Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier: qQVvb9Rb8NfQ7EGCm443WEwFmqMDKK3F2oNBUM7R3R0=
Subject key identifier: 2F:D6:52:65:A1:F4:B9:45:CA:F5:27:19:F5:28:7C:2D:4C:E1:8F:83
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 019CAB6B143CF758EADF1CF4C71CD7ED6E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number: 05F0
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: soSoc98KDOCNH7OtsrRB2hahD2/JwLS3/nZ2E09IuMM=)
2: z_44jtrGJfD6zh9PidW-GJCCXns.roa (hash: wkQhSLVYP9oo4jjQ5UZW99eD0rUSG+lto+V5IH7d35w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:14:3c:f7:58:ea:df:1c:f4:c7:1c:d7:ed:6e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=2fd65265a1f4b945caf52719f5287c2d4ce18f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:32:7c:21:03:d9:28:f5:c6:0d:72:74:bb:
2f:ce:c4:b4:bb:9e:7c:fe:14:98:a1:38:1c:fe:e2:
5b:4a:fd:2f:58:06:67:2b:fd:6f:7d:4b:f8:18:28:
dd:5c:ea:23:3e:6c:54:7e:65:40:25:1e:91:fc:03:
65:fb:ca:8b:08:49:83:32:d1:b6:ef:bc:3a:c7:64:
6b:4c:58:86:88:2c:12:f7:bf:6a:35:65:83:a7:15:
fa:a1:d3:ca:cc:f7:5b:cb:b8:5c:06:81:ab:17:0f:
a2:8c:ad:04:35:5b:0d:15:cc:7f:75:be:71:e3:de:
53:63:62:cf:a0:2f:78:4f:1f:e0:71:6e:14:da:db:
cd:e8:83:1f:e1:da:cf:7b:c0:a4:62:a7:6f:5a:35:
dc:b5:ae:70:5c:b1:26:cc:ad:74:f1:86:26:d1:c7:
1f:a8:cf:66:03:6f:3e:a1:51:22:c0:f6:b3:72:0c:
ef:86:cb:7a:98:54:00:64:f1:73:c9:08:5f:bb:c7:
6c:69:d6:96:02:dd:51:6a:5f:a8:aa:78:cf:56:b4:
3c:13:d5:16:4c:31:fd:da:c3:e5:1c:31:37:6a:07:
c7:20:1d:fe:7e:72:78:79:3c:62:38:8f:04:0e:67:
91:e5:b7:f4:b0:62:13:99:9e:d0:f7:bd:ad:bf:44:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:52:65:A1:F4:B9:45:CA:F5:27:19:F5:28:7C:2D:4C:E1:8F:83
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:23:8e:fe:81:15:94:38:81:de:42:a7:1f:6f:47:4e:d0:
62:5c:da:e9:37:99:05:c8:73:8e:1b:ad:c1:cc:63:70:65:db:
a5:48:b6:47:70:c1:37:32:a6:1e:8a:c4:1c:6a:c3:52:11:20:
04:e0:c1:c5:60:3e:97:b7:f8:4b:1c:af:6e:e0:b8:e9:dd:e1:
58:a3:37:16:bc:83:96:0f:58:ae:2d:80:7c:91:ec:81:a5:fb:
71:c2:a7:e4:83:18:9c:e4:dc:69:ce:e4:4f:31:6f:58:ee:ba:
56:da:5e:87:00:c7:e1:cb:77:ea:35:01:4f:8f:f0:31:7a:50:
69:cd:8e:59:08:be:47:a1:e2:88:0f:66:b7:e5:74:48:ab:0d:
0c:e7:cc:2d:12:02:79:13:25:44:c8:31:56:19:47:26:e8:8a:
8d:8f:c5:7d:10:ed:fe:5f:37:fe:42:3c:a7:0f:34:84:f1:41:
83:00:b0:f3:fa:1a:a6:6a:ab:fa:22:34:78:0b:a9:b3:b8:bc:
43:42:4d:87:10:fa:c8:56:44:f9:a9:e6:03:8a:9d:4b:cf:0f:
28:09:7f:b9:4d:a4:6e:af:0c:6d:93:6d:f6:f5:40:ed:c5:a7:
0a:a7:5e:52:59:df:a3:06:35:07:23:f2:43:99:f3:2a:d9:a1:
38:fb:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:26 2026 by rpki-client