Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: N3D2vMOqDYWF6BYhLg6XJ07iHTksUoxw2s6Zfsfi3SU=
Subject key identifier: 03:28:3A:A6:54:AD:6B:D9:06:95:1A:DB:13:B9:1D:B1:14:30:01:4B
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 019CACEB5AE1445F4EBA189C0C9A3A1F2CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:00:31 +0000
Manifest this update: Mon 02 Mar 2026 05:00:31 +0000
Manifest next update: Tue 03 Mar 2026 05:00:31 +0000
Files and hashes: 1: VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa (hash: eyvaXZ1DgOHbc16lk8yXQEwz4POlL+tLjFw5QFZgFv4=)
2: VhZZqyHl4RcvVrDtF9S5qJYdsrI.roa (hash: 8RcjIqSIrUsAtUqmpBMu/l4viLpz4Dni8fqFOKIrXPc=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: Zo91tMd/+ghPrv6IEhHT5GafHswZ+xl2iMpXi6X9B0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:5a:e1:44:5f:4e:ba:18:9c:0c:9a:3a:1f:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Mar 2 05:00:31 2026 GMT
Not After : Mar 3 05:00:31 2026 GMT
Subject: CN=03283aa654ad6bd906951adb13b91db11430014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:f4:11:52:0c:b3:1e:7a:96:14:1d:87:b0:
98:b8:b7:ab:ee:48:72:5c:3d:88:4f:59:47:67:8d:
ce:7a:d9:aa:bb:04:25:83:a0:42:36:30:df:6c:6c:
ca:41:22:66:47:cc:a4:df:d0:22:9d:59:4a:7f:90:
25:2d:45:e3:de:e1:c8:d7:14:4d:03:af:13:cf:8e:
30:ba:60:a5:30:f6:99:14:9c:12:1d:45:ee:43:71:
2f:67:00:cc:af:6c:6c:2b:05:46:98:51:4f:dd:67:
49:46:a4:a3:6c:79:fe:0e:35:88:ca:f3:42:39:ab:
58:fd:e2:e5:c2:71:ea:f8:4d:f8:73:81:1a:7c:9d:
4f:a2:97:5d:fe:7a:d4:bb:c3:0e:d1:e0:e1:27:88:
45:88:eb:29:6a:db:af:0e:53:3a:57:0d:cf:4c:ac:
47:d2:ad:5b:ca:b5:48:9d:e9:89:19:cc:85:bb:55:
af:bf:a7:09:78:e1:23:a2:a1:a1:c3:30:25:5e:dd:
f3:59:e7:ba:55:06:8c:b4:6d:c7:eb:94:3b:f8:83:
e2:0a:79:fb:29:29:02:0f:af:e1:67:c8:c6:f2:a3:
87:f1:72:5a:b3:df:94:35:c1:c1:91:b6:83:4a:7b:
00:f3:30:b0:e6:ac:06:1c:be:7c:a6:97:01:3c:a2:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:3A:A6:54:AD:6B:D9:06:95:1A:DB:13:B9:1D:B1:14:30:01:4B
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:23:3b:67:18:fb:05:5a:58:7d:24:16:6f:53:6b:10:6c:
f9:1b:92:82:04:86:01:ea:0b:5a:e2:aa:e7:85:9c:b1:56:05:
f6:66:61:27:4b:bc:0a:2a:0c:6f:c5:f8:27:7b:cb:a1:65:8d:
a3:15:ca:9d:11:18:53:10:66:c1:bc:e8:13:16:3a:de:16:bd:
ca:b9:86:14:42:08:18:a3:2a:fb:5f:b0:59:5b:c5:ec:29:96:
b8:df:67:9c:51:44:63:de:d5:f2:8c:0c:93:b1:3f:08:5c:c1:
c5:58:57:f6:96:9e:b0:0e:8e:3a:95:e8:b0:34:6b:da:55:94:
f3:91:7e:6b:43:bf:5b:45:70:20:2d:18:c2:a7:e8:3e:f6:7c:
61:70:3f:10:f2:b3:93:3c:2a:0d:ef:c5:c0:e0:b4:98:aa:1d:
6c:0d:c2:e0:7b:1f:ad:29:b8:02:93:1b:80:57:2f:dd:bc:f0:
b3:0c:e3:01:77:00:9a:9a:28:a2:bd:70:94:9a:4b:12:19:b4:
91:c9:6f:6a:38:bb:38:d6:2f:fd:38:4c:7e:b1:1c:5b:c0:58:
5f:9c:b5:bc:3b:cf:1d:ce:8e:34:cc:f9:76:cc:6a:ea:7e:47:
7b:0f:85:e0:04:51:a7:b1:4e:50:fc:8f:34:9c:ab:b8:07:6a:
d1:a2:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:58 2026 by rpki-client