7d:fa:7c:5c:c5:c0:db:
87:0b:7c:50:05:73:bc:20:18:d3:ef:2d:64:37:91:
a8:44:84:d5:65:77:6a:2e:7c:fb:d2:7e:c0:56:ea:
a2:c9:04:e3:62:a7:b7:f3:60:15:5e:71:5f:a1:c5:
1d:b4:d3:2c:33:c9:75:f1:cd:27:57:30:21:f2:6a:
0a:87:09:95:7b:73:0f:82:1b:e4:44:23:5b:3a:2f:
69:c8:3b:98:65:d4:13:5a:46:cf:79:da:72:bf:81:
6e:5c:82:d8:65:b7:17:a4:c2:c5:cf:e2:4f:f9:cc:
3a:e9:37:35:f6:a0:f7:5b:26:82:43:2b:7d:6c:2a:
4b:d3:c2:36:af:2b:6f:cd:45:9a:b0:0a:29:b2:e0:
11:de:b7:fc:62:45:a6:c2:a5:95:e6:3b:16:31:1b:
0a:14:2b:dc:e9:71:b2:93:10:c4:ad:39:9c:1e:38:
92:a7:96:30:dc:25:73:94:ed:a0:99:2e:fd:d0:23:
cb:3c:61:4e:20:91:5e:32:1f:75:ad:ae:08:37:73:
7a:9e:87:83:e3:84:e3:c8:dc:27:43:2a:42:a8:01:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:8E:08:CC:01:26:F8:D4:C4:5E:66:40:83:5C:13:25:72:59:E8
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:26:8d:53:07:8c:47:7a:d9:69:ef:4e:d2:bf:69:77:9f:37:
82:b9:65:14:7b:18:95:85:10:01:1c:14:62:34:fa:c7:42:fd:
b7:33:53:2c:a5:aa:a9:a9:f5:61:16:89:16:00:77:2c:6b:21:
b7:b0:5b:74:90:81:cb:d9:20:29:11:3b:28:62:24:e8:d5:01:
5d:ba:74:b1:42:7b:fb:9f:51:a3:42:eb:38:66:a9:6b:79:3e:
5f:98:c0:66:56:3c:19:ef:a9:ec:eb:48:66:b1:46:b2:66:1d:
8c:7e:e7:bc:35:17:ba:41:dc:7c:4b:69:d3:e3:72:0c:6f:50:
b6:bb:65:ff:84:bd:f4:1e:3e:3a:87:6a:94:61:a9:ab:7a:8f:
6e:6d:3c:1e:f0:2f:ca:a9:8d:d3:98:6d:c2:63:7c:51:c6:46:
d0:f5:8c:c5:16:b3:1d:74:e4:09:74:e8:7a:06:c4:9e:85:60:
21:96:4c:0c:b5:13:65:a5:41:5c:ca:19:47:1e:98:65:12:45:
46:c1:b9:88:3d:55:d1:02:d6:87:8d:64:05:d2:d7:13:2c:a5:
2d:67:79:ff:be:1c:55:a8:ab:df:b7:cb:8b:71:1f:cf:72:15:
ef:5e:e4:e8:7c:a6:52:b9:de:35:37:6c:1e:e9:3d:e0:3c:e7:
d4:48:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:28 2026 by rpki-client