Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: GSK2EeBuVLmeLNeD+8q+cI+Hh+I9SfglFZ6zyA6SS54=
Subject key identifier: 70:7A:96:4E:43:DB:0D:54:C2:EF:5E:88:60:AE:8B:14:9C:85:2A:CC
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019CAA59060F53EFE2ABD7F5D8B364278179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 1027
Signing time: Sun 01 Mar 2026 17:01:26 +0000
Manifest this update: Sun 01 Mar 2026 17:01:26 +0000
Manifest next update: Mon 02 Mar 2026 17:01:26 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: c+fpTpN1JYfvdNcoKr6b+UV44x66PcCp41KV0hticTI=)
2: AcTeoEML1ryHQtehrMdoz9pSMNk.roa (hash: 58HREcExgCm4jYk7OfR+la9NkSYLp6wFVz1Zv1g3G6w=)
3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:06:0f:53:ef:e2:ab:d7:f5:d8:b3:64:27:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Mar 1 17:01:26 2026 GMT
Not After : Mar 2 17:01:26 2026 GMT
Subject: CN=707a964e43db0d54c2ef5e8860ae8b149c852acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:f8:f3:bf:19:85:40:de:a4:46:41:06:da:
d3:70:42:2f:ee:64:a3:97:4f:7e:84:3d:e1:86:cb:
bb:3c:dc:b6:a8:00:18:70:6d:21:fa:68:c1:c4:70:
7d:b4:52:1f:d0:80:55:1b:8c:30:47:30:c0:bf:fd:
c5:8a:bc:f6:5e:2e:c1:b0:26:64:fb:75:38:24:56:
f5:d0:12:80:9a:32:eb:b6:c1:53:0f:c5:76:f3:5c:
4f:84:2f:f1:13:86:9d:fe:57:8f:bf:37:39:02:1f:
48:e6:9c:f6:e2:cb:70:da:4b:67:6f:b5:0a:4f:00:
4b:e7:c4:26:65:a1:d7:88:24:bb:f7:0a:43:af:c6:
d2:4c:ce:81:a8:3f:e3:d6:cc:45:cb:9e:b4:7d:89:
fe:ca:f2:5e:40:f2:51:34:bf:4a:ae:84:9d:b0:a6:
56:97:a7:b7:5b:f8:75:00:e9:49:d5:e3:1a:ed:b8:
2d:1e:0a:52:0a:d5:df:22:cb:05:d3:9d:22:df:dd:
f2:18:a1:27:70:aa:ef:af:4b:04:46:ce:db:03:0f:
03:85:57:a7:12:a2:b6:7d:30:92:7d:e4:79:41:c8:
ad:62:92:64:8d:8c:80:20:b2:a2:81:d4:92:03:8d:
69:fd:97:db:62:d2:89:61:2b:bd:51:e0:49:89:11:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:96:4E:43:DB:0D:54:C2:EF:5E:88:60:AE:8B:14:9C:85:2A:CC
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:00:15:32:6f:eb:99:07:dc:c8:41:8d:c8:25:8c:1a:18:
b6:a0:e5:c0:af:c2:c0:4c:b7:9e:07:00:6b:7f:59:83:a0:bb:
a5:b0:c1:11:23:1e:17:da:94:5c:0e:df:b5:a8:52:55:82:54:
9b:8e:e5:7e:d1:bd:51:82:66:05:b1:d7:23:01:ba:a5:ba:1d:
3f:54:9a:f7:02:6f:49:cc:96:69:40:ed:90:1b:b2:d6:86:00:
23:e2:c9:64:d4:f6:5d:1a:c8:3e:ca:f3:b0:bb:a8:2c:6f:bc:
9f:ad:43:27:2c:26:de:6f:15:d7:b4:06:ba:f2:ca:dd:32:95:
dc:87:18:38:6e:70:e8:19:05:63:8a:b2:2c:41:bc:c0:d3:6e:
fb:c7:2d:b2:e5:01:83:54:9c:c7:13:4c:88:18:b9:c0:9b:15:
8e:54:ff:2a:97:3c:de:d0:84:02:31:86:e8:30:4a:23:8a:d3:
54:d5:48:6b:7e:fc:68:c3:be:fc:ad:3a:05:ff:ff:0c:c0:ff:
6a:bc:34:29:32:e6:a8:a4:d3:25:3c:2a:5e:cd:f0:2b:30:f1:
17:6f:de:9d:a7:56:16:c6:97:51:08:14:a8:b7:ab:e7:71:a0:
32:8e:e0:c9:1e:26:d0:09:c3:ec:57:12:92:3b:60:66:7b:ac:
44:cc:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:54 2026 by rpki-client