
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: bWRF/l0BNnpWrN+LUvBJXh2eiK/ESo+ZHx5CXYtoVrE=
Subject key identifier: BF:EA:69:FC:63:8E:A7:9B:9A:5A:05:8F:58:AD:21:F1:46:7E:97:AB
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 019D98BD8658DE634356905F3A0042C30560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:50 +0000
Manifest this update: Fri 17 Apr 2026 00:00:50 +0000
Manifest next update: Sat 18 Apr 2026 00:00:50 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: ztIyzNqeQJ/H8kVPWiDJ3xPx1iBie9HnRjhmv+KTRnM=)
2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:86:58:de:63:43:56:90:5f:3a:00:42:c3:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Apr 17 00:00:50 2026 GMT
Not After : Apr 18 00:00:50 2026 GMT
Subject: CN=bfea69fc638ea79b9a5a058f58ad21f1467e97ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:0f:76:4b:b6:c3:03:25:d7:24:5e:39:63:
f0:5e:fb:24:f1:0a:64:00:a7:bb:a3:62:bd:f9:0f:
bb:64:5f:74:80:88:f3:62:23:13:4b:50:83:77:2e:
19:ba:21:8a:97:b4:40:17:de:8f:4a:47:83:e9:e0:
55:a3:99:ab:d5:2b:e1:96:0f:2c:9b:24:fc:bf:96:
44:59:92:03:b0:65:f4:68:a0:ee:76:5b:c8:85:bc:
61:da:e5:44:8e:31:ae:08:ee:04:f2:49:91:fb:ca:
6e:ca:5a:d6:4c:6e:2f:39:3e:53:61:16:0a:19:36:
be:e3:9e:07:42:80:74:46:2d:f1:b3:9e:fc:06:3b:
35:73:e4:33:14:33:6f:d6:cd:a4:36:44:fa:5a:0c:
4d:5d:8d:90:0a:1d:82:fa:d0:16:59:36:f3:06:da:
a7:0b:2b:f1:95:0b:67:34:83:7a:26:7f:03:9a:bb:
11:19:36:1c:2f:61:b8:02:4e:38:a2:e4:57:cd:fb:
9a:85:15:7e:2b:89:10:60:39:e7:db:ed:26:8c:18:
a2:08:f3:3d:47:e3:57:f5:46:cc:d7:bc:28:89:4f:
8a:23:a7:a8:b7:3c:09:f9:fb:c5:68:d0:6d:d1:da:
6c:5d:42:76:22:cc:6e:64:55:21:55:fe:81:1c:db:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:69:FC:63:8E:A7:9B:9A:5A:05:8F:58:AD:21:F1:46:7E:97:AB
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c8:75:89:3e:bc:1f:cd:8d:49:7d:0a:35:dc:03:b7:24:ba:
2a:66:06:ac:74:b5:8c:c5:48:7e:ff:fe:ff:1a:93:04:12:ea:
dc:5d:cc:f9:91:4d:b0:e6:47:ab:4a:2c:3b:4a:d8:0e:0b:57:
80:b8:f9:d1:dd:8b:b9:26:ef:3a:97:65:1c:95:1e:c5:0b:cb:
58:35:14:18:4b:f4:ea:22:7c:d5:53:f4:74:eb:6c:70:90:5d:
3d:f3:03:05:2f:64:2c:02:fa:16:d6:c1:3a:f0:28:a2:ff:31:
b9:b9:2a:bf:30:a8:79:7a:b9:2d:3a:22:e6:3f:13:de:32:3a:
57:a8:46:75:73:fc:9f:ed:a7:d9:41:d9:42:da:ac:b2:1a:4c:
33:64:bb:09:e9:42:57:19:fc:7d:ad:07:5d:80:be:77:7f:2f:
33:9a:c1:b0:31:30:c7:a2:02:c7:1e:6f:51:31:9a:4b:41:ba:
f1:8e:cc:08:5b:6e:50:5d:de:81:fd:da:25:0e:eb:95:8f:c2:
7f:3f:d6:f7:29:3a:0d:67:4e:ea:2c:b5:47:36:0d:0a:4c:bb:
cd:ed:f6:9b:a4:04:98:c1:59:fd:27:71:c1:7a:d1:dd:9a:17:
bf:5b:48:81:60:da:f4:2c:03:b0:39:21:f1:cc:51:a9:96:8b:
56:a8:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:21 2026 by rpki-client