Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: rGkpNgO5uhVC5bvXcMTfgzZaZ57E8KS6/V4rTFEuxEs=
Subject key identifier: C2:C7:56:15:E1:A0:AB:9F:B1:42:26:9C:0B:D4:E6:86:B7:0A:EA:5C
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01A177A81FF5CCB2B6A1CA4EC0C26ED94D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 10:01:09 +0000
Manifest this update: Mon 26 Oct 2026 10:01:09 +0000
Manifest next update: Tue 27 Oct 2026 10:01:09 +0000
Files and hashes: 1: ZxkJuppVV5s_BKfW0tHmOw_jKWo.roa (hash: MZrrVW4osRnAPcGgxtofMaJwwGgsMYZ5RkCij4PD+d8=)
2: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: KS7J0gCcXrXjrrQD68QueCC1xyZrrNSUOI6AAaO0bBE=)
3: ws_aeFDVw7sTSue7as5B9BFGr30.roa (hash: ik+9Y0UMemF3/24GwHXL/cUAnnRxGyFL8lUPRj+DxhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a8:1f:f5:cc:b2:b6:a1:ca:4e:c0:c2:6e:d9:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Oct 26 10:01:09 2026 GMT
Not After : Oct 27 10:01:09 2026 GMT
Subject: CN=c2c75615e1a0ab9fb142269c0bd4e686b70aea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:ec:dd:1e:75:61:cf:4d:cc:a6:07:09:d2:
7f:1e:6c:bb:5d:ad:e0:e7:98:d0:9d:a2:14:95:5d:
16:72:bc:17:06:ee:77:d9:95:22:a7:cd:d9:ff:8d:
1e:e0:f9:db:bc:75:47:b5:63:46:1e:f2:fb:7d:e6:
3d:a5:00:dd:6c:1e:b4:21:e8:65:63:31:b7:f8:de:
58:45:9c:98:78:2b:a1:ca:67:ef:ea:53:bf:61:16:
89:7f:dc:bf:76:dc:09:01:ce:80:98:00:b9:6f:7e:
1f:69:10:0e:60:04:66:a8:04:f8:e5:3b:f1:de:55:
89:60:27:dd:de:4d:70:57:2f:03:35:a0:00:ee:ee:
ae:1e:d1:bc:61:e4:fe:be:23:d4:9d:33:ef:32:56:
4a:2c:ec:1a:77:4d:39:db:4f:00:78:c7:91:7f:f0:
b2:48:5f:09:e4:47:17:a2:0b:98:6b:6d:56:0a:64:
3d:0d:d4:28:79:ae:9c:6c:8b:e3:04:32:36:91:c7:
fc:db:82:ad:77:07:28:c5:e8:76:68:b2:82:0f:2c:
56:c7:cf:0b:40:82:5e:fe:af:e8:74:6e:d2:fe:36:
5d:66:ff:de:c4:3f:b2:07:92:0b:57:87:47:1d:30:
6f:35:13:5e:77:0d:36:4b:f2:db:38:32:c0:11:56:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:56:15:E1:A0:AB:9F:B1:42:26:9C:0B:D4:E6:86:B7:0A:EA:5C
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:cc:24:38:25:c2:b9:0f:3e:3c:c6:b4:60:34:b6:d4:14:
5b:bb:83:31:60:d3:61:6f:a1:96:88:ca:8c:27:37:92:aa:d0:
20:24:ba:11:5d:9d:44:32:4c:c1:17:19:08:46:b7:7b:66:12:
15:c5:70:0f:90:7a:cf:90:7b:1d:25:e2:b4:32:b1:78:1f:3b:
f5:f8:d8:18:58:ce:c8:61:49:8b:f8:48:22:a6:b6:92:5f:cd:
20:94:d3:f1:ae:d4:89:99:f2:e6:94:43:53:23:b5:7a:85:8c:
99:a2:00:3b:f0:90:94:c0:f8:ff:c9:19:df:b9:d0:fc:5d:59:
07:4d:2e:78:2b:74:60:63:2c:cd:2a:91:95:8a:6c:e2:ea:c2:
c4:87:fe:09:f7:81:5c:0d:61:39:dd:a2:23:41:bb:be:27:6d:
e7:3c:c1:f1:72:34:6d:c3:a7:83:ad:76:d3:2c:80:73:ed:6f:
03:d4:a0:79:64:fb:53:4d:3e:92:3d:3d:23:8f:6d:56:30:56:
9b:70:0f:1e:bb:e9:c1:e9:7b:01:15:ab:4d:ad:bf:86:94:81:
a6:f3:02:1a:3d:08:d3:bf:74:c0:65:4f:64:4d:ff:ba:8f:9e:
99:6d:41:72:d2:f2:76:74:5f:72:e2:a6:08:06:ca:b9:5f:d5:
77:de:b3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:04:45 2026 by rpki-client