Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
File: MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft (raw, json)
Hash identifier: 0YTMCcGAef/zY09CfNJMFXcEl3y3adfXykqGZ7CA5WQ=
Subject key identifier: 27:0B:EC:0C:CE:1B:47:93:43:73:DC:C4:C9:71:0D:BE:AA:68:9E:99
Authority key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
Certificate issuer: /CN=3109a8d70fa4478935b05c0621f6889552405daf
Certificate serial: 019D28BBEFA79F10C9088001B491BE68A4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
Manifest number: 02FD
Signing time: Thu 26 Mar 2026 06:01:38 +0000
Manifest this update: Thu 26 Mar 2026 06:01:38 +0000
Manifest next update: Fri 27 Mar 2026 06:01:38 +0000
Files and hashes: 1: 97DX5I3DXmozptw-sWqlR4foXXU.roa (hash: 77zsOfhaIU3CSg4BUbhV2AIiKXyzFLkrgnOWV3Vu7Tg=)
2: MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl (hash: D53WDdAla+U4+zMKZm72rHCEdWKx2hVfBkuO2JgBbPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ef:a7:9f:10:c9:08:80:01:b4:91:be:68:a4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3109a8d70fa4478935b05c0621f6889552405daf
Validity
Not Before: Mar 26 06:01:38 2026 GMT
Not After : Mar 27 06:01:38 2026 GMT
Subject: CN=270bec0cce1b47934373dcc4c9710dbeaa689e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:a3:1f:bc:ff:55:4a:d8:2d:ef:91:65:a3:
49:96:2b:cf:0f:8d:3f:68:1b:ea:1c:af:75:f8:da:
a2:98:b9:ca:35:cf:fd:1b:26:aa:07:e4:43:a4:8f:
75:4c:b2:88:eb:6b:7f:5e:87:8a:aa:f5:75:c2:b1:
97:80:85:65:08:03:02:4d:36:27:ce:72:fb:20:1c:
f5:c8:44:cb:17:1e:16:7d:ed:1b:95:b8:2d:2c:eb:
87:64:08:de:a0:a2:58:39:86:34:ca:cd:32:23:a6:
bc:68:26:0e:55:51:a4:43:a7:a7:80:ef:f5:50:a7:
41:7a:bb:c1:e6:60:82:9f:9b:c1:15:55:89:4e:1c:
0f:29:6b:e5:36:3c:50:99:ef:d8:c0:17:e2:91:e3:
5d:3a:0b:47:a5:a0:64:fc:47:18:66:12:cb:d3:59:
5e:69:36:08:38:6b:de:55:b6:e0:29:a4:27:06:f2:
93:f4:ba:b1:5a:1a:c8:e8:47:62:eb:1c:4c:39:19:
cf:10:ba:e1:3a:55:72:f7:d9:0e:70:9b:d7:fb:36:
51:8b:de:2c:3c:c8:dd:bc:ea:7d:32:54:51:c1:87:
31:43:51:e1:70:05:88:98:2f:29:8a:73:2c:7a:88:
e5:f9:5d:bf:1e:f0:03:14:b9:1e:78:ee:00:19:32:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0B:EC:0C:CE:1B:47:93:43:73:DC:C4:C9:71:0D:BE:AA:68:9E:99
X509v3 Authority Key Identifier:
keyid:31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b0:8d:32:fd:39:84:f7:33:25:8f:93:97:dd:c9:fc:7a:5c:
03:1d:fe:13:4e:81:c8:0f:f4:f5:69:74:bf:66:10:5b:f4:82:
46:fa:bd:8f:cd:58:77:c3:7a:72:11:21:ef:92:d8:8b:1a:5e:
c0:20:d8:b3:74:b9:84:a0:4b:a4:2e:fe:54:a0:64:37:72:ef:
0d:77:8a:24:94:43:dd:c6:60:7a:30:c7:6c:9a:dd:97:b4:e5:
43:51:88:34:6f:32:cc:82:bb:b6:5e:53:06:8a:fc:f2:d2:21:
73:7c:77:72:c8:05:12:1f:cd:bd:87:ea:87:e3:f4:6e:75:ca:
fa:db:ab:92:c8:2f:c4:4d:d1:59:65:f1:dc:8d:55:19:dc:df:
23:7b:ae:b6:6d:e6:38:28:1c:01:fd:ea:f8:8a:40:3b:57:b5:
57:7b:7f:58:c3:c4:2b:93:d8:62:cc:75:5c:5d:60:24:35:51:
50:b4:01:60:75:18:2f:37:49:ac:0c:f3:e5:e9:e6:40:57:5c:
56:11:95:fd:8f:65:08:3d:44:43:98:b5:2f:37:b0:77:e0:e7:
9c:47:cd:f0:9d:c1:7e:1f:54:c0:d0:29:44:72:35:e2:55:26:
1d:a2:21:13:28:32:28:5b:d0:65:d2:13:21:a7:77:fa:4b:ee:
66:46:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:21 2026 by rpki-client