Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: E5Z8aU3Z3La12T0sECBe2HI8Q+oWToli7OoWkf5G27s=
Subject key identifier: 6F:1B:5A:87:89:75:31:8B:37:80:44:59:B4:ED:9A:9F:17:FA:75:4A
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019D382EA37ACB14F0BCE59F191101DC1C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: aFD6YMpSyvyG1T0vv02xEyweY8Bi4T95EZruLBfhSOg=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a3:7a:cb:14:f0:bc:e5:9f:19:11:01:dc:1c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=6f1b5a878975318b37804459b4ed9a9f17fa754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:4a:50:67:fc:69:b0:fb:6a:3b:38:46:db:
06:21:1a:c1:da:bd:36:b3:4d:2c:58:7a:87:af:c8:
dc:1e:0e:7e:64:af:1f:d3:6a:38:47:f4:9b:48:9b:
db:41:70:13:f7:8d:52:d2:15:61:83:b2:a3:09:39:
dd:44:39:61:ca:18:ec:32:d8:0f:03:06:29:50:10:
5f:24:22:51:cc:b5:1c:c8:f0:6f:bc:7e:36:89:d7:
9c:3a:7c:bf:b6:e7:3a:31:33:7e:f2:fb:18:89:5b:
e9:26:5a:57:00:ad:57:4b:6b:c2:58:37:dc:dd:7c:
b5:4d:4e:b8:6e:d6:bc:a4:bb:f1:06:a9:74:b1:b8:
77:41:10:c3:aa:3d:3e:ca:ed:29:36:72:00:ef:30:
3a:8f:bf:38:26:8f:7d:71:dc:fa:41:30:99:3c:f8:
f3:e9:dc:36:bc:00:a8:53:1b:d4:a0:1f:5d:4c:f3:
92:09:fc:92:d8:c4:37:1f:25:de:13:7e:94:bc:7d:
3e:06:3f:de:1e:af:65:95:8c:94:78:31:e8:93:68:
e2:2f:6b:aa:cb:81:fd:90:87:64:fa:87:22:43:05:
c7:82:76:38:4e:c0:56:e0:fb:9b:cc:b1:d1:10:53:
e1:8d:04:e0:b6:58:34:4e:8d:71:50:4d:24:7e:a3:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:5A:87:89:75:31:8B:37:80:44:59:B4:ED:9A:9F:17:FA:75:4A
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:14:2b:09:76:ca:0f:2b:24:1e:07:06:a4:fc:e6:af:35:24:
dd:25:0f:88:ea:25:0d:6e:1c:d2:be:ff:41:1c:77:7d:5c:52:
f8:f0:7c:61:af:73:50:40:af:ec:31:51:56:44:44:6a:97:42:
13:2f:20:47:4b:29:2c:b5:4b:9a:47:21:7f:25:82:16:c7:35:
32:ca:55:56:50:fb:d0:7e:cc:06:39:a8:5c:86:98:14:b0:54:
0f:c8:3c:2e:6f:d0:cb:8a:2f:ea:7e:f7:c1:60:25:fe:2f:66:
18:f5:5e:f5:80:44:62:71:63:22:f9:52:85:95:af:e1:ef:26:
21:8f:bc:fc:d5:a9:d1:47:a6:57:6c:36:e9:2d:25:93:c0:6d:
ee:80:4b:b7:5e:6c:23:b9:68:ea:65:92:d8:bd:62:1f:17:cc:
33:31:ae:e0:3d:aa:ba:17:47:93:74:f9:e6:29:75:f6:be:2d:
48:f1:2e:4a:d3:7f:5c:c3:89:5c:13:40:7b:80:98:7e:af:1e:
8d:b8:e1:78:dc:f8:d3:d5:f0:82:61:0d:94:ae:dd:0c:3d:21:
a6:6c:fc:11:51:3f:5c:e3:3b:22:4b:54:3a:b3:af:63:f4:b4:
af:4e:7c:bd:d1:38:1a:4d:4c:bc:40:05:33:d7:6a:d4:67:6b:
f0:c7:a0:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LqN6yxTwvOWfGREB3BwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzQzMTY1MmNkY2Y1MjFjNTViYzQwMDVjMGRhZTMyY2Ew
YTNlYzYwHhcNMjYwMzI5MDYwMTEzWhcNMjYwMzMwMDYwMTEzWjAzMTEwLwYDVQQD
Eyg2ZjFiNWE4Nzg5NzUzMThiMzc4MDQ0NTliNGVkOWE5ZjE3ZmE3NTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPdKUGf8abD7ajs4RtsGIRrB2r02
s00sWHqHr8jcHg5+ZK8f02o4R/SbSJvbQXAT941S0hVhg7KjCTndRDlhyhjsMtgP
AwYpUBBfJCJRzLUcyPBvvH42idecOny/tuc6MTN+8vsYiVvpJlpXAK1XS2vCWDfc
3Xy1TU64bta8pLvxBql0sbh3QRDDqj0+yu0pNnIA7zA6j784Jo99cdz6QTCZPPjz
6dw2vACoUxvUoB9dTPOSCfyS2MQ3HyXeE36UvH0+Bj/eHq9llYyUeDHok2jiL2uq
y4H9kIdk+ociQwXHgnY4TsBW4PubzLHREFPhjQTgtlg0To1xUE0kfqPn6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8bWoeJdTGLN4BEWbTtmp8X+nVKMB8GA1UdIwQY
MBaAFKzEMWUs3PUhxVvEAFwNrjLKCj7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgt
NjcxYmVlMmJjYzA0LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgtNjcxYmVlMmJjYzA0
LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRQrCXbK
DyskHgcGpPzmrzUk3SUPiOolDW4c0r7/QRx3fVxS+PB8Ya9zUECv7DFRVkREapdC
Ey8gR0spLLVLmkchfyWCFsc1MspVVlD70H7MBjmoXIaYFLBUD8g8Lm/Qy4ov6n73
wWAl/i9mGPVe9YBEYnFjIvlShZWv4e8mIY+8/NWp0UemV2w26S0lk8Bt7oBLt15s
I7lo6mWS2L1iHxfMMzGu4D2quhdHk3T55il19r4tSPEuStN/XMOJXBNAe4CYfq8e
jbjheNz409XwgmENlK7dDD0hpmz8EVE/XOM7IktUOrOvY/S0r058vdE4Gk1MvEAF
M9dq1Gdr8Megqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:13 2026 by rpki-client