Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier: mWiSl2VTn7W91ZB3gy+uIcOAZ6QXxybbW/6v+wlNmeA=
Subject key identifier: FE:14:0B:00:D0:FD:69:E0:0D:89:C1:A2:F6:78:5E:3A:F4:FB:7C:96
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial: 019CAA21B1D2766C351C0834A1E94751A438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number: 1215
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: 3ZuUkBzjFMgfoU5hzrFCrq1VAPp2yd1OECaaJxru7r8=)
2: cwRccrAENANpUtgyG-cs76t2uhQ.roa (hash: UiM4/U2KaMcgUdcESji12E4Ep2EXmuZnwMAQ53YQTaw=)
3: lLChUBZNxYsI76RgX__pDESB_OA.roa (hash: 5jzvmBS7qQYnrtTH7wbbIQMDBZ7lUHZfG/KhrPJAXYA=)
4: uKdAKBMHTo--N62k1rfd45Go-P8.roa (hash: cD1PvP+VpcK/IX6+cUD+0KlB+HVNbXjioAvUAit6sr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b1:d2:76:6c:35:1c:08:34:a1:e9:47:51:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=fe140b00d0fd69e00d89c1a2f6785e3af4fb7c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:08:33:ed:6c:77:7e:9c:9b:69:fe:39:a0:
ed:8f:02:f1:f0:36:ff:3a:1a:06:69:ae:eb:9b:ab:
39:32:03:ec:d1:03:8e:46:9c:a5:a2:75:33:68:88:
1d:d3:c8:55:bc:94:41:55:22:36:18:36:52:ed:b5:
12:3a:d9:6b:a0:54:60:15:3a:24:9e:a9:9f:cf:f5:
21:fb:40:26:ae:1a:9b:b6:b2:6f:93:64:1b:db:5d:
6e:bd:24:17:06:1f:db:25:6c:08:08:f6:8a:fa:80:
13:ff:b6:7c:72:eb:cd:36:ff:f9:5c:a0:e4:ea:24:
d7:09:5e:9f:62:e6:d5:26:8a:55:83:b3:60:3a:71:
49:e4:97:4c:5f:04:79:53:3f:fa:76:73:11:14:96:
2d:55:55:90:06:8b:db:86:89:1c:0b:2b:d8:92:8a:
d3:e5:46:de:0b:7f:99:0d:86:05:b3:aa:7f:cc:d7:
d3:d7:4c:a5:35:b6:69:7a:d5:3e:db:e5:bb:86:8f:
e8:34:ed:32:ef:e2:ef:63:a6:25:5f:e6:69:93:d6:
5b:76:44:56:fb:3d:7d:7b:de:d2:80:f4:e6:a8:cb:
c9:be:f1:07:6f:24:bf:34:d2:45:8b:02:82:34:6d:
f0:94:d7:1a:23:b8:2b:dd:a3:83:6c:2e:54:5e:b7:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:0B:00:D0:FD:69:E0:0D:89:C1:A2:F6:78:5E:3A:F4:FB:7C:96
X509v3 Authority Key Identifier:
keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5f:87:85:35:02:6d:3c:d9:01:97:6e:3f:cb:70:cf:0f:8c:
b0:4a:74:00:3d:31:39:4d:01:61:9e:1d:d5:de:50:5a:58:4f:
b3:d6:6d:f8:22:9d:fe:57:d0:3f:d0:2f:50:ff:44:5e:b0:53:
dc:d8:8d:34:bb:fc:a3:b9:b7:75:fb:7e:4d:6a:ad:52:83:ee:
87:b9:3e:87:b5:9e:c9:84:05:3b:33:cb:39:aa:47:26:92:f9:
65:0e:77:c5:73:49:84:b0:9f:59:8b:3a:23:10:a1:6f:2e:ed:
1f:b7:80:85:34:91:39:b2:3d:34:93:03:b7:5d:fc:62:c3:ed:
36:cf:77:bb:a8:35:aa:10:1b:b5:9b:69:cf:42:42:78:57:a8:
0c:b1:c8:fc:68:fc:ed:e2:27:dc:71:8c:e6:d8:73:0e:cd:f3:
ad:01:c5:2f:9f:7c:09:a4:8a:18:64:50:fc:0f:cf:35:fb:21:
a2:36:db:35:08:b7:40:0b:49:85:34:c1:cc:97:e4:4b:ef:02:
6b:93:4e:21:88:4d:ee:ac:44:89:9c:ea:54:f6:e3:53:e3:8e:
b1:09:7f:ce:04:8c:6e:55:16:57:11:a0:7a:a3:9a:76:e2:90:
54:00:48:d6:b1:60:ba:7a:17:8f:fe:c1:0d:89:90:9c:23:4a:
28:8c:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:10 2026 by rpki-client