
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json)
Hash identifier: YKMr5EYu5gvONVWf9w9MKZmn6BR/b/cglT8RH+SyxBY=
Subject key identifier: C1:8C:9F:3D:92:E5:6D:B5:24:03:76:D7:64:9F:FF:8E:55:A5:32:BC
Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64
Certificate serial: 019CACB51F16E7E4FF7114987EF6BF4612AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:01:16 +0000
Manifest this update: Mon 02 Mar 2026 04:01:16 +0000
Manifest next update: Tue 03 Mar 2026 04:01:16 +0000
Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: FAqWUqD7R26hbHuCOLdw0CKvyHDNzqPegGW+oRXEmuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1f:16:e7:e4:ff:71:14:98:7e:f6:bf:46:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64
Validity
Not Before: Mar 2 04:01:16 2026 GMT
Not After : Mar 3 04:01:16 2026 GMT
Subject: CN=c18c9f3d92e56db5240376d7649fff8e55a532bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:bc:78:83:24:df:c8:6f:f4:4e:0e:85:ac:
e0:46:ea:0b:6e:37:cf:a5:b5:ec:15:da:ab:f1:99:
9d:88:36:d5:05:ce:af:15:3c:a1:85:66:2d:71:04:
70:29:79:c0:5a:94:4e:db:0b:50:30:c0:11:c8:a9:
4b:d0:b6:ed:32:7a:a7:e8:1e:4f:08:0c:f2:8b:39:
60:31:b7:1f:e0:e7:2f:f6:28:0f:71:bf:8e:52:a0:
e5:1c:49:5c:7e:74:e1:72:76:a4:b2:53:58:07:eb:
b1:a8:e8:06:8a:02:c9:1c:7a:0d:d8:9c:4f:90:6b:
47:f4:d5:fc:55:4b:b2:51:da:b9:bd:f0:10:fd:d2:
c4:a0:e9:00:d6:4b:4f:15:92:77:8c:ec:31:dc:ea:
3b:80:f2:62:44:1d:94:07:3a:4c:11:a4:b4:88:16:
5a:51:30:d1:6e:2e:b5:77:76:1e:07:48:5c:5b:8b:
ff:87:a8:d3:8f:e4:91:d2:2d:39:a7:4a:16:36:a7:
9e:67:3d:c3:59:3c:29:bb:a7:20:d4:5e:c6:4d:6b:
bc:f3:72:a4:fe:53:5e:62:26:53:24:04:8e:ea:df:
a7:ed:ef:f0:10:19:6f:9d:bb:9a:b6:23:2f:f8:1c:
0a:a7:26:a9:10:f2:7d:c0:af:02:e5:10:01:f4:52:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:9F:3D:92:E5:6D:B5:24:03:76:D7:64:9F:FF:8E:55:A5:32:BC
X509v3 Authority Key Identifier:
keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:96:97:c9:8f:85:e6:4d:66:a9:f1:4a:8f:1a:61:8a:82:68:
55:55:3c:8b:aa:e7:1b:bd:c9:6c:7e:07:a6:98:ec:74:18:06:
2a:6d:18:10:03:80:4a:1a:e1:14:5e:c6:59:c9:bd:b5:ca:5f:
2b:a5:05:1c:f2:2c:8f:4a:e4:58:16:a4:a6:ed:d1:4e:75:4a:
cf:eb:87:26:b0:c5:b9:a5:63:8b:59:60:a3:b9:26:ad:46:d1:
ba:17:68:c8:e7:da:79:99:1e:6f:d9:4f:69:cd:24:f2:44:ed:
24:1b:3f:20:0c:41:24:23:16:da:f7:9a:18:29:12:81:fa:af:
16:41:17:e9:2f:4f:c7:af:3e:b4:65:2d:7b:d0:5c:64:0c:c0:
25:2c:27:b6:1e:fd:74:d2:7e:98:ee:56:de:19:44:9e:53:93:
0d:a6:ad:a1:6b:83:e2:d9:28:84:f3:b2:03:3c:2c:cd:c0:66:
1b:bc:4a:04:c0:6d:c2:c5:a9:a0:c8:89:4c:b3:71:37:9b:d5:
d8:52:80:ff:04:ae:a7:d7:2c:c0:f8:56:d2:41:ea:af:c0:28:
45:4d:9f:fa:30:55:24:72:12:d0:34:a1:7d:39:8e:8a:04:08:
59:0c:e6:35:02:e4:82:5e:20:ec:71:51:76:c9:5f:c3:54:a7:
9e:a2:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:55 2026 by rpki-client