Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: 5ExSh3s7IgXlgFKcgol9/uRuSlkWS796y0107VtP7yk=
Subject key identifier: D6:52:E0:F7:CB:07:E4:AA:CB:14:BD:7F:CF:A6:AC:D6:E2:09:83:2F
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 019FA1BBA4FF49A1D2B388C338BD084AB2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 13C8
Signing time: Mon 27 Jul 2026 04:00:56 +0000
Manifest this update: Mon 27 Jul 2026 04:00:56 +0000
Manifest next update: Tue 28 Jul 2026 04:00:56 +0000
Files and hashes: 1: XZtXXBflmY3np62tX4_yWpDop2Y.roa (hash: thfxFFslD8MwVS58mjvBbbGagIhFVXywfILuPq1lA5M=)
2: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: 1UYEswvWzZ9ySvmzCwzMxxEngu2Ew2cxWlv0XqLddfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:a4:ff:49:a1:d2:b3:88:c3:38:bd:08:4a:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Jul 27 04:00:56 2026 GMT
Not After : Jul 28 04:00:56 2026 GMT
Subject: CN=d652e0f7cb07e4aacb14bd7fcfa6acd6e209832f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:da:91:84:1a:90:b1:ae:e2:cc:3b:f9:d7:
3a:66:b4:ad:64:70:3c:72:9b:84:3a:17:02:8b:27:
38:34:a5:c7:a1:59:91:4d:21:b8:07:45:91:52:ec:
0c:40:c8:eb:07:ea:1d:b5:f3:e5:4d:c6:2f:06:be:
1b:55:f5:ad:b7:68:2e:63:f2:8b:86:a4:c9:4f:78:
92:6b:9e:44:dd:4b:3e:c3:4e:f6:72:96:03:17:8e:
36:70:1b:26:1b:bd:4c:7f:75:6d:3b:8f:29:2d:12:
9d:29:b1:89:51:75:a2:53:a3:74:c7:37:e8:6d:ef:
2a:9d:c5:f2:e6:b9:d1:e9:aa:ff:6b:ce:d7:20:6c:
b7:f0:54:d0:a7:9c:fe:59:53:13:ef:14:51:cf:cf:
d7:79:49:c2:04:51:57:f8:b3:23:0d:8a:ce:dd:ae:
0e:5d:22:47:49:14:fe:9f:d4:ad:7a:d2:9a:8e:3e:
4a:30:ca:e8:ab:66:ee:05:c5:b7:c5:15:68:b8:8b:
2f:cf:74:96:36:58:3d:4f:ae:09:ed:42:48:91:48:
25:08:b4:78:a3:6d:b7:6b:47:db:04:f6:35:9d:d1:
32:8c:2e:1c:b5:0e:70:97:c7:08:70:b4:2f:00:6d:
ce:a5:2f:f5:b5:23:9c:f2:38:ef:c1:06:e0:9e:1c:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:52:E0:F7:CB:07:E4:AA:CB:14:BD:7F:CF:A6:AC:D6:E2:09:83:2F
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:91:c9:f6:ad:24:ae:4b:4c:76:53:58:92:a4:22:a2:f4:d0:
5a:35:21:a0:db:4b:bd:23:67:e4:e3:7f:71:a5:d1:82:eb:ce:
4b:e7:61:03:2d:e7:a7:4d:77:1b:75:e4:47:e0:6d:35:28:a1:
33:61:01:4c:51:b2:ea:be:06:bb:c1:22:44:1d:bf:09:fa:39:
5e:55:96:8b:78:97:69:48:2f:db:5f:c6:69:e8:28:2e:75:c7:
5d:41:b6:6a:5f:7d:f6:5f:c9:b1:22:dc:ca:12:f4:7c:ce:59:
11:da:4a:e9:cd:34:24:2f:fb:99:b1:9a:e4:87:d7:6f:c8:1e:
a1:1a:40:9f:56:1a:0e:3d:88:cc:0b:26:4d:18:dc:40:96:9f:
36:47:5a:98:a7:94:9c:34:ef:6f:95:78:d3:a5:5d:45:02:7d:
59:ed:e4:76:a4:f4:aa:b7:c8:31:aa:af:27:92:f1:53:6a:45:
3a:a7:4d:36:eb:26:cf:ff:3d:b5:ef:88:e3:53:47:29:71:7f:
3f:1a:e0:29:ac:0a:1c:70:e0:83:c7:a5:a6:fe:a6:84:80:32:
7a:e9:7f:50:0b:d2:70:6c:1c:8b:6c:62:02:1a:aa:d5:d7:59:
44:c0:a1:ff:9e:c5:d0:42:2f:10:09:f0:17:17:1b:d9:80:35:
f8:c2:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:30:58 2026 by rpki-client