Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
File: Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft (raw, json)
Hash identifier: fxTQnnnF4gutu23SqhDpfO/TRO/slv+Gnj100ubrRtw=
Subject key identifier: 40:76:09:F3:09:E9:4F:E0:D2:63:5A:78:26:FA:01:67:B7:88:C0:4C
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 01A176CBE1A2AF6F0E521B2ECB9C720F1B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
Manifest number: 1ACC
Signing time: Mon 26 Oct 2026 06:00:35 +0000
Manifest this update: Mon 26 Oct 2026 06:00:35 +0000
Manifest next update: Tue 27 Oct 2026 06:00:35 +0000
Files and hashes: 1: 0lIjaAWtUooPCjw9z9PIRARmkBs.roa (hash: sO74ZmU/4s1BoIcendr5mqxDbviNVo71E4p/VNutlgY=)
2: 4y8Ch0VP7oOT5yu33LhGHOlG4Xk.roa (hash: 9/e/rEvOGpg0mwW5WgBt/gu28mPeM/IxWbsPTRivGT4=)
3: Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl (hash: IKQLcpd5PuMks9cNKvQF9NUh7tpge1dhUu74ekfqB5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cb:e1:a2:af:6f:0e:52:1b:2e:cb:9c:72:0f:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Oct 26 06:00:35 2026 GMT
Not After : Oct 27 06:00:35 2026 GMT
Subject: CN=407609f309e94fe0d2635a7826fa0167b788c04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:93:40:98:68:7e:fc:17:ed:80:3d:45:d0:
17:0e:40:db:9c:95:01:29:be:65:d2:4e:8f:b1:76:
78:80:eb:5b:11:31:46:fa:2b:ab:82:e4:13:a4:50:
82:fc:3d:a1:b5:0c:d2:bc:34:d6:07:ba:18:5f:36:
60:bf:0d:a9:bd:8a:ca:2b:0b:5e:e6:f8:37:ef:7b:
46:83:1c:50:99:b0:38:5d:57:dd:45:ce:0b:c5:36:
39:65:a6:a0:d9:c3:bf:bf:de:e9:9b:35:0d:1b:c1:
81:e1:ea:03:70:f3:dd:96:81:27:17:2c:d3:05:62:
bd:f8:d0:e5:eb:6c:59:f3:db:7c:a1:67:5f:ee:cb:
43:13:8f:c6:cb:d5:34:31:49:9d:13:39:e7:8c:dc:
88:e5:cb:ef:8f:e1:a2:e9:f4:34:30:a4:97:0f:bf:
0f:1e:bf:d9:70:04:97:83:c6:d9:18:92:96:dc:8a:
2b:f9:91:06:6c:9c:be:3f:13:4d:0f:9f:06:a5:e3:
c7:3d:e1:61:58:73:15:0b:05:2d:96:e1:2b:55:2d:
62:e7:0b:df:13:28:b2:0a:f2:9c:a6:a1:b4:d0:62:
be:a2:da:34:6a:0a:f0:cc:b7:48:16:cb:bf:65:60:
09:06:41:9c:06:e4:1e:40:30:82:d3:bc:a6:8f:75:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:09:F3:09:E9:4F:E0:D2:63:5A:78:26:FA:01:67:B7:88:C0:4C
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:12:2a:a5:e0:c4:af:5c:2d:d8:e1:e9:29:9e:cc:58:8c:e3:
ae:98:44:2d:73:73:f0:15:c2:11:aa:9d:ee:ad:1e:22:5b:f6:
b8:22:65:27:60:ab:3c:ba:21:7c:02:0a:37:6c:d7:38:62:81:
95:7c:75:0f:b7:aa:51:00:ba:85:65:aa:5e:c9:a3:d1:44:92:
0a:66:74:39:f3:26:a2:ae:c6:cf:24:e2:3d:e8:dd:06:73:74:
6b:93:3f:45:a4:76:e0:18:e0:bc:08:db:b7:a1:a6:a5:39:56:
86:a2:a1:e8:97:cb:58:3b:00:88:7a:1c:87:b3:da:2d:7c:92:
ed:07:b7:ff:19:86:81:8c:65:bc:3e:63:cd:17:e6:58:65:4c:
11:39:0a:69:ec:ab:05:84:f5:da:35:13:c6:60:c9:43:f0:a8:
99:1f:0e:29:e9:45:6b:27:94:15:aa:1d:60:16:f0:6c:e7:4f:
47:5d:4c:ba:7a:ee:1b:0e:e5:53:67:fe:5e:0f:1b:c3:20:36:
ad:1d:b0:fe:b4:aa:68:be:4f:cf:75:62:e4:32:3b:ab:bd:86:
4a:dc:34:c6:bc:81:35:01:15:89:db:ed:a6:4e:b4:d8:7b:66:
2c:92:a1:63:81:21:e2:99:57:f5:f7:00:43:ad:01:b2:e0:b3:
2b:bb:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:52:44 2026 by rpki-client