Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: ZZGOcUV+14lWKeuqazSr9ZoUD8m5pUaKVk2ZFbHQoA4=
Subject key identifier: 87:6E:35:8D:D4:A1:9D:2D:14:3C:B4:E6:13:6B:45:29:B9:83:A1:37
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 019D9BF54530336F38283E80E5D6496AA28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 1557
Signing time: Fri 17 Apr 2026 15:00:35 +0000
Manifest this update: Fri 17 Apr 2026 15:00:35 +0000
Manifest next update: Sat 18 Apr 2026 15:00:35 +0000
Files and hashes: 1: jgN5b340IqujXH8DiLAcaLBDPQg.roa (hash: vjTTYKgnFfE85jmKgHsh0LqEiHa9mFhJMA/4cn0Av3w=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: +FmBYh+ws32qLPpiYyK7YT75yyYFMwZ8yPTMLJfuKK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:45:30:33:6f:38:28:3e:80:e5:d6:49:6a:a2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Apr 17 15:00:35 2026 GMT
Not After : Apr 18 15:00:35 2026 GMT
Subject: CN=876e358dd4a19d2d143cb4e6136b4529b983a137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:3b:5e:66:dc:c9:79:60:fd:64:86:07:96:
4a:d2:74:ec:04:35:3b:71:55:ab:77:e0:5d:d5:7b:
a2:fd:8b:84:0a:85:96:1e:29:a0:c8:5f:2d:f7:35:
75:04:2f:2e:a5:c5:4c:c9:56:fd:ba:84:8b:2a:82:
8c:c8:58:29:57:86:9b:97:93:bb:05:aa:63:7d:69:
4c:be:d3:c1:8f:f1:97:c2:e9:46:b8:cc:ab:25:6c:
37:10:de:93:aa:69:8d:29:f9:e3:14:b9:61:9d:4e:
92:9c:d6:4e:dd:d7:49:b2:d9:17:41:41:fe:70:d6:
c4:e7:8b:80:2c:95:08:2e:a3:58:47:1a:e0:5d:29:
22:36:d8:26:07:f4:5e:99:06:0f:c3:e4:68:d6:04:
5a:94:8b:1d:9f:9c:e8:98:fc:c6:f4:fa:fd:53:e9:
99:10:8a:ad:44:fb:69:8d:c0:40:e7:75:66:61:b4:
b0:7d:a7:22:ea:9f:97:12:6e:53:ee:3c:2b:f1:ae:
e2:8b:4a:64:8b:8f:8a:7a:90:e2:27:fc:2b:0e:b6:
bb:fa:55:4e:3e:be:86:23:ed:1b:22:52:74:26:41:
5a:5f:48:78:f3:b5:7e:b6:bd:f2:dc:b8:8a:c1:d6:
e5:ff:ca:9c:62:0c:51:f2:30:f4:04:a6:b4:1a:c9:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:35:8D:D4:A1:9D:2D:14:3C:B4:E6:13:6B:45:29:B9:83:A1:37
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:66:e8:ea:44:b9:e6:12:bc:e0:45:95:3f:1c:47:8a:31:
df:31:c6:12:40:c0:19:68:f5:d9:c6:86:e9:fc:66:79:40:8a:
af:72:a3:83:d7:b8:e2:e7:62:08:ad:41:79:7a:92:f3:8b:7d:
c0:c9:0e:b4:20:65:60:69:80:fb:94:63:af:79:8d:da:2d:78:
49:73:be:ac:3d:b1:9a:4e:63:6c:79:ed:c8:ed:ba:b4:2b:97:
45:af:1f:93:7a:e4:64:b1:7f:ee:29:e0:9c:a7:13:f2:94:2e:
e5:b8:7c:87:ae:98:31:1c:6b:11:dc:60:cb:9d:e5:39:e5:9d:
b8:5c:cf:db:de:47:24:44:eb:ea:85:ba:46:f8:7f:23:04:5c:
06:9e:53:93:c9:32:40:47:ae:82:10:8b:2a:a0:ff:27:b0:a0:
e5:d6:c7:76:ed:a2:fc:a1:ff:7a:c6:c8:67:b3:b0:65:02:f1:
76:7f:ee:b9:33:eb:7f:a9:85:b7:a0:d9:df:6a:14:ab:ae:15:
dd:81:67:b7:1e:fa:ba:c2:cb:86:9e:e0:93:6c:3c:4f:28:9b:
7a:ec:b4:83:12:5c:0b:12:6a:0f:d8:ea:a5:83:a3:76:05:1f:
c5:ad:83:e9:6c:b4:f3:0e:59:7f:21:c5:fa:a4:94:96:15:fd:
3f:62:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:52 2026 by rpki-client