Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: sP53xiG+ZOfceRnvOeVMM+wz/XeY8984zeeiGbSQ9pc=
Subject key identifier: 21:40:91:45:1D:4D:C2:34:C8:40:FE:62:E2:04:0C:9D:33:4A:0A:5A
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019CAA584889BD6B51F929515BDA58769CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 1581
Signing time: Sun 01 Mar 2026 17:00:38 +0000
Manifest this update: Sun 01 Mar 2026 17:00:38 +0000
Manifest next update: Mon 02 Mar 2026 17:00:38 +0000
Files and hashes: 1: j1JDL1NRbmDxXB8ccW_ghKg7WSw.roa (hash: j1who2P7dA+z1wAH/SO7xSlnqBCmbnDiBNhev3xgB9A=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: xDvZhtF6Ng7fDb2OqgYZegPwi8PwJpHvz0+qlwy3y8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:48:89:bd:6b:51:f9:29:51:5b:da:58:76:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Mar 1 17:00:38 2026 GMT
Not After : Mar 2 17:00:38 2026 GMT
Subject: CN=214091451d4dc234c840fe62e2040c9d334a0a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9e:35:e2:52:75:c4:ea:d4:28:8e:f1:a4:d0:
d4:1f:72:bd:8b:01:1c:fc:e5:c2:fa:a3:f3:d9:5d:
17:7f:da:6b:94:bb:64:25:11:8e:62:c3:7a:c1:67:
e6:8f:f6:36:7d:80:da:4e:7f:be:6f:f2:fd:a4:6e:
31:13:34:50:0f:8d:c9:e0:4c:18:a1:a6:01:e6:1e:
b6:13:81:4d:fd:73:89:c5:5b:89:33:7b:03:ed:c0:
ce:be:fd:de:1b:e4:a1:a2:c4:b7:38:1f:d5:8e:34:
72:6a:fe:87:8a:45:0d:5f:b0:cf:d4:0e:a4:55:44:
8e:c6:5b:f6:54:5f:5c:b2:4e:47:f5:aa:a6:81:25:
b0:1a:ef:7b:46:01:6e:c9:75:88:50:12:19:29:22:
52:86:1e:36:ef:90:ad:73:c2:33:1c:8f:7c:d4:6e:
ec:d6:12:4c:2b:fb:c5:5d:e3:5e:9a:75:17:76:13:
96:77:d5:1c:15:a4:6f:ec:41:cb:6c:21:14:a1:2f:
63:e8:d0:fb:b5:4e:c0:0d:6b:e4:bf:2f:14:1c:7a:
fb:c4:53:33:59:dd:50:f5:00:0c:c3:0e:a4:3c:4d:
4f:5a:f6:d5:21:f7:03:52:4c:a3:0a:1b:fd:76:a7:
c0:a7:e9:63:00:9b:9d:6b:9e:a3:c1:9e:b9:55:3f:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:91:45:1D:4D:C2:34:C8:40:FE:62:E2:04:0C:9D:33:4A:0A:5A
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:57:f2:28:76:6f:8b:0f:16:5c:ea:b6:ee:a3:f5:b8:5d:
d5:34:1e:3d:5d:b2:aa:23:1c:8d:8f:a6:6d:d9:9e:5f:cd:1f:
30:44:ac:48:0d:14:fe:b6:37:6e:31:25:02:d3:fb:6f:0d:a8:
12:cd:5a:25:51:fc:3c:d1:47:75:0b:cb:ec:61:72:9b:4d:2f:
48:14:4c:e2:f9:84:d2:bd:5a:93:24:f1:8a:76:92:22:2b:91:
d5:90:0b:3a:7b:59:aa:1a:be:a2:25:a3:f8:9d:0f:80:1e:eb:
7d:13:e4:63:4b:e6:9b:23:c9:78:0b:20:54:53:57:5f:72:e4:
ac:87:57:81:f1:f9:5f:3b:d9:75:58:87:ca:d6:eb:69:f5:be:
be:0d:9c:af:f3:9c:cc:7c:96:53:8c:10:cc:8c:35:20:0f:f8:
73:2b:70:b8:4b:5e:7b:bd:af:dc:9d:a5:16:4e:ce:52:24:52:
8b:8d:5f:c8:34:84:7f:4c:9d:b5:ee:e8:d5:3b:14:c3:9b:05:
f0:f9:0d:1a:7d:c1:79:0d:22:71:24:74:56:ee:6a:3f:cd:7a:
db:14:d4:9c:3d:5f:61:1f:2f:87:b5:83:90:2c:4e:a7:a9:af:
b3:f7:e5:db:db:07:a5:e5:d1:90:93:a7:c7:c0:43:18:c9:ca:
f2:89:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:06 2026 by rpki-client