Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: fMmd3tj/tkXKnrc/cz4vKvNNMfSS+NL3nm4LgPZib3U=
Subject key identifier: 3A:48:12:82:CF:3E:78:09:B5:B8:AC:72:57:82:90:07:AA:43:5E:32
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 019D37C0980455900B75B6323EFF84A9D0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 1288
Signing time: Sun 29 Mar 2026 04:01:01 +0000
Manifest this update: Sun 29 Mar 2026 04:01:01 +0000
Manifest next update: Mon 30 Mar 2026 04:01:01 +0000
Files and hashes: 1: XZtXXBflmY3np62tX4_yWpDop2Y.roa (hash: thfxFFslD8MwVS58mjvBbbGagIhFVXywfILuPq1lA5M=)
2: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: iZBhOUBEwIksLZcebuetYOZki5ccM5+5xch8jzgyOfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:98:04:55:90:0b:75:b6:32:3e:ff:84:a9:d0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Mar 29 04:01:01 2026 GMT
Not After : Mar 30 04:01:01 2026 GMT
Subject: CN=3a481282cf3e7809b5b8ac7257829007aa435e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:57:85:97:6d:5e:d0:bf:aa:43:5b:46:16:
13:21:41:50:0b:af:50:d0:24:38:ab:44:1b:3e:39:
4e:fb:45:39:c7:f7:bb:da:61:6a:7f:7e:3e:1c:2b:
44:c3:c8:39:e4:2c:a2:2f:aa:2c:70:23:97:43:a6:
b7:b3:60:bd:1a:8b:a3:28:c5:c2:2f:58:50:87:5e:
b5:05:28:82:62:75:e9:81:cd:2a:47:33:9d:80:89:
65:1c:8c:81:53:d4:48:55:ed:f0:9c:0f:cf:f7:54:
cc:07:4a:7c:34:62:b1:da:5b:25:6b:c3:c3:a0:c7:
50:21:2b:4b:3b:6c:4c:a4:86:e8:11:98:ad:4d:2d:
15:9a:b2:36:b4:a4:89:20:40:f1:9b:8a:cb:93:6c:
08:3f:ba:31:19:ae:1f:82:83:d9:aa:72:7c:94:9c:
c4:04:50:2d:34:30:fe:5d:c4:cf:59:2f:da:5c:6f:
f8:df:ce:58:08:4c:b2:86:7f:bd:f4:dc:c0:f0:8f:
02:e2:7a:a2:83:3b:56:42:e8:9e:fb:60:4d:17:95:
77:4a:5d:14:83:81:0a:7b:c9:28:8e:38:25:e6:2e:
11:3b:48:bc:df:96:6a:57:56:aa:cf:35:a4:57:f1:
15:07:de:e9:f2:75:32:02:d5:9d:10:7c:f9:b9:74:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:12:82:CF:3E:78:09:B5:B8:AC:72:57:82:90:07:AA:43:5E:32
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:11:9b:e5:04:ca:28:b8:8b:0c:3b:6b:3b:29:d5:e6:79:1b:
3e:cd:74:90:45:c6:54:9d:ab:04:2e:01:e8:e9:16:61:37:1d:
25:2c:65:0e:b0:8f:e1:21:cc:7e:be:76:a7:0b:a4:93:de:02:
84:dd:ad:4c:00:cb:49:00:6d:b3:38:ca:37:10:ac:fc:b0:00:
ac:6a:85:1f:8e:30:63:93:c0:e7:41:f9:d8:0b:61:5a:c4:bb:
62:b9:49:ed:46:e0:09:4a:16:6b:1b:52:c1:fc:11:8a:f2:ca:
a8:4c:23:a3:84:ff:c3:04:68:12:c8:f2:93:e6:02:87:93:6b:
0a:a1:65:6c:cc:3f:b0:bd:f3:0a:6d:65:c5:85:21:d7:cc:44:
90:5e:61:2c:dd:2d:28:f4:62:dc:21:57:bb:95:e4:e9:38:9d:
58:c3:a8:8c:29:86:71:88:49:3b:1b:37:49:9a:7e:65:f8:f1:
d6:46:cc:24:47:f2:96:1e:68:17:b3:87:61:de:c7:b0:0c:05:
d9:21:58:08:fd:21:f0:08:7f:55:c0:57:12:63:1e:10:ea:34:
47:bb:41:7b:69:3e:2e:5e:4b:d7:dc:89:cd:9a:38:d9:17:f9:
ba:69:fe:5e:02:7b:18:d3:12:32:36:3b:96:3e:5a:97:24:53:
ae:17:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:14 2026 by rpki-client