Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: o6hmvrvLa2hLgKxg79aDV07Nj0lx6Net4NPvKaPvWJI=
Subject key identifier: 46:A3:B1:29:EE:0B:5F:E8:5B:06:CC:38:B2:44:58:20:2C:3E:3C:D0
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 019CADFE73637F53BE2929C6790919AC0BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 10:00:59 +0000
Manifest this update: Mon 02 Mar 2026 10:00:59 +0000
Manifest next update: Tue 03 Mar 2026 10:00:59 +0000
Files and hashes: 1: 3uI2T4FscmS1g4BxDBywDIRN1EM.roa (hash: GmArLm5Y723dPyhpNiMZSbQoSTY/TP5XBjOwFVSZTfc=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: EjLAKyW2wTmyct9US0II1o8qwxKRz1LvfSRX/GW9rCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:73:63:7f:53:be:29:29:c6:79:09:19:ac:0b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Mar 2 10:00:59 2026 GMT
Not After : Mar 3 10:00:59 2026 GMT
Subject: CN=46a3b129ee0b5fe85b06cc38b24458202c3e3cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:59:03:65:59:66:b2:3a:2c:1c:4e:35:f5:
5d:62:61:3f:63:d0:0d:21:0e:2c:19:a3:69:38:04:
00:fa:7c:b8:8b:80:0f:7c:67:29:38:eb:b5:fb:9a:
69:f9:78:1d:0f:b1:8e:02:1c:b7:e2:16:fe:67:0e:
75:da:1f:bf:75:77:ba:f3:66:f4:f4:de:d8:a3:e1:
bc:63:46:ed:3d:0c:2b:6b:fe:e4:1a:df:80:ee:16:
e7:88:f1:12:2e:8e:0a:98:3a:2a:4f:25:6f:82:2f:
5a:a3:bf:49:57:26:e8:2f:7b:e8:5f:e8:59:50:c2:
a4:a3:6a:b1:ad:1f:0a:63:db:08:e9:2f:2d:63:0a:
50:e7:8d:f4:20:8b:c3:5f:4b:88:98:7f:09:51:a7:
b8:2a:9e:ca:24:ca:a9:df:f3:30:42:18:41:10:7e:
52:2d:29:53:cc:70:38:6f:67:a0:c8:ab:c7:69:2b:
14:40:6a:7d:0c:5c:70:dc:9c:d6:7e:87:9a:4d:55:
32:4f:69:fb:4f:53:f1:dd:c2:d5:48:8e:a6:3a:25:
34:92:38:30:c2:5b:02:53:ac:50:4a:16:c5:57:23:
c0:61:1e:0b:ed:ed:23:2f:d0:3e:ef:88:95:68:3b:
4a:6d:9b:7c:7b:6e:55:db:27:50:79:71:ae:c4:9d:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:B1:29:EE:0B:5F:E8:5B:06:CC:38:B2:44:58:20:2C:3E:3C:D0
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:6e:bc:81:87:0f:bc:7c:af:91:76:25:c9:f9:c2:68:bc:
3b:b0:12:73:87:59:b8:4d:2b:f6:88:6e:26:e4:70:c4:ee:ee:
58:5c:ee:c9:c6:cd:fd:38:9a:29:b6:da:ce:19:e7:b3:f5:fc:
d5:8b:d6:1a:7a:85:42:40:f5:6c:51:ab:39:d6:b8:1f:db:91:
f5:a4:d9:c1:1d:5a:bc:93:bd:90:3f:de:d3:35:2b:47:d1:18:
fa:6a:3d:88:a9:75:57:96:5c:ed:85:de:34:00:31:8b:4a:61:
fb:c0:04:2f:b1:89:37:11:5f:dc:97:d8:f1:41:72:26:32:eb:
af:ce:de:4f:ac:eb:9f:8b:cc:72:df:48:11:7b:1e:f4:7e:80:
ad:37:7f:4c:c8:b9:68:5e:f2:40:ee:7f:32:7f:d7:68:4f:f7:
cf:88:93:5b:06:2d:14:d1:28:b0:b5:ef:ea:ee:33:ef:a9:00:
a7:f0:32:f1:0d:d9:01:b1:50:c4:49:73:f7:0c:36:27:81:43:
76:e3:f5:9b:41:a9:3a:13:72:7d:8a:33:7a:68:fa:63:ad:5f:
43:f7:88:43:00:ae:93:33:d6:12:b2:ee:23:af:3a:75:42:43:
93:0c:d4:f1:f1:fc:5a:54:26:da:1b:57:1b:d3:85:fb:03:d9:
86:80:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:34 2026 by rpki-client