Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier: NP7Mk4Ypdv71AhBKEcJYmVudVYwseD7ri0w06rIlGu4=
Subject key identifier: A1:90:9A:04:D4:7A:40:3D:65:46:8C:9A:E8:93:6B:60:0A:F0:06:6C
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial: 019D3A5414D33575CFE246A400AB0002104C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number: 0A64
Signing time: Sun 29 Mar 2026 16:01:21 +0000
Manifest this update: Sun 29 Mar 2026 16:01:21 +0000
Manifest next update: Mon 30 Mar 2026 16:01:21 +0000
Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: zkO4Lgohynv20efdNkmZF6wYo0RD/fP0psMgsc6fSwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:14:d3:35:75:cf:e2:46:a4:00:ab:00:02:10:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Validity
Not Before: Mar 29 16:01:21 2026 GMT
Not After : Mar 30 16:01:21 2026 GMT
Subject: CN=a1909a04d47a403d65468c9ae8936b600af0066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:3e:15:52:ea:72:0d:52:6b:f1:0a:94:b9:
3c:17:29:bf:5e:7a:73:73:51:3d:9a:28:11:22:45:
e0:98:33:5f:e7:e3:3d:7d:eb:eb:a7:ff:df:2a:74:
0d:72:3b:7d:4c:1f:ac:33:68:be:b8:25:05:3b:f3:
74:7c:9b:89:0e:29:8f:f4:7a:81:f5:12:a5:73:c3:
e2:a9:4d:25:de:5e:42:9a:7b:e4:67:14:20:ca:3b:
90:ae:19:cc:40:59:b5:91:8d:e1:eb:37:9a:37:e3:
40:96:35:56:10:e8:e8:3f:92:2d:e4:6d:32:63:c4:
ba:62:09:b6:1b:4b:61:18:6b:57:d5:34:23:de:4f:
bd:23:c9:d4:8b:15:75:33:21:ac:4d:ab:6a:6d:e5:
f5:89:5c:82:f3:7f:9c:65:95:90:1d:4a:ae:dd:fb:
cd:96:a0:f9:36:b9:16:08:f3:a4:df:cc:9e:0f:86:
20:57:70:3c:0f:84:fa:40:38:c6:c7:d4:ff:e2:a6:
f9:99:c5:f8:48:41:60:5a:16:ee:06:92:8e:c5:cc:
13:0c:75:bf:42:75:dc:86:00:31:5d:b2:aa:c5:72:
c6:78:d5:3c:6f:bd:15:cf:06:1c:ba:82:79:b2:99:
eb:44:d2:3e:71:85:57:c4:c8:8f:14:ba:9d:6b:ea:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:90:9A:04:D4:7A:40:3D:65:46:8C:9A:E8:93:6B:60:0A:F0:06:6C
X509v3 Authority Key Identifier:
keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9f:34:88:9f:5a:56:09:4a:64:12:11:31:2a:24:66:df:a9:
60:ff:18:82:49:33:51:03:15:5c:c2:ad:73:5f:8a:66:b5:ee:
db:c1:87:d9:0f:c1:bc:67:68:a8:16:15:fc:30:2c:9b:e9:c2:
25:f4:29:59:1d:ca:38:4c:70:aa:1c:32:d9:ec:fb:fa:de:52:
06:e7:3f:d8:7f:97:b3:e0:72:6c:fc:3f:c5:3b:24:31:32:35:
94:83:29:dd:c4:91:ad:b6:7a:6f:ca:8d:df:68:bb:48:35:a6:
1c:1a:a7:6e:68:59:f5:af:4c:66:01:bf:07:b1:e1:0f:77:3d:
34:75:a7:c6:28:01:91:2b:52:b9:99:89:1f:91:10:e6:c9:0e:
b2:98:d2:a7:c9:2e:8c:6e:a9:83:bc:19:b5:e8:94:39:b4:43:
cd:c1:cd:ff:35:6e:cc:c2:3d:55:93:2f:b0:16:02:a3:9f:53:
c1:d7:da:c8:5d:f9:9f:3e:23:ca:34:e3:85:5e:cd:0d:ca:f5:
a7:74:7a:1d:42:b7:9a:1a:d8:8c:7a:d6:39:fa:1d:0e:f4:92:
23:81:14:e5:31:57:35:1e:23:a6:2a:49:9a:f8:f3:c1:38:df:
e4:1e:a0:80:00:b8:94:08:a6:97:2a:9e:72:bb:02:fe:1b:2d:
a8:d4:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:24 2026 by rpki-client