Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: qyiWPhVRi5pshY9cGah8FBGCvC0oPSNNpKs814Pks8M=
Subject key identifier: 88:12:F8:B3:46:D1:2F:E7:ED:FD:E0:8B:EB:7F:D0:79:00:2F:4F:1C
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019D98F46509CF6D1032C0A2B17EC3350A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 05F0
Signing time: Fri 17 Apr 2026 01:00:46 +0000
Manifest this update: Fri 17 Apr 2026 01:00:46 +0000
Manifest next update: Sat 18 Apr 2026 01:00:46 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: KSGLYKo51ZDAKryEw+BkW0W5+o+/bReeoEsc3uqylvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:65:09:cf:6d:10:32:c0:a2:b1:7e:c3:35:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Apr 17 01:00:46 2026 GMT
Not After : Apr 18 01:00:46 2026 GMT
Subject: CN=8812f8b346d12fe7edfde08beb7fd079002f4f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:e0:c3:8b:b6:9b:42:61:63:b8:ca:cd:db:
18:a7:64:e1:fb:9c:c3:6e:00:09:8b:43:6b:c1:00:
75:53:1d:64:f6:26:bd:de:fa:c4:b2:c9:bc:2d:3a:
f9:2f:37:73:c8:9a:ce:e0:f6:9b:bc:94:b0:16:0e:
f0:61:40:c4:3c:8d:ff:65:d0:07:ea:d1:95:75:06:
d9:b9:af:e3:c7:24:69:f9:7d:3b:d4:10:07:26:ca:
d5:8b:97:3a:ac:d5:91:e7:ef:8c:f6:9a:c2:17:51:
e1:0a:2a:99:11:8f:5d:5a:24:d4:31:78:65:54:31:
88:72:c7:3d:4c:27:3a:60:c8:78:c4:5d:c2:e6:15:
c8:f2:64:f2:3d:d4:43:51:38:40:6e:7c:b3:d6:c2:
83:4a:0e:f8:15:b4:46:f5:c1:85:31:e8:59:42:9f:
5c:a8:a6:54:e7:25:c5:6a:75:2e:cc:85:c0:1b:df:
b5:b7:0f:f8:5f:fd:6a:d1:4b:cc:b5:7e:df:45:e1:
db:7d:85:12:17:77:dc:4d:17:a1:bb:0d:5e:a9:c4:
63:94:d8:a7:d8:1b:f3:56:32:f9:fa:88:9a:25:ab:
35:19:fd:9b:35:8b:f0:72:b5:ff:ea:09:7e:22:67:
f6:70:20:ac:3c:46:e5:3c:97:bb:d5:96:fd:02:58:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:F8:B3:46:D1:2F:E7:ED:FD:E0:8B:EB:7F:D0:79:00:2F:4F:1C
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ba:e5:5b:cc:6c:97:53:4f:d7:9a:3e:46:11:1c:3a:e3:d6:
a1:95:18:5b:d2:a4:cf:7f:55:2e:04:32:f2:5b:d1:9e:41:1b:
66:9e:f9:13:3e:9d:8c:d4:66:3e:a6:af:da:9b:4a:26:00:89:
20:6d:6a:b8:84:4b:99:95:41:ad:1f:bd:88:4d:f7:1b:32:41:
9e:f9:79:18:52:4d:64:9e:ba:a3:4a:f1:ea:94:2f:aa:5f:11:
c0:76:3c:29:38:37:19:9d:d3:70:08:da:84:06:2f:70:f5:14:
1f:31:7b:f9:14:da:f9:dc:53:3e:5d:4d:e7:66:68:42:16:bc:
22:01:1e:8f:23:dd:74:6e:d8:f9:75:e2:57:cd:66:d4:87:d8:
25:23:bd:42:3b:bf:f0:c2:ef:96:5d:0b:a9:b5:1c:9b:2d:2a:
86:5b:ac:6a:e6:5d:0f:3e:c9:c7:c7:04:5a:a8:fe:f7:79:01:
22:91:67:cd:45:d1:3e:40:a4:60:ff:c6:09:d4:a6:00:04:3b:
92:6d:8c:20:ec:3d:77:97:ca:e2:53:81:d1:1a:ca:4c:37:ea:
94:bc:42:09:54:93:2e:72:b8:16:aa:78:5e:90:03:1e:ed:99:
22:aa:fa:86:fb:5c:aa:09:4c:0f:15:5a:32:9c:0d:e7:d2:a1:
ad:02:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:21 2026 by rpki-client