Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: g8iDFJKRs25ApK3DJYxU2NebJnO9PuJ0BjcqOXDwW4c=
Subject key identifier: 23:6D:A3:63:5E:53:34:35:20:8B:DC:86:8A:DE:D8:AC:CC:DF:E7:68
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 019D3977F017971FB6393DD84333D53D9546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 1524
Signing time: Sun 29 Mar 2026 12:00:54 +0000
Manifest this update: Sun 29 Mar 2026 12:00:54 +0000
Manifest next update: Mon 30 Mar 2026 12:00:54 +0000
Files and hashes: 1: jgN5b340IqujXH8DiLAcaLBDPQg.roa (hash: vjTTYKgnFfE85jmKgHsh0LqEiHa9mFhJMA/4cn0Av3w=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: c5CU5Dtby2XMvD2k+ioWfn202SfAfypotL3McwPlVho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f0:17:97:1f:b6:39:3d:d8:43:33:d5:3d:95:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Mar 29 12:00:54 2026 GMT
Not After : Mar 30 12:00:54 2026 GMT
Subject: CN=236da3635e533435208bdc868aded8acccdfe768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:c7:85:b8:38:6f:38:48:10:97:ba:8a:af:
65:0a:0c:e9:87:8b:0b:0d:fe:fa:b8:bf:bf:f3:43:
59:d7:51:77:5a:5b:0d:72:42:ae:9a:93:80:a6:b1:
f0:4c:c0:c9:20:aa:dc:cd:b2:2b:78:7a:6f:db:4c:
8c:e7:a1:cb:43:5f:d4:bf:c7:fa:e5:cf:dd:2d:7c:
50:7c:68:01:1a:5e:c3:a4:34:33:68:da:c7:fd:df:
d2:04:50:82:e8:a2:c4:d4:a1:87:87:cf:62:cd:5b:
fd:16:fe:6a:81:45:71:61:88:af:c2:51:97:eb:66:
0c:75:8c:4f:16:35:ef:09:50:32:76:b8:e7:0b:80:
86:63:e0:d1:79:6f:c0:10:18:8a:51:d0:78:8d:6c:
0e:f6:5a:8e:8e:32:40:dc:e4:3e:df:03:45:b9:2a:
ab:ef:33:36:03:52:06:d2:c5:75:6f:cb:e7:8a:8c:
39:16:a5:7d:79:47:9a:7f:2c:e8:db:13:5d:d3:7a:
66:85:8d:6b:f2:5d:b6:b7:e6:d2:c4:db:63:bd:47:
0d:b2:45:66:64:ef:e0:1b:aa:69:e7:cf:32:16:d3:
7a:12:11:fd:a0:5e:e2:af:16:5c:c5:b2:e8:9a:3c:
91:a4:ae:40:18:8e:0c:d8:88:e6:80:3f:ed:a4:40:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6D:A3:63:5E:53:34:35:20:8B:DC:86:8A:DE:D8:AC:CC:DF:E7:68
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:de:d0:36:45:31:a0:5f:db:de:60:5f:41:d4:ba:05:e5:a7:
1f:e5:c2:77:6c:f6:c1:a9:48:a2:38:52:67:68:78:1d:e5:f3:
ad:d4:22:79:17:fa:bc:bc:ed:da:6e:b3:f6:e4:99:4b:2d:14:
73:c9:4e:83:06:04:4c:b8:f6:5f:af:55:8e:40:04:de:fa:f0:
be:c6:0b:33:ba:ce:1e:cf:44:8d:22:51:11:23:4e:57:5a:35:
08:f8:28:95:8d:e6:ed:84:c9:3d:e8:db:7d:1a:8e:0c:02:00:
0a:6c:cc:61:d5:61:bc:1a:21:e7:e8:64:b4:1f:e7:78:19:f0:
26:0c:73:d0:ee:69:0c:0b:f2:95:f3:41:53:f3:1a:1c:73:e0:
82:46:00:34:e4:00:7b:9b:7f:2f:6c:a4:48:5f:be:3c:26:d2:
16:99:24:a3:57:58:b3:c8:e9:21:9f:54:44:a7:1b:45:1a:fd:
f8:b6:ef:92:c5:22:f2:2d:45:2b:1e:82:d8:2a:39:d0:11:f3:
cd:6e:7d:c2:b9:35:f4:44:54:99:3e:60:e4:fe:3f:61:6f:7b:
78:d0:7a:c3:01:65:29:4a:ed:16:d8:cd:68:ce:3c:0e:61:bd:
e9:44:86:d2:07:af:eb:22:ed:c4:f7:5d:4f:53:5c:ba:9d:39:
30:a6:5c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:50:34 2026 by rpki-client