
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: IGg9bGjziRz7oRM4NCG6lGdTCCkwRT6vtCxM/aF+hJw=
Subject key identifier: 0E:00:A1:45:4C:5B:22:9E:ED:7A:93:05:00:97:F3:BB:D3:5B:C3:EA
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019D99D072D4F3A0D9E1913BBB36958C023C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 15FD
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa (hash: j1who2P7dA+z1wAH/SO7xSlnqBCmbnDiBNhev3xgB9A=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: /bB75A8LMYOiedKkaTI0UO+rDZNQ3IdnOlgooBk/fHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:72:d4:f3:a0:d9:e1:91:3b:bb:36:95:8c:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=0e00a1454c5b229eed7a93050097f3bbd35bc3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:e6:08:c8:a3:67:c7:9f:e9:52:0e:d6:f5:
55:31:8b:24:5e:c9:8c:27:3e:10:42:2a:52:2b:a9:
af:05:1d:b7:73:57:b7:15:48:00:7b:c9:d4:41:5f:
42:61:b1:e6:b7:25:e6:e0:43:a2:66:88:e7:ca:24:
34:4d:41:21:40:0a:64:e8:53:86:38:8a:ae:a3:43:
31:f0:83:df:71:a3:51:34:01:40:e7:40:ae:55:7e:
04:97:22:6f:49:e0:b1:1c:d0:a6:27:05:66:93:fa:
ed:f5:c6:d7:f0:c5:19:79:e6:b4:6d:a0:33:1d:b1:
d6:8f:16:7f:94:75:d7:57:9e:c0:2c:6a:89:16:25:
07:17:bf:a4:47:6a:0c:f1:7d:7c:29:43:ee:c7:46:
ef:54:77:14:0b:5d:e2:b5:87:9a:b4:e6:c1:1a:95:
2c:8d:eb:34:99:a1:6d:4b:4f:dc:1c:0a:50:51:8f:
8c:c8:10:29:0f:58:2a:7c:db:f3:f7:50:f6:37:14:
24:3f:38:a6:dc:d0:7e:c9:23:8a:31:86:ba:47:ea:
a0:a9:27:3d:ba:ba:be:78:ae:f5:5a:0a:1a:7d:73:
13:13:7d:a3:dd:5f:cb:74:8b:9e:7d:ff:dd:9e:af:
06:8b:7d:9c:87:3e:86:1f:7c:99:63:03:b0:d0:48:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:A1:45:4C:5B:22:9E:ED:7A:93:05:00:97:F3:BB:D3:5B:C3:EA
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c2:aa:75:48:a0:d8:0c:0a:f6:d8:26:1c:30:5a:bb:0c:e5:
9f:1a:02:1e:8e:37:8a:97:df:2a:da:21:e2:10:2c:3e:19:87:
58:f2:f0:09:49:fa:45:eb:52:53:0d:c7:37:f7:df:09:36:41:
0d:e9:2d:04:82:9f:f3:64:3d:c1:ac:50:1e:7d:b0:7c:f8:4b:
f2:bb:bb:89:74:26:de:90:c0:09:52:64:2f:fe:86:c7:d6:8b:
a2:7c:27:b0:5d:d1:3a:ec:93:5d:d6:00:8a:f2:b4:fb:fc:dc:
45:14:d3:f8:73:c6:99:bc:44:df:c8:39:c1:fc:1a:9d:a7:2d:
a9:ce:e1:c2:ba:06:c9:3b:a2:c2:59:02:39:b1:13:8a:17:da:
62:83:4b:85:4e:95:76:c4:60:25:f5:23:b8:fa:f9:59:24:53:
ba:8f:e8:e9:56:f2:2d:4f:28:94:f4:67:3f:c6:7d:ce:b1:10:
9b:fa:1e:ad:34:e7:08:11:e6:b9:1f:17:6d:f8:80:5d:29:74:
12:d2:10:f2:fa:48:be:e8:70:f0:46:01:03:d7:a5:9a:fd:68:
8b:03:b6:24:ba:7a:b4:41:d2:dd:80:6c:ef:ae:7c:b9:b3:8c:
c2:c7:92:6c:01:2a:c5:36:c4:42:27:f0:04:57:b0:94:b2:4d:
42:d4:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:27 2026 by rpki-client