Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: F7KPwmaCUWvZUUPlBXqXXbAOVlGvv91pWipnjt12b9M=
Subject key identifier: 7F:03:CA:91:64:1F:99:3F:10:98:9F:D0:14:A5:C9:E9:C7:3A:5E:C5
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 01A16FEE9178F5E6D9CCCE5FEF5073624D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 1751
Signing time: Sat 24 Oct 2026 22:01:08 +0000
Manifest this update: Sat 24 Oct 2026 22:01:08 +0000
Manifest next update: Sun 25 Oct 2026 22:01:08 +0000
Files and hashes: 1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=)
2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: 84k2GL6ynjUcgwpAWuJyMVG+7/RuBVmq7avrpeaViXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:ee:91:78:f5:e6:d9:cc:ce:5f:ef:50:73:62:4d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Oct 24 22:01:08 2026 GMT
Not After : Oct 25 22:01:08 2026 GMT
Subject: CN=7f03ca91641f993f10989fd014a5c9e9c73a5ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:a9:8e:1d:e8:00:26:38:6e:a3:7f:7c:06:
77:e2:94:7a:87:b2:c3:87:f4:87:fb:91:ff:ae:a8:
ef:b7:78:c1:63:70:27:19:0c:5b:ea:b5:89:fc:d3:
c4:d6:e6:53:ab:50:7b:bb:1d:2f:82:bf:be:48:2c:
9c:7a:45:24:aa:87:77:93:52:c3:b4:f0:06:c0:74:
0d:e3:8d:69:09:e0:21:41:d8:3b:ec:9c:23:7c:99:
89:10:6e:9a:b2:4b:e0:fb:e4:d6:f8:3f:a8:82:f1:
75:7b:bb:99:66:4f:30:56:f2:c0:59:ba:84:3f:01:
b7:68:81:bf:0a:70:fd:40:95:fc:2c:c4:86:d2:9e:
97:88:cc:8e:5f:e5:77:8a:6b:8d:4d:14:a2:c0:fc:
f3:a1:0a:b4:bc:44:1b:35:4a:cc:b1:a9:09:27:53:
4e:91:f6:e7:bf:e5:b4:9d:5d:54:35:18:44:06:ad:
bf:c6:98:39:45:e7:61:97:1d:ec:e3:03:38:78:27:
84:76:c5:95:36:b2:25:c4:f3:9f:6a:77:fe:de:32:
dd:b9:5f:50:39:89:e1:78:68:fa:56:06:b4:a2:fc:
b6:7d:90:9b:6a:d6:27:39:9c:2c:62:a9:b4:fc:85:
8d:9f:13:73:ca:e7:56:89:f3:5d:d9:16:2e:12:34:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:03:CA:91:64:1F:99:3F:10:98:9F:D0:14:A5:C9:E9:C7:3A:5E:C5
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8c:59:ac:72:88:f8:eb:e4:e9:7c:33:1f:60:67:a4:31:d9:
fb:46:5d:f8:de:45:1e:d5:54:42:fa:e3:2a:ba:0b:16:2a:9a:
16:d9:af:67:81:dc:4e:8a:ff:22:a8:ff:21:24:41:49:ee:b4:
3f:b8:5d:dc:67:61:d4:74:05:e7:84:88:b7:b0:8d:e5:61:cb:
3a:cd:33:04:03:b7:a7:66:b1:5d:1d:c1:b3:e1:eb:8d:dd:c7:
db:5b:dc:52:6b:63:8a:27:db:38:6f:ab:39:2e:00:2f:79:ca:
c5:73:79:63:af:75:ac:e0:a7:35:b7:3e:bd:40:ef:d7:53:17:
5d:45:fe:69:c0:56:8c:7a:87:cc:6b:0d:f6:dd:55:9b:2f:84:
85:11:99:63:34:6a:a3:fb:17:8e:87:15:5a:db:dc:9b:f3:1b:
2e:7b:91:06:7e:a9:30:a1:13:af:2b:31:96:58:8c:b6:a8:97:
69:82:7d:fd:3f:de:16:a3:be:86:b9:e0:c2:0f:4e:d5:bd:a4:
39:f5:08:59:d6:b5:04:68:14:41:0b:64:cd:22:24:56:ba:88:
ec:6b:5f:fb:66:47:07:97:cf:25:db:50:6e:75:3c:d2:da:f0:
72:10:51:4a:d3:aa:df:da:95:f7:be:31:b8:df:82:b3:d0:cc:
c7:2b:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:51 2026 by rpki-client