Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: tTu81Sa+x74gZQMOoyVqidG6KYLP4lI2WXi/PmyEXbQ=
Subject key identifier: 46:F8:12:08:B6:FF:3E:F8:7B:C3:09:94:BD:7A:96:DC:BB:72:CE:D9
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 019FA07240D4C79B9F1DC59CBDA3AD8A9A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 22:01:09 +0000
Manifest this update: Sun 26 Jul 2026 22:01:09 +0000
Manifest next update: Mon 27 Jul 2026 22:01:09 +0000
Files and hashes: 1: ZxkJuppVV5s_BKfW0tHmOw_jKWo.roa (hash: MZrrVW4osRnAPcGgxtofMaJwwGgsMYZ5RkCij4PD+d8=)
2: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: e5k1yYB4O4/YDaIY6l3tykHxDjb48fIjXMpRS+B13xE=)
3: ws_aeFDVw7sTSue7as5B9BFGr30.roa (hash: ik+9Y0UMemF3/24GwHXL/cUAnnRxGyFL8lUPRj+DxhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:40:d4:c7:9b:9f:1d:c5:9c:bd:a3:ad:8a:9a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jul 26 22:01:09 2026 GMT
Not After : Jul 27 22:01:09 2026 GMT
Subject: CN=46f81208b6ff3ef87bc30994bd7a96dcbb72ced9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:db:ba:ee:5e:14:71:8a:0a:7a:9b:00:df:
83:12:16:53:94:52:31:79:15:ac:c1:ec:80:95:6b:
ab:c8:ca:3b:31:2e:e9:3d:7e:73:29:18:38:a0:dc:
29:ca:a4:00:28:89:50:4b:7c:54:c5:98:e1:eb:c2:
23:12:c2:c3:df:a9:c7:3f:39:44:1f:f5:dc:91:13:
72:f3:07:c5:fe:32:1c:91:01:de:1c:d6:96:e3:79:
c3:7b:dc:2d:b2:69:61:34:a3:31:6d:ff:49:df:1b:
8e:78:b8:a1:d8:db:af:a4:a0:3a:d2:27:b7:4a:83:
7a:c1:9e:cf:66:72:52:17:8d:ad:b1:60:96:a0:3c:
d1:bd:e5:a9:66:fe:c3:a6:0f:c5:9c:ac:8f:73:e0:
3e:07:5f:56:8e:e0:ba:9a:fe:47:7a:b6:b3:ed:90:
9e:1f:b4:8c:a6:22:f6:8f:36:4f:87:73:18:ba:f3:
c4:e1:c5:0a:df:4c:07:e8:61:33:b4:19:1f:ca:2b:
88:4e:4b:c1:42:78:c7:60:f8:68:10:3f:f6:0d:8a:
a0:0a:92:15:7d:c0:ab:dc:e5:79:60:42:63:51:3d:
93:bc:11:0f:fb:3f:c5:b4:90:10:72:39:be:d8:e6:
3d:90:26:df:d9:fd:86:4a:29:c5:61:f2:e4:98:8a:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F8:12:08:B6:FF:3E:F8:7B:C3:09:94:BD:7A:96:DC:BB:72:CE:D9
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2c:cd:a7:0f:6a:b5:67:d6:3b:3f:7c:4e:b2:70:b0:db:72:
19:d3:c2:81:49:c0:e6:8c:4e:f1:95:ae:0e:66:fb:0c:58:dd:
c6:74:90:95:25:cf:91:80:2b:63:37:55:d8:19:81:99:7a:54:
61:46:0d:8a:2c:2e:d1:67:dc:74:09:69:ef:44:cc:e2:48:85:
d6:c2:3f:62:83:af:c6:5a:7e:a3:d7:dd:2d:ba:d4:04:01:14:
02:92:2c:70:93:47:34:dc:9f:9f:d2:61:d2:34:4e:9f:97:20:
b9:25:48:46:3b:7a:a1:86:cd:79:63:89:ed:6e:ab:ff:61:ae:
7d:b0:b6:30:71:eb:e9:13:a2:50:1d:01:bf:f0:b0:d2:9f:9d:
56:86:0e:85:73:df:85:65:a9:bf:d1:bf:a3:7d:70:ce:f0:a8:
74:71:ae:50:62:ae:c8:84:34:ce:68:cb:ec:3d:d2:ee:28:24:
3f:9e:e1:01:f2:2a:4d:c8:a7:27:79:7e:77:84:d0:9f:d5:6d:
10:90:75:8a:be:e7:b4:e4:d0:9c:a6:1b:a4:10:ad:03:7b:9f:
56:1b:c0:1c:aa:d5:8f:1c:81:a7:37:ec:13:77:cd:7a:77:b0:
dd:16:a3:32:ff:c3:29:78:f3:43:fc:c5:35:c5:1b:a5:97:a2:
44:3a:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:06 2026 by rpki-client