Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
File: mTFQMIBh3NrF2EZc-ITGejuxkVk.mft (raw, json)
Hash identifier: fALi7oZIDoAdfvxzPlPITjJNy+drwHotZgJc71zINgs=
Subject key identifier: 90:84:07:44:D4:44:56:1E:05:10:2C:AF:1D:C9:06:93:3B:5C:6F:F2
Authority key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
Certificate issuer: /CN=993150308061dcdac5d8465cf884c67a3bb19159
Certificate serial: 019D9A3EE2FABF451FD9633DA38AF68E0DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
Manifest number: 09B6
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: mTFQMIBh3NrF2EZc-ITGejuxkVk.crl (hash: +RmHsAJeYOwd0K1DsdluhsFH9A5J4ujTFmvfRSqm5uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e2:fa:bf:45:1f:d9:63:3d:a3:8a:f6:8e:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993150308061dcdac5d8465cf884c67a3bb19159
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=90840744d444561e05102caf1dc906933b5c6ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:1d:ab:b4:72:c1:4b:6b:0c:f7:74:6b:a2:
cc:ee:72:a9:1f:69:50:29:35:df:7f:ba:7b:5f:5d:
a6:22:f4:30:62:99:75:c8:be:98:a7:90:36:f8:a6:
8e:86:10:f4:41:06:b9:22:3e:cc:20:b3:be:df:1f:
48:1e:0a:a5:94:7b:bd:bd:b4:2c:5e:11:57:82:9c:
fe:46:25:65:17:23:5d:79:76:2f:80:47:a4:95:15:
8f:b7:95:58:28:5b:8e:d5:5a:8b:50:ec:a6:e7:4e:
a8:4f:d2:0f:c8:46:b1:6c:dc:65:21:bf:d0:49:d2:
dd:e7:33:81:20:ad:95:d0:18:cc:d7:b9:9a:52:5e:
94:88:0c:a4:14:e6:3f:4b:4a:63:49:43:5c:0b:b2:
42:f5:98:5d:f7:a3:95:f0:39:0b:33:85:9c:62:15:
a4:fd:0f:51:c2:7d:ed:91:8f:49:53:c2:7b:8f:1e:
e1:48:37:60:5d:42:11:4f:08:84:0c:f5:c0:a9:d1:
33:11:de:58:c2:08:00:87:7d:1e:2c:72:d8:ec:bc:
de:06:75:ff:3c:8b:2c:ee:8c:78:39:8b:62:2d:4e:
c0:2e:2b:28:04:a3:e3:0d:ea:50:a8:7b:28:b8:67:
06:05:19:5d:f4:36:f7:38:54:ce:4f:85:d7:6c:ca:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:07:44:D4:44:56:1E:05:10:2C:AF:1D:C9:06:93:3B:5C:6F:F2
X509v3 Authority Key Identifier:
keyid:99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e7:83:4f:b7:da:59:53:96:ef:ac:d9:89:db:34:bc:2c:14:
dd:3f:2a:9e:c0:3f:73:10:d7:be:85:0d:51:cb:f7:68:25:49:
45:84:6c:3b:a7:23:ec:fe:44:18:67:e0:8e:50:8c:99:40:97:
61:07:f8:8d:1a:cb:39:50:01:71:b2:7c:22:19:83:39:35:58:
b4:1f:0a:c8:9a:ae:b9:b4:fa:f1:f1:6b:7f:9b:9e:65:f5:af:
ef:7a:6b:fb:c3:4d:69:c8:8e:41:2c:88:36:ab:dd:69:bb:63:
78:36:82:7a:86:0c:60:0e:26:5e:47:09:f9:4c:8e:1a:57:90:
70:67:a3:5d:71:42:44:51:26:39:30:71:c4:77:b0:da:99:a0:
a1:1c:96:80:f0:88:aa:65:ec:6b:6a:44:7c:ed:ed:ba:11:27:
a9:1e:d1:80:fa:a8:a9:e6:eb:f9:14:9e:5f:c4:bb:53:56:b6:
3b:55:24:c3:22:31:e1:69:45:e0:8b:1d:73:39:6a:a0:09:0a:
db:96:75:db:54:eb:85:6b:6e:17:29:26:f0:a7:c3:f7:ab:de:
84:50:a8:98:03:b1:03:9f:56:a4:de:ef:21:cb:48:96:51:10:
72:58:6c:1c:5c:23:44:8f:c1:b0:c9:a1:8f:bc:5e:07:de:bf:
f7:05:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:09 2026 by rpki-client