Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: Ywnga9cfu/i8c1B1ndl91YM2YphH/V+lgi+2sSCwxcA=
Subject key identifier: 93:82:55:62:7F:53:A2:D5:72:B0:F6:D9:34:23:6E:66:A4:4F:56:5B
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019CAD9094289A9ED5C6475E99072DA776FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:00:59 +0000
Manifest this update: Mon 02 Mar 2026 08:00:59 +0000
Manifest next update: Tue 03 Mar 2026 08:00:59 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: V3v0CQnKAzGGlyLZSnhNHRULIehEZZwXq2CgfvTVRvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:94:28:9a:9e:d5:c6:47:5e:99:07:2d:a7:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Mar 2 08:00:59 2026 GMT
Not After : Mar 3 08:00:59 2026 GMT
Subject: CN=938255627f53a2d572b0f6d934236e66a44f565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:9d:a6:19:ac:6b:b8:15:48:e0:b5:3c:51:
ab:17:f1:0e:97:4a:db:82:6b:f0:af:cd:f8:0b:49:
4c:76:4c:d3:ee:01:90:15:9e:b3:0f:80:fe:9d:c3:
50:5c:77:e9:de:f2:20:7a:6b:02:2e:58:01:1c:b7:
6d:ef:33:c4:3b:11:ef:77:55:a9:b8:46:56:74:dc:
14:3f:e1:24:b2:f3:a8:f0:59:fe:40:85:11:f2:51:
e0:10:88:30:96:da:b7:8f:3f:32:67:bb:6a:10:72:
d8:bb:db:3f:18:9f:2a:ad:25:7d:dd:f6:af:a3:20:
15:91:3f:f6:a9:15:0a:96:2e:a5:da:7e:5c:7e:15:
a6:24:a9:2e:d8:5a:62:2a:eb:57:56:07:a5:49:05:
36:55:df:e1:32:8b:6f:f3:2a:59:4e:06:36:eb:ac:
1c:1f:5d:cf:26:89:2e:2c:a7:b2:6e:7f:db:e2:46:
37:e9:dd:83:11:7d:59:60:ee:f3:b8:b7:9d:e2:91:
12:11:6d:c4:f5:0d:c7:c3:4a:40:00:a5:77:94:ac:
5c:95:1e:68:8e:ef:3a:d5:34:01:bd:cf:f2:cf:ae:
a7:d7:b7:00:f5:12:ce:fa:b4:6f:1b:3a:d0:d3:27:
e3:bb:dc:5a:ca:ec:fb:40:6f:0f:77:a2:dc:3c:2d:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:55:62:7F:53:A2:D5:72:B0:F6:D9:34:23:6E:66:A4:4F:56:5B
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:06:53:a7:4e:18:74:d5:3d:06:ea:8b:0f:a4:9f:85:e4:
ff:07:00:55:83:4c:0c:97:09:97:f4:6e:ee:e3:a4:21:f1:a3:
15:9a:27:60:c9:2f:03:65:a1:b7:1c:ac:e9:a8:30:ad:ad:66:
f0:db:26:47:4a:9e:27:6d:83:2b:b2:18:b5:05:01:c7:f5:2f:
44:ca:99:2d:c6:ce:f5:f3:ac:42:0b:85:38:f3:4f:1b:53:58:
c9:19:fd:5e:9d:1c:b2:eb:82:85:3a:13:19:a0:29:2e:f7:d3:
38:1c:71:38:58:de:38:1c:79:79:de:85:56:9b:12:19:d6:92:
33:43:ea:e6:b3:b3:41:e2:41:99:14:eb:19:bf:6e:bd:28:43:
e2:7b:1a:31:7f:2e:69:b3:cc:93:23:5c:ee:7d:1c:fa:c6:6a:
bb:fa:6d:2b:62:9b:63:e1:81:8e:63:11:f2:ca:a1:8f:1f:84:
c5:f8:4e:14:db:cd:c9:88:a4:03:46:df:13:88:4e:d8:c9:aa:
9d:16:54:8d:dd:1f:da:86:95:1f:90:67:2b:cf:5e:db:69:5a:
be:fa:56:d8:fd:d4:6b:67:8e:d2:1c:7a:1a:93:f2:91:42:09:
2c:07:14:f3:f6:b4:44:b3:22:54:fb:29:75:54:6d:b9:12:27:
46:08:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:28 2026 by rpki-client