Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier: bBcs29YH+GkM0fm4iqs4CeGJpfmaIDP/RJvVvTMZZ+Q=
Subject key identifier: 69:F1:2F:9B:34:62:FB:03:7A:95:70:7C:E7:6D:CC:88:2F:CB:16:87
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 019D9A3E7BAC5AD7EEB921EFAF2556A4FF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number: 0FF6
Signing time: Fri 17 Apr 2026 07:01:19 +0000
Manifest this update: Fri 17 Apr 2026 07:01:19 +0000
Manifest next update: Sat 18 Apr 2026 07:01:19 +0000
Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: gPSeNS7jbfn1SPyeYcMncOfR+fEhOgV8kS0LkRU0XpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:7b:ac:5a:d7:ee:b9:21:ef:af:25:56:a4:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Apr 17 07:01:19 2026 GMT
Not After : Apr 18 07:01:19 2026 GMT
Subject: CN=69f12f9b3462fb037a95707ce76dcc882fcb1687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:9b:fb:6e:f1:dd:57:f0:19:65:e2:49:a1:
ad:c0:16:77:16:8f:fd:45:bb:0f:cc:7e:7f:29:34:
e4:d1:3e:9b:ce:01:52:30:09:8e:17:d6:21:67:19:
4e:9f:aa:2f:66:28:e9:c1:8d:3f:b6:33:b8:e1:9d:
f3:e7:13:fb:10:11:c8:c0:20:80:38:75:fc:b6:f7:
7a:58:8b:1e:7c:62:39:e1:5a:ea:85:db:69:06:21:
de:2c:d1:4d:23:b0:5a:f9:13:09:27:a6:2f:35:c7:
82:45:47:4d:85:a8:91:8c:80:6d:04:93:b4:27:d7:
c3:15:22:ad:3f:9d:b4:71:f5:14:8e:38:51:94:9d:
a3:38:b9:fa:d9:1f:19:22:86:d8:3e:a6:a9:51:4e:
fa:3a:03:71:93:5d:80:0d:76:a4:41:08:09:82:0c:
71:be:b3:52:25:1b:39:50:27:be:14:6a:bd:79:f6:
3b:81:32:87:26:a6:85:09:2a:d0:a8:7b:28:de:ed:
e0:10:19:a4:e6:c9:98:05:51:64:60:b7:60:d6:b5:
59:ab:36:d4:c1:e9:15:b6:d6:42:7a:97:16:a4:ec:
a9:df:4b:3c:ff:c0:ec:c4:a9:4d:2f:08:59:b2:5a:
aa:12:19:c2:8e:47:9a:09:10:a7:3a:fc:81:3d:97:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:2F:9B:34:62:FB:03:7A:95:70:7C:E7:6D:CC:88:2F:CB:16:87
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:86:40:e9:5c:f5:d5:d9:97:1d:72:ac:a0:13:53:a5:6b:92:
c3:1e:8c:84:fd:63:28:1c:be:d0:b7:71:fd:5f:27:7f:a8:d5:
ae:81:31:30:a9:19:6a:4b:af:6f:f1:6f:0a:7c:31:68:3c:9d:
21:76:e7:77:a8:a1:d6:bf:4c:77:98:03:7b:66:cc:cf:c1:61:
41:c6:26:c4:6c:ff:88:6b:8c:30:36:9d:ae:d3:c9:bd:99:d6:
9f:8e:2a:cc:12:20:c5:5a:0c:3f:7c:ff:2d:86:82:82:71:bb:
98:fe:3a:8f:ce:40:57:26:4f:3f:aa:31:01:d5:cc:60:58:d9:
f1:5c:ed:ae:93:cf:62:d8:cb:06:df:e3:94:b6:53:0f:74:d5:
45:53:b1:82:7b:b4:7c:f3:e8:8f:85:5c:48:ba:c3:3d:fd:d6:
25:70:ce:6e:9e:a1:78:b2:64:5e:26:1b:9f:b1:d4:43:d8:d1:
86:00:70:25:6f:ac:41:de:c6:95:8a:74:cc:5a:01:b0:b9:85:
9d:38:d0:43:fd:23:73:49:2f:f9:92:7d:18:72:88:2e:da:11:
6a:90:f3:f1:a7:69:68:3e:8f:56:a9:b4:94:ae:09:bb:c4:ec:
14:c0:fa:6d:1f:ac:1f:04:2d:01:df:4f:fe:0d:8f:95:40:1a:
d9:bd:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:12 2026 by rpki-client