
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File: mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier: J8sNaj7tG2b1mBHcyPnM2qwjgpn2g4qwQYMjlwuqSic=
Subject key identifier: 51:E2:8E:F9:23:75:AA:5E:DE:33:69:48:27:62:8C:B8:34:78:9D:59
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer: /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial: 019CA9B3D41A750A81F5006AC0DA91542F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number: 0227
Signing time: Sun 01 Mar 2026 14:01:00 +0000
Manifest this update: Sun 01 Mar 2026 14:01:00 +0000
Manifest next update: Mon 02 Mar 2026 14:01:00 +0000
Files and hashes: 1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: /0mdbaDg/jxcp8zeSmgtdenrPn9REqUZhS5bNueClbs=)
2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:d4:1a:75:0a:81:f5:00:6a:c0:da:91:54:2f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Validity
Not Before: Mar 1 14:01:00 2026 GMT
Not After : Mar 2 14:01:00 2026 GMT
Subject: CN=51e28ef92375aa5ede33694827628cb834789d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:74:ed:a8:4e:55:46:d9:a5:34:52:de:be:
3e:a5:7b:32:ec:ee:d5:25:b6:e2:d7:e5:c0:5a:74:
2f:5d:05:c7:88:3f:b0:86:83:a6:e6:ce:37:fb:1f:
38:7d:83:37:ae:bc:5c:b8:70:ea:dd:1e:76:0b:51:
6b:78:0a:30:b9:b1:ac:d8:e6:1e:40:b2:e9:68:e1:
b2:21:56:6d:0f:1b:87:d0:7c:cd:df:f7:21:d3:3d:
1e:07:ee:8b:b3:fd:b4:88:1c:0d:c5:17:ef:f3:74:
be:4c:70:8c:f8:f0:46:63:a6:09:ca:f2:cd:74:09:
bf:7e:65:3a:a5:da:dd:4d:f6:2b:ec:3b:36:cb:af:
94:c7:ef:f2:90:d1:c0:c0:3f:6a:fe:2e:30:fa:cc:
72:8a:80:ef:fa:44:ef:25:f5:8e:fb:96:75:08:67:
57:25:a0:80:71:d7:71:b3:03:02:2d:ed:7a:cc:7f:
c3:56:3d:a5:52:81:e4:10:19:6b:30:6b:7e:eb:81:
c2:1c:76:6f:c3:73:ca:f3:68:c8:cf:6e:a0:f6:02:
63:cd:b8:da:99:e2:bf:d0:d2:c6:0f:a2:5e:3b:61:
90:d8:e9:8e:f8:1a:66:8b:3b:02:b1:b2:26:4d:e9:
a8:d0:8d:81:0c:fa:e9:4b:d8:67:76:53:e6:42:52:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E2:8E:F9:23:75:AA:5E:DE:33:69:48:27:62:8C:B8:34:78:9D:59
X509v3 Authority Key Identifier:
keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bc:68:89:c3:17:70:30:e5:94:92:f5:c2:53:19:35:93:95:
0f:99:c3:f6:e3:e2:d6:da:85:60:79:a7:7d:7b:f7:54:6c:ac:
7a:6f:1b:24:47:75:f1:0b:54:61:e8:4b:33:ef:46:89:38:18:
e6:6c:17:7f:ee:c1:b5:f2:45:d4:a5:01:bc:42:68:32:87:dd:
35:f7:5a:8b:0c:a8:01:96:74:6a:1c:05:85:26:d0:c3:c1:a3:
88:2b:ce:d5:0d:36:42:79:75:18:f1:84:a8:fb:db:17:f9:64:
7d:e4:0e:01:10:a5:9c:8c:0a:e5:df:62:8b:fd:4c:b3:6e:27:
83:bf:5c:4d:11:ea:a9:6a:9e:5b:0a:44:6a:cc:64:13:09:b5:
17:eb:0c:69:70:f5:d5:43:2e:fb:a0:a3:72:db:78:66:a2:8a:
9c:56:89:4d:b6:17:cb:ed:70:25:cb:91:d1:08:15:85:e1:d0:
a7:01:b1:62:57:cd:61:be:28:05:6f:19:7f:fe:c7:69:7e:a9:
5c:1f:40:a5:87:32:6d:8d:ed:f3:fb:b5:57:bc:97:a2:32:76:
6b:bd:92:33:b0:10:74:8a:b3:b4:e9:35:93:56:6a:18:1c:9c:
fc:c9:73:7b:cb:2a:c9:52:be:44:68:fc:4f:c4:6b:dd:64:c3:
0c:24:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:15 2026 by rpki-client