Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: V2wftIalBhvAmQpxq9qGmhhcoE1oV+VjDiUB5p1FL4I=
Subject key identifier: 41:03:C5:26:2C:53:FF:81:19:08:7D:75:B4:65:B6:AD:15:9F:AD:23
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 019CACB4A93FF623598A0AE69D2A4CE84EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0FA4
Signing time: Mon 02 Mar 2026 04:00:46 +0000
Manifest this update: Mon 02 Mar 2026 04:00:46 +0000
Manifest next update: Tue 03 Mar 2026 04:00:46 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: L7vaykiRx4H/3Ex/f7A9eEdtKLSW0pYjBiRzaFx+TE8=)
2: ezSfvW2twjkVve5nAqFXyJU1V-U.roa (hash: yCXYqjDBti2IXbGbDipByX+cxf41rBq8hGllPOt86z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a9:3f:f6:23:59:8a:0a:e6:9d:2a:4c:e8:4e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Mar 2 04:00:46 2026 GMT
Not After : Mar 3 04:00:46 2026 GMT
Subject: CN=4103c5262c53ff8119087d75b465b6ad159fad23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:b6:a6:d8:f8:e2:bc:d7:79:24:2c:58:3b:
2f:de:51:9a:b9:fa:de:3c:1f:b6:1a:cc:15:9a:f4:
dc:e1:b8:a0:d0:31:24:9a:bc:03:ca:77:d4:e5:7b:
9a:92:e2:1f:de:a0:8f:e5:c6:79:b2:a5:72:0b:9f:
64:04:74:74:64:1e:f3:2b:2f:4e:da:cb:b0:c8:4b:
ef:d4:91:ff:9b:be:7f:4c:a1:a2:dc:07:3b:48:f0:
a1:ba:1c:57:37:82:6f:a5:18:15:9e:93:ca:ea:f0:
c1:cf:1f:60:99:80:b6:0a:9b:96:e1:66:29:5d:ff:
5d:67:c7:26:ce:fa:ff:de:ff:d5:81:ec:ae:6d:2b:
6f:3f:e5:af:8c:b2:c6:97:59:f5:47:a2:f4:ba:3c:
c6:06:41:f7:3f:b5:4d:4e:ac:69:79:ae:c4:7a:e7:
f2:3c:92:96:d8:33:07:f6:13:c6:ed:30:c7:af:3d:
4e:b7:50:60:4b:95:60:cd:dc:69:d0:04:32:65:05:
e1:5a:d9:d6:ef:f8:17:e4:88:c1:95:96:38:c5:68:
3a:7c:3f:4c:aa:d5:93:88:7a:8c:5c:71:fa:cf:99:
62:bd:1a:8c:f6:79:b4:dc:aa:98:1b:58:39:0e:99:
59:35:ff:fe:87:45:65:b8:14:1b:a9:44:36:06:7c:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:03:C5:26:2C:53:FF:81:19:08:7D:75:B4:65:B6:AD:15:9F:AD:23
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:a4:fa:99:c9:3f:ea:a2:6f:6a:90:94:b2:20:be:05:70:
6c:cc:ea:e3:44:b6:24:d7:98:7b:c4:9a:1d:2b:03:85:9e:d2:
8f:5c:4e:17:9e:4a:44:ee:f1:a2:52:d3:7a:b8:ab:c5:aa:1e:
99:14:99:a7:c6:19:ff:42:2b:4a:27:9b:15:e0:e7:8c:bc:69:
25:7b:d0:47:66:84:7c:ec:ef:8f:37:a8:26:99:9b:7e:15:4d:
7a:a5:b2:94:c8:89:99:05:c4:c3:6b:ea:93:5e:fd:6b:b3:53:
c6:27:3e:1f:c9:bc:c7:19:fd:75:0e:9c:6a:8d:7d:a5:7a:76:
8d:ed:17:86:7f:a4:b2:98:17:ae:04:b4:08:8f:7a:8e:89:d9:
50:16:7f:06:d2:ce:87:67:69:d3:a9:5e:a2:39:b5:b6:dc:ac:
2c:18:84:df:98:53:9d:85:80:c3:c9:b6:96:bb:ee:2d:ce:d2:
47:5a:15:4c:8a:99:b4:ff:a1:de:95:f6:06:7a:56:b1:a9:0a:
0e:67:21:4c:e6:ab:15:3d:6d:d4:ae:9d:73:fa:7f:c0:d2:43:
32:40:57:c0:d0:28:96:d2:95:38:a0:17:db:b3:30:3f:9a:ac:
c7:0b:8a:6a:d1:c5:2e:e6:b1:47:41:98:f0:4c:88:54:45:56:
42:48:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:14 2026 by rpki-client