Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier: UiLBm/ispAXiiaopN7X72gkJ0tzBHbDj0yL/1e/gC0s=
Subject key identifier: 94:25:01:D5:F5:7E:7B:8E:BF:B0:82:09:26:C7:9A:E6:DE:00:6F:EC
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial: 019D98F5095A1A59899633E0D56CFC853F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number: 0A95
Signing time: Fri 17 Apr 2026 01:01:28 +0000
Manifest this update: Fri 17 Apr 2026 01:01:28 +0000
Manifest next update: Sat 18 Apr 2026 01:01:28 +0000
Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: DawXzcpTfnFN4NcY/Mc5MSXAaWWZ0pZoi9CubyfSI6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:09:5a:1a:59:89:96:33:e0:d5:6c:fc:85:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Validity
Not Before: Apr 17 01:01:28 2026 GMT
Not After : Apr 18 01:01:28 2026 GMT
Subject: CN=942501d5f57e7b8ebfb0820926c79ae6de006fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:34:e2:95:e9:96:da:d4:42:c4:39:f3:4e:
00:a6:bd:3b:2e:d1:98:42:57:ec:1c:87:42:46:77:
2f:8b:19:74:78:c3:3c:71:f2:8f:32:5a:e1:7a:30:
34:a3:b7:1e:92:73:17:73:5e:e8:c2:fc:39:8a:c2:
11:bb:d5:f7:d2:4e:6d:a1:66:56:e6:11:6c:fa:f0:
8d:7c:dc:ba:75:33:54:da:12:55:8d:49:2f:cd:36:
c9:d1:3e:33:2f:f7:8b:a0:64:f1:15:d5:cd:d1:c2:
4a:57:dc:ec:b6:5b:7e:c9:4f:2a:12:1f:05:d9:73:
5d:f2:f7:02:fe:36:7b:19:bc:f8:0c:32:54:01:90:
72:24:2e:82:9a:26:e5:37:0f:8b:cb:bf:bf:1a:58:
30:53:0c:a6:c7:66:a4:7b:04:f2:a8:06:d0:95:91:
c2:3a:9e:f2:c9:58:07:bf:f3:c7:e8:fb:df:da:59:
70:82:d8:3d:35:fa:67:92:87:00:e9:95:b6:77:a0:
01:aa:c1:fd:b9:df:8a:58:9d:8c:30:b7:5f:b0:63:
76:ec:1b:67:c3:db:95:2c:2f:4c:f0:5e:52:4f:fe:
0a:d0:5a:35:f6:04:ed:b6:63:f3:02:5f:ac:33:91:
ed:9b:a2:01:87:4a:b3:17:df:73:d0:da:44:90:94:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:01:D5:F5:7E:7B:8E:BF:B0:82:09:26:C7:9A:E6:DE:00:6F:EC
X509v3 Authority Key Identifier:
keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:69:31:ce:36:66:e8:85:d0:a0:77:78:c3:11:01:da:d8:38:
4b:63:fc:17:e0:b3:2b:1d:54:f2:6f:75:32:70:a5:d3:dc:53:
4f:91:1e:8c:bc:3e:4f:cc:a2:ab:e1:dd:a7:a3:33:03:0e:b1:
44:b3:22:f4:85:9d:12:8c:af:3d:f2:c5:00:c1:56:a6:7f:64:
8a:f8:dc:4e:08:65:e1:58:8d:73:04:17:89:12:df:1b:00:dc:
94:f2:cf:16:4e:5c:8c:6c:e6:51:8e:1e:ad:ba:e9:2a:01:82:
79:c5:f3:2f:43:a7:43:d0:bd:2a:6a:74:5a:8e:0e:42:4c:ec:
28:05:a1:8a:1c:6b:69:5d:6c:2e:7d:c8:53:8e:b1:4d:2f:15:
92:fe:37:7f:ad:3a:a9:c1:52:7d:03:24:06:70:fd:01:47:53:
50:74:b2:b3:6e:78:45:91:fe:3c:e0:06:33:28:d8:fa:5f:1e:
84:97:3c:b8:c6:aa:3f:88:a4:55:25:a2:ba:46:6f:e9:18:78:
86:38:0b:bc:3e:f8:e0:64:ee:23:99:14:40:b4:6c:5a:12:84:
ba:fb:7c:3f:3f:b5:cb:6b:54:2a:9e:9e:e0:30:b4:95:fa:48:
d8:b4:ea:ea:b6:2e:cc:66:b3:d4:b1:80:11:b5:94:f8:e7:85:
e4:96:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:18 2026 by rpki-client