Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: uj7iLRREav/uMjFTT5gxTD0+W26fbnd3+z01WwRhCYw=
Subject key identifier: 5B:66:F0:E7:FD:09:F1:B6:67:89:4F:18:41:8E:8B:8B:BB:1B:D7:70
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 01A1133C688E48B7524A2CD8670EC53161EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 1721
Signing time: Tue 06 Oct 2026 22:01:28 +0000
Manifest this update: Tue 06 Oct 2026 22:01:28 +0000
Manifest next update: Wed 07 Oct 2026 22:01:28 +0000
Files and hashes: 1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=)
2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: h8zF9U7oDvqAgQUrNlNZBuEfuchhDO7dWxLcIh4Wz3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:68:8e:48:b7:52:4a:2c:d8:67:0e:c5:31:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Oct 6 22:01:28 2026 GMT
Not After : Oct 7 22:01:28 2026 GMT
Subject: CN=5b66f0e7fd09f1b667894f18418e8b8bbb1bd770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:3b:58:d6:80:43:76:63:32:49:9b:e7:99:
7c:cf:a4:9b:a1:c2:ff:ea:c0:a1:e7:96:c1:b1:31:
61:21:02:68:b0:aa:1f:64:c7:4d:53:14:76:06:6a:
40:28:5f:e0:95:1c:69:96:59:32:c7:7d:c5:6c:23:
00:3e:15:6c:69:06:43:76:09:e5:80:04:6a:aa:76:
d4:90:b0:77:2c:06:86:4d:24:13:2d:7f:1e:f5:1e:
08:fb:53:ed:bf:8f:85:19:90:2d:67:f0:00:67:ee:
1c:48:16:2d:99:25:23:d1:61:3c:46:b2:3f:be:e6:
fa:df:12:ea:75:be:78:be:6a:8d:3e:9e:a1:98:f6:
dc:66:82:c6:ce:42:26:f6:ee:ba:4d:b7:5d:ad:84:
15:d2:0c:4e:c2:45:71:a6:fc:7b:95:12:72:d9:9a:
ad:ff:7b:1b:04:67:61:73:37:04:17:39:76:6f:b1:
8b:86:25:d9:ea:59:d5:fa:95:78:79:a4:b0:df:37:
e2:c0:4c:d7:d2:5b:37:8c:83:b2:93:e9:3c:17:cd:
8c:a5:f8:0a:7c:2b:03:1f:9d:99:67:f6:53:ce:fe:
86:9b:ea:30:47:e4:4e:ec:ad:be:04:14:f4:0c:81:
5a:95:8c:ea:26:cd:ed:08:b4:38:d0:6f:c4:d1:ae:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:66:F0:E7:FD:09:F1:B6:67:89:4F:18:41:8E:8B:8B:BB:1B:D7:70
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c7:fe:1c:da:98:39:ef:6f:df:d3:e3:c7:69:f3:ff:6c:c0:
55:c1:57:7b:a6:e0:23:bd:85:a6:24:e3:75:e3:c4:71:46:57:
a4:ce:26:a6:24:65:b0:e7:c3:a6:da:ac:26:91:1a:1c:2e:7c:
b5:6c:b0:cf:93:8a:46:c3:5c:be:69:ce:a8:3c:33:93:a4:b4:
5d:93:35:ab:13:5a:84:9c:59:70:f1:12:bd:c8:34:76:48:55:
54:5f:73:f5:ae:ae:4f:ee:49:a7:ca:5b:3e:84:87:db:31:94:
16:0c:a5:8b:39:87:2a:6e:90:17:5f:64:01:f7:cc:ef:1c:fb:
e0:bc:3d:5e:f3:74:7d:fb:38:8b:1c:25:af:4b:fd:c2:38:36:
cc:aa:41:b3:64:2b:63:19:0b:19:45:83:47:be:26:9e:1b:03:
c9:c4:6a:9a:99:f0:2c:37:00:2a:01:8f:50:67:4e:9f:61:59:
2a:73:f6:5a:cf:c1:ff:5f:40:4f:37:b9:f1:08:56:39:3b:f9:
4a:24:af:71:cb:dc:f4:f9:23:e7:85:58:80:61:0b:a6:b6:64:
96:ec:3b:d4:55:f9:6f:19:14:34:a9:2b:8a:6f:7c:03:16:6f:
55:05:62:df:50:2d:6d:cf:b1:ff:a0:08:4d:28:ee:96:c7:70:
79:c8:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:52:45 2026 by rpki-client