Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier: JH1RBkmYcSYh3Vldt0Tb6w/vzznNM2AfpDJEy1TZQP4=
Subject key identifier: 95:90:94:E1:9B:A5:A7:86:77:44:F3:1F:6C:2B:79:E2:DE:48:8A:3D
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 019CAEA2FB332C2D5C83EA44561AD503C88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number: 0F7C
Signing time: Mon 02 Mar 2026 13:00:42 +0000
Manifest this update: Mon 02 Mar 2026 13:00:42 +0000
Manifest next update: Tue 03 Mar 2026 13:00:42 +0000
Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: 3Cbr+f1wZKpQRvXKU/iTp3XwyTWJxs8MpIiimFHjyj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:fb:33:2c:2d:5c:83:ea:44:56:1a:d5:03:c8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Mar 2 13:00:42 2026 GMT
Not After : Mar 3 13:00:42 2026 GMT
Subject: CN=959094e19ba5a7867744f31f6c2b79e2de488a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:75:03:bd:10:b6:2b:af:03:1e:d7:60:c3:
ea:ba:63:61:76:fd:cf:b6:0e:c5:fd:6d:43:60:c0:
60:87:3d:b1:d5:03:e5:cb:86:c5:f0:d9:ff:a9:4c:
cc:0f:83:cb:ae:60:6b:24:8b:e1:b3:b6:fb:91:b1:
a7:21:6b:0d:8b:ac:6d:ed:d3:9b:7c:f5:14:94:77:
f5:28:82:4d:26:ff:d4:57:02:e2:22:24:60:b9:10:
a8:f3:0c:b5:c2:d5:f1:3f:f0:eb:8e:9f:bf:9a:c7:
aa:2c:69:46:45:bb:14:6d:1b:7f:c7:7d:36:ff:be:
04:eb:60:b9:bf:29:0c:60:42:72:0b:5e:ac:ca:99:
7e:64:aa:95:de:19:4c:c1:ca:23:c9:48:b9:e2:62:
d8:1c:c5:da:29:4a:68:eb:ce:eb:bb:58:53:1c:d6:
41:b2:48:ca:e4:fc:95:b7:36:c4:ca:4f:14:48:b2:
3d:10:ca:31:28:c8:f3:40:43:a0:64:52:33:fd:9f:
51:b4:01:1b:4a:5a:c7:62:20:f5:02:b4:0c:f1:b7:
7f:53:78:26:64:9d:60:26:4f:8a:52:43:b3:33:ae:
13:62:e3:32:75:e7:d1:bb:88:dc:81:a9:d3:4e:4f:
05:60:29:f7:b1:84:fc:3c:5f:6c:0c:2a:f6:61:98:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:94:E1:9B:A5:A7:86:77:44:F3:1F:6C:2B:79:E2:DE:48:8A:3D
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:ae:5c:33:66:bd:f5:21:1c:e8:77:62:86:17:33:2f:0a:
d4:fe:d8:44:12:fc:19:5b:1a:58:c6:d7:e9:6b:1d:41:94:18:
74:16:f2:b1:61:ad:81:8b:ae:6d:34:e8:97:49:66:c7:1f:b1:
c0:07:a6:27:2b:72:c3:84:70:20:b3:fb:b8:7f:f4:fa:0e:ac:
15:e5:c3:1c:57:6b:b9:c9:01:7f:a0:d0:05:0b:47:7e:c8:bd:
5a:60:0c:20:e1:eb:12:2e:c2:14:03:61:aa:d6:41:77:73:b9:
58:25:0c:d0:66:c6:47:48:6e:6a:78:6d:67:1c:a5:13:98:83:
49:76:43:1d:62:25:36:37:40:1b:8c:67:88:ba:2a:56:20:51:
00:62:d2:6a:a2:0f:6c:5b:a5:3d:3a:c8:69:06:ff:3b:82:7f:
b3:8c:0f:de:2d:bc:0c:d4:bf:42:b7:f7:97:c4:24:c6:dd:20:
af:77:46:28:b6:e6:8b:e5:8f:b1:b2:0e:7a:c7:cd:16:46:44:
ec:64:75:7b:d0:86:61:83:3c:be:85:88:a1:b8:8b:98:13:1d:
d7:2e:29:dc:3e:11:f9:ea:0c:10:90:ee:0c:1d:cf:72:9a:0e:
a4:e6:ee:4c:bb:40:cc:26:de:69:d5:13:6f:83:0c:9c:f2:65:
c6:29:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:40 2026 by rpki-client