Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: MoolOm31ac4PBsPtDlUVHh+FPUyt95ftAIsaMn1rryE=
Subject key identifier: DD:6A:C3:8B:34:3E:58:75:13:38:2A:57:B0:84:90:35:70:CB:48:C5
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019FD83CB55A09D42751A668CADE3A27095F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 19EB
Signing time: Thu 06 Aug 2026 18:01:24 +0000
Manifest this update: Thu 06 Aug 2026 18:01:24 +0000
Manifest next update: Fri 07 Aug 2026 18:01:24 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: lul6J6dMha7BELt9O0eUmV6+M2HbDyPn8gYfW2ZlFOk=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:3c:b5:5a:09:d4:27:51:a6:68:ca:de:3a:27:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Aug 6 18:01:24 2026 GMT
Not After : Aug 7 18:01:24 2026 GMT
Subject: CN=dd6ac38b343e587513382a57b084903570cb48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:56:ae:4f:c4:e8:39:0f:5e:3e:45:e5:7a:
06:35:cd:f5:db:eb:88:ad:3d:c5:5a:62:0f:b7:07:
3a:72:1b:df:2e:b3:52:9a:f7:59:78:ac:69:f4:b3:
cc:0b:59:58:44:7e:3e:db:17:88:aa:68:34:04:9a:
7a:d0:3d:e1:3e:fb:b7:02:6a:27:d1:a5:42:39:6e:
00:ad:89:ed:03:d9:d0:e4:ca:0e:0f:39:c8:06:aa:
00:79:83:2c:3b:d5:45:50:30:01:d4:8e:d1:fd:38:
f1:bf:d3:fb:44:5f:8e:5f:95:df:ff:ce:9b:59:56:
7d:22:ea:96:72:96:de:2e:23:0f:35:a2:49:54:0f:
4c:f2:ef:b1:6d:fd:ad:98:cc:e7:c9:e9:7c:80:c7:
00:84:9b:5d:27:ab:f8:85:15:43:dc:32:04:03:8f:
9d:ce:6a:ce:68:23:6e:e0:ff:37:26:b2:06:43:e4:
ed:e6:de:0b:79:d9:da:80:0f:cb:27:33:93:21:68:
bf:a2:9b:4d:69:cc:83:ac:94:9f:7a:35:89:0a:54:
90:84:13:3d:67:b1:ab:11:c4:88:55:27:90:00:08:
58:48:2b:33:80:e0:93:e9:88:0e:d6:89:40:5e:44:
3c:8d:fa:80:a7:4a:f7:c2:45:c4:64:a3:f4:f7:83:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:C3:8B:34:3E:58:75:13:38:2A:57:B0:84:90:35:70:CB:48:C5
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:ba:f0:84:d1:d5:6c:e6:60:40:16:e8:81:1f:2c:fd:26:
79:20:e5:c5:d6:e9:7b:aa:77:2f:42:41:33:6a:27:fc:cd:14:
36:4f:63:de:c2:13:2d:6b:07:56:bf:c9:6e:fb:91:bb:b5:f5:
7a:4a:f1:0f:a4:66:e2:42:fd:81:31:ab:1b:d3:b7:b8:9b:9c:
49:08:24:a2:84:a3:3d:44:a6:f5:aa:94:1c:43:c5:00:00:df:
31:42:2c:e7:7b:13:0b:fb:41:ce:47:42:0b:90:e3:ec:a2:95:
d3:f9:73:03:18:71:6f:ec:af:8a:4f:a0:fd:4b:82:ac:b5:4b:
70:2b:22:0b:ee:16:68:be:02:e5:9a:f9:82:95:67:c5:49:a2:
fb:55:35:ff:71:55:f7:ad:85:96:3c:d2:7f:03:95:9d:5f:9d:
fc:3a:73:59:5b:41:41:3f:00:0e:c2:f2:fa:ab:aa:1d:df:ea:
82:35:4e:86:7c:f3:57:de:79:32:dd:55:5c:2c:27:0b:49:ff:
11:ab:eb:2b:a0:b1:df:b5:af:84:9f:66:14:89:e7:ea:bf:0e:
13:19:78:80:a3:88:ce:3b:ac:59:14:e1:20:32:35:7a:1f:cc:
6c:bb:51:f7:ca:63:39:84:f9:80:ec:bd:b5:1d:dc:46:71:3a:
08:6a:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:53:22 2026 by rpki-client