Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: 7HzflRbbz8+Thu8PZnWltGlHq+jTQm7tldG+aDqj6eo=
Subject key identifier: 9D:D3:BA:29:AD:CD:50:2F:36:61:9C:9D:AB:8D:E1:31:CC:D1:2C:28
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019EF07EAF092FA558ABB427BF86F7B54303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1973
Signing time: Mon 22 Jun 2026 18:01:34 +0000
Manifest this update: Mon 22 Jun 2026 18:01:34 +0000
Manifest next update: Tue 23 Jun 2026 18:01:34 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: 3i2WYd1rVYHFfT+uf6Jx+caiTmyqRBj2nPJTAEj2epE=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:7e:af:09:2f:a5:58:ab:b4:27:bf:86:f7:b5:43:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jun 22 18:01:34 2026 GMT
Not After : Jun 23 18:01:34 2026 GMT
Subject: CN=9dd3ba29adcd502f36619c9dab8de131ccd12c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:73:b2:78:f1:f2:b0:8e:f7:d2:14:d5:22:
fd:3d:b7:b8:53:c1:51:70:b4:85:fd:fe:87:36:34:
03:f8:12:a7:ce:bc:d1:0b:5a:ba:6c:16:f2:ef:1c:
0a:ad:a2:df:17:7d:48:79:a0:9d:49:56:7d:1e:ad:
09:b2:bb:2c:cb:dd:be:a0:67:34:f1:b0:50:6a:0e:
e6:55:dd:da:23:16:56:51:d2:0e:8b:a4:d4:a3:5a:
28:98:92:72:26:95:93:34:a7:37:0a:5d:ef:19:38:
38:60:55:98:2d:2c:2b:cf:69:83:57:67:50:f2:6e:
0e:e9:52:5f:53:ae:01:2f:11:8b:03:6d:0c:bd:11:
35:f1:72:f3:3d:a7:15:1b:0e:83:24:9e:4d:d2:e0:
47:c6:0a:54:a8:be:66:28:d2:26:18:32:79:7c:5a:
99:51:a3:ca:33:72:c2:7f:d7:25:05:45:14:85:fd:
90:45:6d:dc:f1:dc:28:7a:c7:c5:91:e1:ad:b7:c3:
b7:36:07:6d:76:6d:7c:55:6e:97:f6:0d:8b:18:77:
59:c7:31:91:d2:fb:a5:60:18:35:92:88:f2:5d:4b:
be:0d:a8:34:a3:a6:9f:04:14:cf:0b:ed:80:c4:81:
d4:28:c3:40:0a:1d:78:b0:2b:55:bf:5b:5f:91:e7:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:BA:29:AD:CD:50:2F:36:61:9C:9D:AB:8D:E1:31:CC:D1:2C:28
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:ff:de:e1:d1:38:c0:1f:e7:86:61:4f:c5:71:4f:85:94:
d4:a3:56:56:8c:0f:e0:86:c9:40:37:12:09:47:79:c9:d4:27:
1d:b6:7d:7e:ac:85:a3:b9:70:b6:de:17:9c:5a:58:94:57:20:
20:02:82:a7:c0:68:77:f0:f4:6b:47:ef:54:69:76:93:ce:d6:
c8:cf:b6:d8:c5:24:7e:f3:02:62:77:05:64:15:dc:3f:36:fd:
b5:e6:ab:2f:b0:e9:ac:94:83:ef:4a:62:ac:a7:ad:22:34:af:
13:cd:57:1c:4f:65:f5:a0:99:ee:16:f7:1d:02:ae:c9:7f:da:
d0:7c:13:73:1e:85:25:18:6f:9e:6c:41:71:c0:eb:ee:ae:c4:
84:be:ff:74:fd:dd:a2:d1:bc:75:70:8c:ff:5d:04:29:9c:82:
e0:7b:0b:95:06:43:71:e1:2b:c1:cf:8e:69:7e:ef:36:7f:f7:
7a:32:62:08:f3:f9:20:1c:58:09:2f:b5:e1:28:26:84:2a:c5:
00:8e:89:35:41:08:dc:8f:a3:6a:b7:74:5c:fa:66:0a:67:15:
60:5d:5f:77:b1:ab:0a:91:f4:40:39:a2:6a:db:ce:b3:03:1a:
2b:fb:51:4c:67:be:24:b5:c8:3c:87:75:d7:27:58:6e:35:96:
3e:6b:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 23:18:39 2026 by rpki-client