
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: IRaIWqosjecXLayoFcAfSjNepqnJyPL11PC/IH/mAxo=
Subject key identifier: AF:94:B8:0C:7A:3C:C9:AB:73:8A:B0:74:36:63:9B:0F:4A:DB:CB:93
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 019CAB344C8437C7F8B1AD3737EE64ED3531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: w4fJ9MLFvebZelW9ughtvhAyaUOgsBTZ/CWBXh2gci8=)
2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4c:84:37:c7:f8:b1:ad:37:37:ee:64:ed:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=af94b80c7a3cc9ab738ab07436639b0f4adbcb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b0:17:63:2a:79:4f:78:94:22:5c:30:6b:72:
c8:bc:c6:d2:c6:a8:a3:99:14:3c:0f:6f:cf:f4:66:
48:f2:95:18:ad:2d:8c:6a:1d:2d:55:70:c5:16:e2:
c1:11:63:0d:47:64:8a:e1:bb:ce:ab:39:67:e3:e9:
75:ba:6e:84:65:13:d1:48:89:81:22:b7:b0:53:77:
a8:45:7d:43:8c:47:69:58:54:7a:b0:f1:70:7d:fc:
9f:ad:b6:30:cb:aa:d6:1c:d0:9f:c8:15:2d:ab:8d:
89:0a:fc:3d:84:c8:16:6c:f0:1a:7f:cd:4c:bc:1a:
d7:a9:e9:ff:c2:4b:a1:f6:b3:ce:a3:e5:18:4e:e3:
56:a2:ad:8a:56:8f:cd:02:f0:d8:d3:1e:42:a8:a4:
e0:94:6e:a6:8c:6c:47:aa:44:64:42:ea:c3:f1:1d:
07:e2:68:86:60:fd:b5:f9:1b:f6:0c:a0:de:00:67:
ff:f8:8d:02:22:1d:37:d3:fc:b4:58:a0:bc:11:f6:
28:8f:8c:1e:f6:81:d7:a3:4f:b6:f8:df:68:de:4f:
9e:66:64:c5:db:2f:47:bd:11:f3:2c:e1:e4:af:c2:
ef:73:6b:34:70:e2:5d:4d:43:52:3a:cc:71:d1:88:
3d:73:51:da:af:a3:d3:16:85:da:84:d5:8d:a6:c2:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:B8:0C:7A:3C:C9:AB:73:8A:B0:74:36:63:9B:0F:4A:DB:CB:93
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:04:85:81:32:cd:44:34:0f:b4:04:05:81:76:8e:6f:05:b9:
d6:c4:f9:1e:73:41:a6:c6:1e:f2:96:93:83:e9:e9:69:f3:ed:
21:60:d4:eb:39:a7:e4:fe:29:19:5f:c3:d4:27:20:28:c2:21:
51:d3:11:83:3e:88:63:1c:b7:ca:54:29:99:b9:d1:3a:3d:62:
b6:fb:e1:10:2f:11:02:2b:f0:83:47:4a:53:40:3f:95:1c:ec:
a5:a2:80:f1:a7:8d:95:86:a6:18:43:13:d1:21:f1:6d:1a:99:
65:5e:81:31:8a:0f:1b:d2:e5:9a:e4:b6:24:dc:1c:8f:c8:8a:
57:e6:91:fb:4e:2f:04:47:7b:38:85:eb:97:ec:b2:d4:74:e6:
61:95:a6:77:32:aa:85:7d:20:49:e3:97:d6:56:6b:89:f9:70:
c2:56:a4:d0:a9:ed:cf:6d:18:ad:56:a4:57:51:34:86:7a:d5:
cf:e8:df:db:b9:70:67:ec:b2:c8:bc:fd:b5:74:b7:ce:44:d6:
42:c3:2c:80:af:f6:6a:40:07:d9:00:12:2e:00:fe:75:72:40:
cc:3c:c8:83:04:e6:e6:1d:a9:a5:2a:4a:fd:37:40:cd:8d:e7:
6f:ec:0c:f3:39:05:a4:0e:7c:48:7b:12:18:63:93:f3:63:e1:
e6:8c:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:29 2026 by rpki-client