Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File: mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier: Ep9oXGHLripXEpUz2dBPg8TyX3XXmM8TeyD2LzU/oPE=
Subject key identifier: 2B:DA:35:3C:9E:42:96:61:B0:8D:F7:91:87:19:7B:0F:1E:C6:FD:A3
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer: /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial: 019CAB6BA9051EAC689BA1D8D7D74B27140C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number: 0879
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: 1-T1FXLyA3VlKdfnCiBGA8u0xGgE.roa (hash: goExnID3vYdULmlOxq4g1dk8QxfW8xHG+c6+SFscKsg=)
2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: n65BD9GR6weHB2s/73zIx5lEU0jvTlpUssATrjLZMWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a9:05:1e:ac:68:9b:a1:d8:d7:d7:4b:27:14:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=2bda353c9e429661b08df79187197b0f1ec6fda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:82:d3:dc:96:48:4c:89:fc:e6:cb:d0:63:
4c:c6:49:07:6b:83:c8:3f:7d:2f:1d:38:b9:45:f5:
e6:5f:c1:dc:67:b1:7c:b3:0c:48:67:82:2c:08:00:
fe:f1:76:e4:d5:55:62:14:9f:f6:e8:7e:17:db:ec:
e7:9a:e8:03:fd:26:ec:14:e2:24:79:d1:6e:4e:c0:
98:14:4b:ef:39:dd:24:83:ac:6c:79:c5:a2:dc:6d:
26:c6:7e:5c:0b:44:8d:6d:f5:f8:ed:db:e9:ac:fe:
df:a6:8a:51:08:64:16:6a:4a:b6:1b:83:c7:13:17:
47:41:e3:40:79:c1:fd:5a:37:a0:7d:16:0a:52:36:
e4:0c:86:04:10:f4:82:40:fb:f9:72:39:3e:a8:ca:
e7:b7:4c:63:41:1c:9b:30:fa:43:93:69:30:3e:6b:
e1:54:50:0c:c0:05:b2:b7:0b:92:b9:b7:01:58:46:
18:db:ef:ed:75:37:9a:d2:1b:94:63:7b:21:05:82:
0c:de:13:3d:5b:72:74:38:1c:f0:88:eb:38:be:60:
c4:06:46:ec:e2:3c:d6:62:af:9a:c2:07:36:10:41:
59:8a:07:e8:50:61:57:5b:ce:bb:47:00:d1:83:03:
48:e8:cc:5d:16:d1:a2:22:e1:05:cd:df:97:9e:8b:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:35:3C:9E:42:96:61:B0:8D:F7:91:87:19:7B:0F:1E:C6:FD:A3
X509v3 Authority Key Identifier:
keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:70:20:75:cb:99:29:14:88:00:bd:eb:8e:9f:27:bb:e2:fd:
44:66:1e:3c:1f:f6:93:a7:97:84:f4:44:fd:33:8e:09:ce:6c:
3a:32:08:06:4f:8d:cd:c2:a5:df:2a:d4:89:99:27:e6:68:7a:
0c:19:01:a9:2e:94:9c:97:7d:4d:89:2f:77:e4:48:3b:77:4b:
d9:4e:38:7f:03:36:79:4e:a4:84:e4:93:a4:15:9a:a5:34:09:
cc:aa:1a:aa:5e:4e:75:d8:3b:76:3d:38:92:be:37:f9:c2:77:
e9:8e:26:e0:11:36:91:0a:35:8f:48:2f:51:89:10:cb:81:44:
8b:73:b4:ad:3f:87:28:0c:f1:ed:ca:02:65:dd:7f:03:4f:23:
ba:63:a2:d7:c5:5f:83:ba:59:cb:60:8f:49:92:5b:af:1e:3d:
29:26:46:f8:07:15:92:e3:e1:d3:1a:26:9f:6e:32:87:63:ee:
c6:fa:dc:b4:fa:66:f2:ac:aa:98:90:d2:41:37:99:11:20:f9:
52:0a:8a:ed:aa:25:3b:66:ec:25:12:94:fb:4f:19:28:5f:4f:
c5:70:d5:e1:36:58:d3:82:8a:24:14:e1:e6:ee:c2:f6:29:07:
a0:e5:cc:ca:eb:3f:2b:05:9f:58:36:5f:5a:d0:96:fb:71:39:
e4:87:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:06 2026 by rpki-client