Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
File: mTFQMIBh3NrF2EZc-ITGejuxkVk.mft (raw, json)
Hash identifier: h69jG0JJv+YiAQHrZA6XCPp76iAYEq41Uujny0RXC08=
Subject key identifier: 13:09:A6:AD:EB:AC:4B:9C:43:FC:0B:3F:03:71:55:5A:C9:58:FD:59
Authority key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
Certificate issuer: /CN=993150308061dcdac5d8465cf884c67a3bb19159
Certificate serial: 019CACB4BAB5AC06AA820E129AD66AF26511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
Manifest number: 093B
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: mTFQMIBh3NrF2EZc-ITGejuxkVk.crl (hash: 8PX1KTYaxTNkwR0WBLHIcyOyt0hj+6QBS6z/s8QNlfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ba:b5:ac:06:aa:82:0e:12:9a:d6:6a:f2:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993150308061dcdac5d8465cf884c67a3bb19159
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=1309a6adebac4b9c43fc0b3f0371555ac958fd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:d6:22:5b:91:cc:dd:05:71:30:e5:df:43:
1e:87:d4:70:72:10:1d:eb:2d:5a:56:9c:f2:4e:15:
c5:f5:80:52:63:14:87:a6:c6:6b:82:71:86:de:e2:
0f:25:4b:d6:b8:9c:4a:f3:63:80:d1:9f:62:7a:1d:
60:bf:d9:60:ae:8f:91:42:62:3c:03:3a:d0:b0:9d:
86:74:51:e4:9e:15:5d:18:b1:f7:d7:95:a0:b7:24:
d3:f0:0d:2b:6e:fc:e2:fa:14:b9:51:b2:ba:d1:6f:
05:d4:b4:1d:76:3b:6b:09:42:c1:c2:83:e9:13:1e:
98:f6:7a:f2:48:f6:cc:c3:31:dc:62:12:50:31:eb:
e2:5a:dd:01:f7:f0:cf:20:4c:22:0f:90:8c:44:34:
46:1c:bf:e8:8e:6c:21:ca:c5:fe:c3:97:e9:89:69:
3e:98:d6:8c:00:27:56:c6:4e:7c:ca:3b:89:0b:2c:
9f:87:d2:46:8e:a3:99:ad:b7:b6:c6:b0:67:07:6f:
e3:84:bf:4d:ed:25:d1:a6:2a:f3:99:6f:42:cf:a4:
4a:85:99:c3:a5:9b:d0:97:f8:a0:56:e7:06:42:05:
80:4f:5c:14:93:7f:cf:a8:0f:e3:bc:b2:e9:a5:dc:
ee:33:02:9a:47:8e:a4:a9:56:ed:c2:87:98:8d:68:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:A6:AD:EB:AC:4B:9C:43:FC:0B:3F:03:71:55:5A:C9:58:FD:59
X509v3 Authority Key Identifier:
keyid:99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:be:62:1c:07:df:2d:5e:13:43:9e:b7:eb:b9:5a:67:ef:
2f:c7:7b:c8:93:d3:7a:fc:8b:a0:db:75:de:c5:f6:3a:ff:9c:
d4:cf:d9:5e:8e:7a:99:65:10:17:9b:82:36:f7:5e:9c:30:9d:
3c:05:26:8a:24:cd:8b:34:29:10:41:3f:b8:38:89:e2:33:09:
73:bb:9a:21:2a:02:4a:f8:30:a1:39:69:97:14:66:ec:58:7e:
2c:a1:75:7e:40:0e:ce:02:94:2c:2a:52:60:69:84:26:8b:40:
70:70:b2:ac:15:fa:3d:9c:30:3a:98:ea:54:29:0d:c5:29:8f:
82:b6:c5:70:0e:78:f6:e5:4b:03:c3:33:91:ff:a6:90:c0:d8:
35:b3:b9:c4:44:90:06:a6:27:fb:80:66:2b:63:5f:12:ab:7a:
86:e1:12:e2:40:d8:a3:90:12:50:cd:17:a9:1b:88:49:b3:74:
0f:2c:86:0b:81:f5:5e:c6:9f:a0:e3:cc:8f:50:5b:ba:99:80:
3a:8d:2d:b6:e9:a2:75:b3:9f:1c:1f:69:ae:09:f7:e4:1a:89:
bd:b9:ab:14:f2:6c:04:80:37:a9:4f:4a:a8:01:bd:92:50:a4:
33:c5:3c:d6:5f:bd:91:a2:9d:bd:cb:34:25:68:a2:19:03:8a:
b0:a3:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:09 2026 by rpki-client