Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: cKsQJsxb0hL6oP4XUrjHmdFLn4WhJDIQTbn+SM4lCDE=
Subject key identifier: 6D:14:A7:91:47:D1:42:4D:1F:4C:6D:01:B6:17:67:56:3D:91:8E:CC
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019CAB6B24B8BE2EAF7D7CBD72720EB5FFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 0575
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: gcNWJx0Yb3tIUsnqjfkylf/t03a/TijQ1OSFHyMQmaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:24:b8:be:2e:af:7d:7c:bd:72:72:0e:b5:ff:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=6d14a79147d1424d1f4c6d01b61767563d918ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:2d:5c:9d:49:a1:67:6a:75:96:47:a4:0b:
bd:90:6e:ea:9e:e1:4e:1c:78:a2:6e:98:78:6d:d0:
33:5d:50:87:40:46:62:ad:15:43:b5:38:ef:01:62:
cc:0f:ca:73:79:50:b7:66:90:07:6f:79:c3:aa:95:
09:59:8e:5e:e6:f5:a5:50:cf:7b:5e:9f:7f:66:07:
59:60:13:00:e0:75:0d:bc:28:fa:9b:7e:1a:56:78:
79:5e:13:0a:c5:b4:95:8f:39:8b:ad:60:de:2f:67:
ef:7e:a8:65:7c:79:2d:3e:0f:aa:c2:ed:b3:89:f9:
90:5d:50:08:e6:4c:2d:b1:69:b8:54:65:48:97:76:
93:d1:f9:d3:df:99:0b:89:97:b0:b6:4f:b5:ac:a0:
21:df:07:12:45:94:b7:1e:af:2c:1a:ab:16:5e:6b:
3b:d5:e8:57:0e:3a:a7:03:b0:9c:84:00:2a:00:dc:
9a:62:a5:13:be:c0:ec:cf:41:c0:ac:57:9e:d0:53:
ee:0e:26:bd:de:0e:80:ed:0a:fa:de:e0:07:0b:bf:
f6:47:9d:bc:a8:2f:d5:e2:f1:d5:60:15:b8:cc:6b:
a6:02:8f:bf:be:03:c8:6c:68:96:cb:c2:26:6b:d7:
62:f0:5a:c1:5c:99:0d:77:a8:15:82:7a:0b:55:5d:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:14:A7:91:47:D1:42:4D:1F:4C:6D:01:B6:17:67:56:3D:91:8E:CC
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:07:0e:d5:53:65:41:04:0c:ff:25:6e:43:3b:36:ea:b1:78:
21:50:1d:72:5e:c4:77:a2:0d:bf:9c:4f:14:63:52:99:af:c7:
8e:67:48:27:5c:59:31:60:31:da:8a:98:f5:aa:8c:e2:76:6e:
a7:75:2b:14:96:c3:ae:09:7d:47:75:87:fe:18:bb:a7:a3:91:
0a:e3:87:e8:aa:56:36:5e:77:27:44:a2:de:f3:4d:2c:05:bb:
02:bd:51:cf:ff:c4:c5:91:af:79:8a:7f:a0:e0:f2:76:45:d7:
e4:0b:09:ba:9e:1b:b3:e2:39:35:1c:61:fe:5a:8c:73:fb:1a:
91:25:21:4b:bf:81:c8:a8:e3:c3:35:fd:e8:a5:a7:70:fa:05:
47:62:00:aa:e6:0d:9b:c2:91:52:9c:97:d1:30:0d:5b:e2:2e:
46:cd:82:a0:bf:8c:4b:fc:d4:c7:ee:1b:94:df:7d:58:ba:5c:
d3:8c:9a:4a:2f:bd:4a:6d:37:d0:4c:e4:94:91:f5:8d:ce:c2:
aa:86:8f:17:fb:cb:de:9c:ef:c1:39:5d:8a:8d:5b:09:a2:bb:
96:54:9b:e7:60:61:82:c9:15:83:4c:56:7d:f8:16:d0:22:c4:
a4:bb:09:bb:2c:bb:37:3e:f5:fc:1d:e2:eb:9b:aa:78:24:e3:
f1:61:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:50 2026 by rpki-client