Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: YQX+6Z/xQsGNl6lDi2myj4ggd6ZPNZOIQQIXpFNn8zo=
Subject key identifier: 7A:27:C6:14:C7:AC:6E:86:5D:19:2D:9A:21:48:45:5D:32:AE:48:F7
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 019CAC7E4CCF95CA2C9A24CF66F5557EADE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 14DB
Signing time: Mon 02 Mar 2026 03:01:24 +0000
Manifest this update: Mon 02 Mar 2026 03:01:24 +0000
Manifest next update: Tue 03 Mar 2026 03:01:24 +0000
Files and hashes: 1: jgN5b340IqujXH8DiLAcaLBDPQg.roa (hash: vjTTYKgnFfE85jmKgHsh0LqEiHa9mFhJMA/4cn0Av3w=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: p2B25UmqjRulMxdUBADtSiRJ4Bwdk21FjmKwsoCKMCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:4c:cf:95:ca:2c:9a:24:cf:66:f5:55:7e:ad:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Mar 2 03:01:24 2026 GMT
Not After : Mar 3 03:01:24 2026 GMT
Subject: CN=7a27c614c7ac6e865d192d9a2148455d32ae48f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:48:5e:77:2f:e8:13:52:5d:ba:c0:6c:a3:
c0:f3:25:89:1f:82:2b:00:1e:02:7c:0c:00:ae:61:
bd:42:6b:1c:bc:e8:d1:fd:4d:6b:f0:9d:be:31:34:
2e:7f:9a:3d:71:57:f8:82:b2:bb:3b:97:d0:c4:86:
c6:27:9a:5d:e5:1b:5a:73:44:6b:7f:cd:67:3c:89:
c3:dd:85:9f:92:fc:bb:e2:09:8d:02:60:ec:77:24:
23:12:ac:7c:a9:2f:79:5a:a8:6c:65:7f:1c:ab:4f:
d5:e8:ec:33:47:96:42:63:43:76:36:67:d6:a9:80:
6f:96:d3:a3:f7:4d:0a:d9:85:32:0a:a5:3c:df:7f:
26:09:a9:cf:ef:8b:ea:6f:33:a1:a0:23:e8:fc:6a:
78:3d:eb:22:b2:a0:85:c5:49:d1:59:73:ca:c1:61:
23:e4:02:9d:b9:54:a1:67:18:ee:dc:ba:7e:4f:d9:
de:b5:6a:98:a7:6e:b4:ab:58:0f:de:66:6f:14:21:
ab:87:b3:31:42:b0:27:18:e3:a1:77:07:ef:fd:11:
7a:e1:60:2c:28:62:33:81:ca:5a:bf:63:b0:1a:dc:
1a:53:b2:4b:38:7a:9a:c6:e2:89:59:bc:44:e4:b2:
aa:c9:1c:8b:18:80:28:96:02:a1:8f:f5:5c:00:84:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:C6:14:C7:AC:6E:86:5D:19:2D:9A:21:48:45:5D:32:AE:48:F7
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d4:9c:d3:ef:b8:03:e3:ae:46:91:32:6a:5c:6b:07:ce:8b:
60:58:f7:04:51:e7:76:c8:33:39:0d:43:03:06:26:90:4d:a9:
ca:a8:65:64:30:60:95:2d:6b:ac:31:1f:47:6a:67:0f:6e:c2:
ca:fb:a4:ae:36:36:91:91:78:d9:95:12:9e:74:39:6f:da:65:
1f:01:3f:e9:40:82:7c:33:08:e3:33:f8:3e:e8:21:02:6f:94:
44:1b:39:18:6a:f8:dd:ca:f8:20:ad:ae:33:52:31:40:d7:ec:
82:3a:17:57:f3:7a:12:02:34:62:10:86:3d:fd:f0:3b:39:b2:
d3:0f:b3:df:85:b2:c1:73:81:ac:d5:09:93:47:e6:cf:2c:67:
bb:55:6a:7a:04:16:e9:26:a2:a4:84:cd:68:fb:98:10:9f:6a:
d1:0f:99:ee:8e:9d:e3:3a:6d:47:8c:d6:a4:6b:6f:0e:9c:d0:
34:26:cc:b9:a6:a6:49:01:4b:25:3d:e2:33:f2:14:7c:42:2d:
ea:65:67:01:45:1d:9f:14:f5:0a:2d:c1:89:5b:65:45:fc:de:
eb:ad:34:f4:fc:f4:c5:e4:56:be:be:a3:ba:80:2d:c3:15:12:
2b:56:27:ec:28:0a:eb:9e:fe:06:20:b7:34:4d:21:be:71:e9:
1d:35:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:41 2026 by rpki-client