Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: sZ4zx5aAYHDteB9QvlhmSZLuKYrgTL/OXz43H3eQvoA=
Subject key identifier: 04:FD:C8:69:F4:0E:DE:4C:C9:84:82:59:60:BE:C9:10:6E:FC:81:86
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 01A06F156667F07D2BF3B49B2202CC75E361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 16CC
Signing time: Sat 05 Sep 2026 01:01:08 +0000
Manifest this update: Sat 05 Sep 2026 01:01:08 +0000
Manifest next update: Sun 06 Sep 2026 01:01:08 +0000
Files and hashes: 1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=)
2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: T1rwFgC4sMUvuIsg6Mg/+8aazW6pGz48vQKFbD6nkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:66:67:f0:7d:2b:f3:b4:9b:22:02:cc:75:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Sep 5 01:01:08 2026 GMT
Not After : Sep 6 01:01:08 2026 GMT
Subject: CN=04fdc869f40ede4cc984825960bec9106efc8186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:2c:99:dd:16:17:c0:36:b3:5a:a2:fd:72:
b8:e6:2f:d5:34:a7:b7:a8:0d:41:db:3a:fb:95:64:
61:4e:67:bb:07:9c:20:8d:c3:ae:63:b6:a2:35:e7:
8a:6c:e5:35:08:99:e8:24:9a:ce:33:8f:8c:a5:8c:
7d:5b:d1:b8:90:4c:72:79:05:cf:dd:ec:d5:d6:5c:
55:5e:24:2f:e3:aa:36:21:ea:92:08:2f:a2:e4:7e:
d1:9b:be:b3:2d:75:e9:2a:8f:72:e0:44:aa:a7:50:
96:4c:93:78:8b:88:4d:22:ad:cd:b4:73:b5:cf:8c:
6e:36:96:8b:6f:75:ac:e0:46:12:d4:37:6c:19:2a:
49:0e:ae:9f:fd:77:2c:e4:3a:96:be:11:38:39:f3:
5c:0a:aa:ee:4a:b3:47:4f:ae:77:da:40:3f:70:bf:
56:f9:59:eb:81:63:a0:53:96:a1:f0:99:f0:10:ee:
2a:e3:57:c1:5c:40:06:f2:29:fb:6d:34:af:02:f3:
58:cf:51:78:a2:36:6b:cb:2f:d0:78:0e:e9:22:9e:
e1:d4:70:80:d6:fa:79:64:05:13:f5:6a:c8:83:c0:
fb:2b:6e:98:5f:13:86:71:36:95:79:ea:1c:59:e4:
49:4a:e4:cd:92:f4:fa:32:53:75:1f:c8:cc:c1:9c:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:C8:69:F4:0E:DE:4C:C9:84:82:59:60:BE:C9:10:6E:FC:81:86
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:93:53:b7:ba:7b:1a:d3:29:e7:70:65:e9:9b:d7:a8:de:
d1:f7:7e:56:2b:8e:36:14:f4:07:77:15:6c:df:9f:76:fe:6d:
ff:fd:66:a5:b9:4f:6b:1b:46:4c:5d:46:cd:d4:f6:72:9f:ae:
bd:31:d1:5a:f0:27:02:b8:e5:97:64:f8:83:ee:67:99:93:4f:
d6:fd:4f:09:0e:c2:ad:1a:a0:08:4d:4b:6b:09:d9:f6:76:8d:
16:be:3d:9e:c8:5d:1d:6c:fe:ab:1a:ca:7a:f3:b6:57:60:0e:
91:b4:eb:a3:b7:5a:f6:a6:36:37:fe:9c:75:4c:26:eb:6a:96:
59:f3:0b:47:da:ec:49:e7:43:8d:9c:33:1e:80:79:5e:53:bc:
36:2f:bd:43:7d:20:f0:df:60:ce:41:75:d1:49:7b:e6:2a:12:
d3:e1:6f:6d:b0:34:0b:74:16:07:8c:0a:31:89:22:c2:e0:16:
fe:76:a0:18:a7:e1:c9:66:e8:93:19:5b:31:6d:94:de:fc:fd:
fa:8f:e5:68:4c:18:1c:9e:4c:93:7c:9c:f8:47:6b:c9:6b:28:
c7:fb:97:48:da:bb:cd:81:8c:70:cf:56:6e:9b:05:da:4e:6f:
cd:31:1b:c3:b4:81:c9:a0:9e:23:af:2e:e0:a5:bc:34:09:7c:
57:99:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:46:22 2026 by rpki-client