Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: EO5rDbqmNZuxSu4rCfBRd+NEVjX4YWEpatnNkKQONhU=
Subject key identifier: 6B:A6:08:35:17:9D:F0:F5:3E:8E:B6:7D:4A:5C:B7:C1:2B:77:6C:A7
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 019CAD22C7C06138284ECAB043EBB9899099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 1212
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: Hs3ktAK06Dj681LT3K6I_ytQOww.roa (hash: wbOb5BXeVE4ZTQ/ou2jyGYitrKnVaEx90HF7mvuSF08=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: 7c3ovk/vHPOpkxZ7s0FHIk5lGnddNF0sfvSm2lGBeys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c7:c0:61:38:28:4e:ca:b0:43:eb:b9:89:90:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=6ba60835179df0f53e8eb67d4a5cb7c12b776ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:73:86:da:12:b7:d4:1e:2b:29:a1:54:a0:
78:87:7a:2a:db:69:4f:29:1d:f1:4c:fe:a3:36:77:
77:88:4d:37:11:90:ef:16:1b:8f:47:66:98:69:d2:
9d:65:b4:31:8d:aa:a2:3b:b0:2a:d9:5f:d8:7a:29:
c8:d7:36:e5:5c:72:b1:0e:63:00:7e:e3:44:6c:52:
1f:bd:92:70:6a:8b:f5:04:d0:51:ad:0b:03:23:c4:
34:0a:ef:42:49:a5:97:d1:5d:51:a4:fe:c4:66:71:
d9:94:55:6b:16:4b:87:4e:f1:26:84:c5:9c:a1:2d:
49:3b:41:73:87:c5:d0:6f:3a:10:55:c6:ac:3e:0f:
a7:e8:0f:45:b7:b5:05:6c:38:59:dd:3b:05:af:01:
d8:52:82:d8:52:cb:c9:40:2c:f8:19:ec:a7:54:6a:
b4:41:b0:6c:e7:68:28:33:87:a8:f5:d2:5e:2c:32:
e7:8b:1b:57:95:57:2f:b3:47:cc:c4:63:37:f1:97:
1b:24:1f:27:89:38:37:d1:f2:bb:cc:ed:16:b2:c5:
71:41:7e:fd:6c:7d:9c:08:e5:71:15:f4:e8:19:43:
08:0a:51:6d:16:55:25:2c:e2:75:88:af:d6:c9:e0:
88:70:29:4b:2b:37:4d:5e:50:91:b8:c7:38:a2:e1:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:08:35:17:9D:F0:F5:3E:8E:B6:7D:4A:5C:B7:C1:2B:77:6C:A7
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:a1:5d:a0:61:36:b2:a0:75:f4:f0:46:25:a0:33:63:07:
09:0a:62:d8:dc:95:ff:6c:f3:89:a1:a4:26:58:7b:1a:f2:41:
a6:23:20:89:1c:8f:b5:7b:5f:b6:ec:58:50:0d:3e:d0:02:4c:
e3:b9:77:1b:4e:34:5f:d1:36:72:d4:bc:cc:d7:2b:a6:9e:b4:
0b:eb:27:6a:b0:93:90:d3:3c:82:1f:c2:50:40:3a:86:45:f4:
c2:db:81:32:b0:6b:ea:e0:93:9d:27:cb:58:71:37:99:23:af:
13:96:bb:c6:5f:a2:c8:81:54:d3:ba:1c:41:91:94:52:f2:f9:
e1:2f:dd:d3:47:06:43:c9:4f:70:8d:6e:18:5e:2e:b0:57:1a:
0a:8d:dc:a7:62:ea:20:b5:c2:cf:84:53:4e:a8:fc:78:04:62:
75:d3:cf:3d:a4:26:c1:ad:50:72:5c:7d:2d:4b:1b:8b:4f:00:
6e:19:0e:5a:8c:8c:42:17:cc:71:2d:29:c0:df:c0:de:03:c5:
23:04:b4:52:2a:e6:96:81:ee:13:02:54:01:ed:75:9e:8b:da:
69:4b:f6:c1:53:44:7f:45:d2:0f:1a:84:94:83:f1:83:77:ca:
97:4d:62:7e:a9:b6:75:7d:f4:ea:66:97:96:3c:6a:6f:cd:dc:
69:4f:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:57 2026 by rpki-client