Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File: mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier: 08ZSSGJwq/i5YqGQQwkjtMCuQ+Iwq2/3cJUo+V8R1B8=
Subject key identifier: C4:72:C8:1A:7E:FE:1D:2C:C5:3F:A0:37:66:49:32:25:EE:DA:AF:59
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer: /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial: 019D9B19639CB57E288BD03A492FC3A0A406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number: 02A4
Signing time: Fri 17 Apr 2026 11:00:25 +0000
Manifest this update: Fri 17 Apr 2026 11:00:25 +0000
Manifest next update: Sat 18 Apr 2026 11:00:25 +0000
Files and hashes: 1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: +MDAZduUN4L6wh0X98JU2xObIPIL2aSGCFJ1HUtoNkg=)
2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:63:9c:b5:7e:28:8b:d0:3a:49:2f:c3:a0:a4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Validity
Not Before: Apr 17 11:00:25 2026 GMT
Not After : Apr 18 11:00:25 2026 GMT
Subject: CN=c472c81a7efe1d2cc53fa03766493225eedaaf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:e8:41:1e:36:b0:9d:5a:ca:d9:f1:8f:c7:
e8:7f:3b:71:a9:a0:23:78:09:cd:a4:bf:f9:e6:0e:
cd:24:ee:a3:5c:25:a0:0e:20:96:d0:73:67:39:cc:
4c:8e:28:df:93:93:ad:6a:11:92:85:a3:8f:e1:f5:
e9:12:fb:e2:55:65:a1:3c:36:6c:ed:fa:8e:db:53:
70:82:a4:4d:8b:bd:0a:76:4e:c1:32:59:11:2a:27:
ca:b3:00:f5:5c:58:5c:10:1b:a7:d6:16:fa:46:b9:
64:83:80:5f:94:ce:4b:7c:8c:2d:ec:38:81:2e:6f:
2e:48:ac:62:cb:f2:85:bb:55:55:42:34:6e:f8:7d:
f9:c1:28:14:f6:00:5f:92:7c:3e:35:78:89:e4:94:
6d:f0:04:f1:91:ff:2a:99:b5:55:93:c9:19:02:21:
75:eb:a1:8d:57:5f:6e:63:38:b5:ba:63:d9:08:a5:
3c:f8:fa:15:ee:f8:36:ab:91:dc:5d:73:24:89:21:
6b:de:4f:d3:b2:5b:4b:c1:ce:ce:41:34:e5:78:af:
00:66:a9:2a:ee:c5:ea:0d:a0:47:85:c4:1a:3b:ea:
f1:a4:4f:27:c7:1a:ab:e0:80:56:57:93:fa:2f:29:
e5:fa:96:fb:51:15:f1:6b:2b:aa:12:15:f9:6b:11:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:C8:1A:7E:FE:1D:2C:C5:3F:A0:37:66:49:32:25:EE:DA:AF:59
X509v3 Authority Key Identifier:
keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ff:4e:5a:e6:d6:e1:84:ce:de:d1:a8:f5:30:2f:9f:35:5e:
f5:0c:5b:ab:9c:55:74:01:24:41:41:3b:03:4d:ed:35:a0:1c:
38:a4:38:9e:14:2f:a0:1c:c0:b5:0f:53:a1:2c:32:71:ac:f1:
ef:37:5b:6f:72:98:cb:58:36:1f:0d:d2:f5:93:bf:10:0a:c5:
10:e7:b9:e7:49:0a:0a:4b:38:f3:f6:81:2e:fc:15:64:29:47:
a4:70:29:9e:9f:0b:91:b1:59:0e:92:09:ea:09:e3:14:9b:a7:
52:77:e1:26:fc:ab:ee:d3:ca:78:23:56:9d:95:d7:1a:f5:75:
b1:22:ce:e8:61:21:19:a9:28:5b:aa:2e:68:fe:9d:79:01:ee:
b7:fc:fd:9d:f0:72:fc:3b:02:c1:fb:db:15:ae:f4:54:a0:0d:
05:fa:a4:d7:d6:58:d2:bd:36:cc:8d:37:c9:99:7b:e0:25:ce:
e0:24:54:af:87:a0:c3:53:03:bd:89:d7:e4:86:d3:f2:52:e5:
3c:e3:1a:c8:7d:43:87:18:c7:d7:8b:f3:b9:dd:0e:1f:97:10:
ae:46:49:52:fd:d0:25:6a:96:62:bb:d2:96:b1:36:20:17:c1:
77:65:29:cf:82:da:b3:20:85:46:ca:ed:8e:05:67:54:fc:65:
77:d2:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:50 2026 by rpki-client