Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: jkdu4KwEbu3pGwNo8yRX9/cVdj/J/yhostPV4dlB3n4=
Subject key identifier: 47:2E:A2:61:40:31:E9:BB:85:D0:72:69:1A:CD:79:BE:FD:1F:DC:71
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 019D2703BADFF3B72B6C0C778F975C94EFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: ZxkJuppVV5s_BKfW0tHmOw_jKWo.roa (hash: MZrrVW4osRnAPcGgxtofMaJwwGgsMYZ5RkCij4PD+d8=)
2: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: YDmxF4b2h98cYJOlMlvI63DQJBpMOlGhpg9ZWgUW+pE=)
3: ws_aeFDVw7sTSue7as5B9BFGr30.roa (hash: ik+9Y0UMemF3/24GwHXL/cUAnnRxGyFL8lUPRj+DxhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ba:df:f3:b7:2b:6c:0c:77:8f:97:5c:94:ef:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=472ea2614031e9bb85d072691acd79befd1fdc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:a8:29:6f:2e:4b:47:54:1f:05:bd:de:bc:
26:43:61:4f:26:b5:d4:82:52:39:84:f9:91:51:56:
75:a0:4d:f8:42:70:04:91:ac:06:48:ba:85:98:c9:
1e:1f:e0:56:ef:63:b1:52:c0:30:a5:42:cf:7f:20:
fd:2a:43:27:89:86:ca:64:81:1f:e7:a4:0e:58:bb:
9a:75:b3:c5:f1:94:4b:6c:03:3d:86:a1:b0:cb:9b:
41:f3:7b:d5:dd:8f:2b:9d:87:28:aa:32:b9:c0:63:
48:6b:87:d7:dd:a2:11:11:bd:ff:9e:2f:16:ff:84:
08:23:dd:7d:ce:ef:bc:1a:4e:76:a6:b2:32:d6:dd:
c1:c6:3b:f9:74:9f:6f:24:9b:0c:03:e2:0c:5d:9a:
57:8b:fa:97:5d:a6:8b:47:6f:cd:d0:56:8e:c3:f3:
bf:8c:0c:7f:4e:5c:6d:40:29:64:c8:b7:1d:29:e4:
ab:b5:b4:96:77:4d:5e:e3:49:15:23:ab:cc:bb:c4:
1d:9a:55:7a:38:18:48:ef:14:c2:41:28:d3:fb:9b:
fe:78:95:a6:2f:63:1a:19:86:de:8f:fb:4f:0d:f3:
b3:38:62:2a:73:38:65:76:e8:f3:3f:76:5f:a8:c4:
f4:d2:ff:52:ed:98:27:93:67:65:06:eb:71:b5:8f:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:A2:61:40:31:E9:BB:85:D0:72:69:1A:CD:79:BE:FD:1F:DC:71
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:eb:17:a1:d7:7d:59:e1:09:fa:d1:18:2a:d4:89:79:25:24:
26:b4:0e:ae:5c:64:48:83:e2:00:9d:e0:cb:0b:c7:9f:3d:36:
56:ca:b1:d1:7a:db:ab:93:a8:bb:2d:80:1e:df:91:ee:80:55:
80:b5:bf:e1:82:3f:28:92:bd:8e:28:0b:e4:d5:9e:ba:a2:56:
e3:f7:e4:cc:d7:8b:43:20:52:52:86:3e:7a:72:fd:ca:75:8c:
44:86:5c:54:97:93:5b:90:24:e5:a1:a9:b7:1e:92:97:06:c2:
1f:11:1b:5c:04:f4:74:3b:3c:54:a9:3a:da:17:6f:03:fa:d2:
18:30:79:eb:9a:dd:6f:b3:a2:de:f8:3d:91:18:de:66:74:33:
f8:c8:72:ae:24:38:be:26:2c:a7:f2:ae:9a:e3:71:ff:28:e6:
e8:7d:6a:23:9b:ed:0d:59:71:6f:c6:93:e4:db:5c:51:44:c5:
aa:bf:e8:98:16:32:f3:76:9a:43:b2:2b:ab:ff:43:d5:43:84:
85:94:a1:1e:77:b7:9f:d2:5f:c8:61:20:dd:2f:27:14:dc:fc:
a6:ec:78:bd:e0:ed:1a:54:a0:73:4d:9b:4f:df:72:6e:07:fe:
00:5d:49:c4:65:9f:39:48:d0:20:35:e7:75:e5:c4:7e:a4:db:
71:1c:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:02 2026 by rpki-client