Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: Wf12qERzzz1UVTjbN1rHwDda9bNkt5Uz3/YyISBvgL0=
Subject key identifier: BA:59:DB:D1:2A:D2:85:07:D1:71:96:44:96:B4:EC:AC:1A:36:08:D3
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 01A0C7B389E3C2A2A0EAB8170B0946EC0E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 06:00:27 +0000
Manifest this update: Tue 22 Sep 2026 06:00:27 +0000
Manifest next update: Wed 23 Sep 2026 06:00:27 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: 2VYqxBTSlzciTHjTBFvtkPKsL84bPtqBGFlGuvY0vAM=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:89:e3:c2:a2:a0:ea:b8:17:0b:09:46:ec:0e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Sep 22 06:00:27 2026 GMT
Not After : Sep 23 06:00:27 2026 GMT
Subject: CN=ba59dbd12ad28507d171964496b4ecac1a3608d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:02:a1:4b:55:f6:e5:42:c0:2b:75:f1:85:
37:29:8b:72:15:b5:13:3b:4a:73:41:dd:ca:49:67:
c9:41:08:e6:6a:76:87:a7:a7:4d:42:f3:89:bb:e4:
19:db:fd:2f:f0:ca:81:a8:65:1b:52:f6:ba:9d:73:
b6:2b:f0:eb:cf:96:bd:20:a9:1b:6e:ab:4d:a7:f7:
70:bb:78:56:8a:8c:33:d2:3a:be:89:d1:01:a8:27:
d7:f2:6b:3d:27:d3:6a:b0:92:84:f6:73:55:31:02:
6f:8a:9e:a9:47:82:ed:94:1a:71:d4:ef:e2:52:5f:
09:cc:2f:3c:db:89:6a:2c:b2:32:ee:53:9c:7e:43:
eb:0d:2a:0b:1e:a3:39:f7:98:69:0d:55:8a:1a:19:
49:af:9f:02:1d:c0:d9:b9:07:02:da:bf:48:18:de:
6c:77:7a:83:cb:3f:de:7a:79:d1:57:c9:74:85:59:
75:4e:5b:a3:67:07:ed:5a:45:34:29:01:85:15:70:
4e:7e:57:ec:c6:66:d6:1d:79:bb:57:2a:20:b3:0e:
09:0a:65:d0:68:78:57:e4:3c:55:3f:f4:e0:49:a0:
f8:19:e8:bc:58:1b:f6:5d:55:2b:36:a8:9e:d0:92:
c1:a3:f4:7d:c1:81:dc:48:be:f3:91:55:83:db:53:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:DB:D1:2A:D2:85:07:D1:71:96:44:96:B4:EC:AC:1A:36:08:D3
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:af:da:fd:da:4b:b5:66:bd:48:7d:df:52:59:cd:3c:d5:92:
01:98:bd:97:b4:57:51:b6:16:cf:2c:e1:e5:5e:f8:83:32:76:
4e:1f:7b:5a:be:35:b2:e4:9f:42:36:34:38:5a:78:8e:9e:66:
aa:e6:71:0d:57:f6:ea:ff:89:b6:29:51:f8:0e:56:64:2a:0a:
af:65:75:fc:c0:84:cb:9d:90:8c:39:3c:69:47:cd:60:d9:f0:
f8:db:0d:29:72:bd:55:97:91:b3:55:4e:ac:c7:8b:0a:4a:14:
ae:42:9e:2a:09:77:c2:69:a9:69:76:68:46:e4:36:66:b2:12:
a1:bd:ce:b3:d7:49:db:03:ec:69:f6:ad:6a:32:c3:43:7b:c5:
76:b7:ac:b9:4c:0c:a2:fd:9c:18:dd:9a:54:a7:76:77:b5:55:
32:4e:52:d4:10:9b:6e:ee:9d:ec:95:4c:ed:98:4b:bd:5d:3e:
1e:1a:f7:0f:1f:49:76:0f:55:77:e2:60:77:67:44:9a:84:25:
db:bd:22:59:4d:55:19:aa:89:c7:e3:cf:61:18:5f:47:53:32:
86:20:ab:f8:98:e6:70:c8:21:da:07:f7:d4:02:e0:e6:4d:c8:
20:67:a8:68:40:b1:8b:59:25:6b:e7:bd:c9:96:df:28:fa:bf:
e7:92:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:44:55 2026 by rpki-client