Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: dyCGZeE/ZhD/X6wTtRTUOZ1XL17b9YqZQvWi4euNVu8=
Subject key identifier: CF:05:93:48:61:98:11:7D:40:5F:71:E9:D6:C5:78:08:EA:B9:82:D1
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 019D2A3BB5239F8CE34717BCEDCEC0C1DC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 1281
Signing time: Thu 26 Mar 2026 13:00:49 +0000
Manifest this update: Thu 26 Mar 2026 13:00:49 +0000
Manifest next update: Fri 27 Mar 2026 13:00:49 +0000
Files and hashes: 1: XZtXXBflmY3np62tX4_yWpDop2Y.roa (hash: thfxFFslD8MwVS58mjvBbbGagIhFVXywfILuPq1lA5M=)
2: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: LSBDaX5umY+ubvYQcmP76lR1Ed176TcMQpklLwSW+d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:b5:23:9f:8c:e3:47:17:bc:ed:ce:c0:c1:dc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Mar 26 13:00:49 2026 GMT
Not After : Mar 27 13:00:49 2026 GMT
Subject: CN=cf0593486198117d405f71e9d6c57808eab982d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:79:97:bf:ea:dd:fc:fa:d7:b9:70:8a:02:
53:0e:73:5e:2d:ea:c0:17:58:3d:54:cd:1f:ea:42:
73:0d:a1:21:11:b0:2f:3a:82:a8:2d:16:ac:f4:f2:
83:ac:0c:23:0f:b9:13:82:17:c9:dc:58:74:cb:41:
e8:6a:71:2f:5d:4b:c5:e0:ac:c8:23:e7:e6:fd:65:
81:71:2e:15:44:5c:e4:97:fd:ef:84:61:39:b3:c6:
4b:61:bf:8d:db:b5:c4:a6:68:86:4e:44:5a:cd:bf:
35:bc:6a:3d:61:1c:e2:6f:19:c6:c0:69:d0:de:0b:
4c:75:b0:4b:5f:35:62:14:a2:fc:60:fa:ed:ba:a1:
f8:1c:44:ae:51:dc:c9:b7:81:af:c7:05:3e:09:19:
1e:23:81:cc:3b:b6:fb:e6:5e:eb:e2:54:bb:d3:06:
16:fd:b9:e4:c5:ef:82:16:32:a8:ee:b2:b1:0f:79:
c8:a4:62:7e:3c:45:0c:93:f5:0e:34:1c:b9:79:55:
d2:12:40:da:d7:da:e5:7e:f2:05:cd:5f:3e:42:a7:
c6:6d:e1:5b:80:18:16:90:2e:31:fd:74:ef:fa:61:
d2:00:d8:b8:48:02:5e:92:33:9c:82:0a:1d:05:31:
2f:9a:97:eb:38:48:0d:69:44:15:cb:57:20:3d:36:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:05:93:48:61:98:11:7D:40:5F:71:E9:D6:C5:78:08:EA:B9:82:D1
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:81:14:dc:0c:b3:6e:7a:bc:6b:15:ef:d0:29:ff:cf:2a:
3e:de:3d:9e:04:86:cc:16:53:66:c6:41:f9:ea:eb:40:1f:38:
d4:6c:da:60:d4:bf:6d:4b:fa:66:57:87:da:ea:48:13:f7:e2:
4c:b5:d8:71:76:e9:39:b6:8e:fd:d7:a7:35:ef:ff:2e:72:3a:
cd:5b:46:b4:44:44:b4:2a:f0:22:83:1e:9a:96:a7:ed:61:62:
74:87:fd:ad:9f:17:e3:32:82:0b:75:a3:d4:ca:55:6b:07:bd:
ee:24:f5:76:54:71:ff:6b:98:fc:ef:68:65:63:4d:7c:1d:6e:
29:ce:bd:2e:91:aa:5f:d8:6d:0b:50:2d:18:ef:dc:7e:cd:4f:
91:ed:fd:04:fc:89:84:89:b4:c1:8c:c5:34:16:4b:e8:14:02:
f6:db:2e:e1:a9:42:1e:00:63:dc:01:01:f9:54:0a:bf:34:e6:
76:93:57:0a:14:ad:d2:7f:77:15:2d:c8:21:08:45:a3:39:ad:
5d:d5:a8:00:be:6b:0c:12:51:3d:25:a9:d8:1a:4f:50:a9:36:
b2:ea:17:9e:d7:34:f7:f0:60:00:a9:9c:44:dc:d2:4f:93:bf:
12:fd:99:18:25:02:0d:13:65:a9:9a:33:a5:a5:80:84:9b:52:
8e:79:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:57 2026 by rpki-client