Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: vnJ1iVTsP9n9hm8cXsgeoHasgVhAa7xrl6HQ5Gy+osE=
Subject key identifier: A5:EA:7F:AB:64:54:E4:BB:81:17:4C:DD:5C:9A:FA:4C:8E:12:B4:4E
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 019CAD59A2C5CBB02FBD7E1EAEB745A4F178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 091B
Signing time: Mon 02 Mar 2026 07:00:58 +0000
Manifest this update: Mon 02 Mar 2026 07:00:58 +0000
Manifest next update: Tue 03 Mar 2026 07:00:58 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: BHwrMSg0mjKorwcL2FCiXAlEQc6eGVmfXO2y2Gydcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a2:c5:cb:b0:2f:bd:7e:1e:ae:b7:45:a4:f1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Mar 2 07:00:58 2026 GMT
Not After : Mar 3 07:00:58 2026 GMT
Subject: CN=a5ea7fab6454e4bb81174cdd5c9afa4c8e12b44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:bf:1b:c4:24:4d:23:44:75:92:4c:ef:28:
a7:fc:6d:d3:f3:7b:2c:e8:bf:3f:30:d4:21:e7:fe:
c7:83:9e:a2:7a:f0:e6:0c:52:58:09:5e:a0:30:b2:
42:eb:e3:da:c4:f2:3e:1f:e2:3f:86:e5:2e:d8:39:
fd:85:a3:e9:d9:e9:47:84:30:51:55:8b:b4:20:72:
f8:c5:80:43:d1:5d:dc:f3:0f:ec:f5:1b:9d:55:28:
f9:5e:9a:da:e1:d4:00:a6:bf:be:c3:e3:42:98:aa:
af:3e:75:68:89:6f:2e:5f:86:3c:9e:6e:f2:8c:90:
5e:4f:01:1c:67:1a:75:15:9b:8c:be:e8:2c:c3:b7:
1e:d2:39:7e:53:f7:a3:d6:d9:22:85:c9:08:5a:d9:
8d:20:a6:43:b3:0f:5a:b8:ee:58:3b:04:50:56:7e:
a6:8e:84:d8:b2:bc:81:c9:81:9b:ff:bc:18:11:3b:
d9:0c:f6:54:df:da:00:a2:ab:9b:86:ae:d4:1a:16:
43:8c:2b:8e:d5:ee:5a:1e:86:bb:38:03:6c:35:c5:
c0:1b:e8:aa:91:82:da:12:a7:43:b9:92:51:8c:c6:
c9:46:8b:b6:2b:d2:6d:31:af:73:04:d5:a0:d0:b3:
16:9b:d3:2b:09:03:a4:7b:50:1a:8d:31:94:e1:b2:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EA:7F:AB:64:54:E4:BB:81:17:4C:DD:5C:9A:FA:4C:8E:12:B4:4E
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:87:4f:31:0f:89:19:8c:08:6a:82:67:e1:10:3f:70:23:e5:
39:94:15:04:5d:56:9d:41:8f:fd:ea:0d:71:1e:af:2a:4f:6a:
78:da:da:15:7b:8c:a9:4c:be:79:38:00:67:61:9a:49:dc:dc:
43:82:2a:16:25:6a:cf:7f:c7:0e:2c:47:57:0b:f7:bd:01:c3:
d4:bb:de:61:8e:40:ff:ec:97:97:7c:31:57:ff:96:5e:d2:32:
1e:38:eb:0f:31:82:b4:43:fd:9b:65:80:61:f0:2d:ce:57:62:
84:86:24:36:db:a3:aa:a7:3e:c3:42:23:58:08:f3:da:9c:91:
f2:ca:42:ad:22:ec:7a:dc:30:59:2b:90:33:64:7e:fc:37:bf:
95:74:bf:11:c2:d0:72:d8:1b:3a:cc:54:80:cb:6c:77:4a:68:
2b:21:4e:3a:e6:d0:23:28:c2:35:07:e4:2b:57:ae:4b:ba:ca:
20:bc:7c:69:f4:5a:eb:6f:7c:dd:1b:49:bc:82:0d:85:cf:73:
ee:3b:c7:23:ac:3a:2e:f5:ce:6e:20:d0:ff:cc:c7:e2:fe:43:
7a:86:e4:48:b5:7b:a7:c6:7b:18:3a:77:05:32:5c:ce:05:34:
ca:15:38:6a:09:79:df:68:8e:a0:f8:1f:7e:db:d4:dd:3b:26:
82:50:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:14 2026 by rpki-client