Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: +KfHgMlszrqlPtvkD7D3zwh8L7koKwH5624L0pH31ic=
Subject key identifier: 71:39:97:51:48:14:8C:2C:74:91:76:8C:76:C4:ED:A9:3E:27:27:A2
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 01A0D917271ED439EF500AE1529BD822C908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 15:02:48 +0000
Manifest this update: Fri 25 Sep 2026 15:02:48 +0000
Manifest next update: Sat 26 Sep 2026 15:02:48 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: 2zpSGs73J7kfBDzgdszk1A2HKe0LYzZUc5Bhfb+ufog=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:27:1e:d4:39:ef:50:0a:e1:52:9b:d8:22:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Sep 25 15:02:48 2026 GMT
Not After : Sep 26 15:02:48 2026 GMT
Subject: CN=7139975148148c2c7491768c76c4eda93e2727a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:45:a4:49:bf:d3:dd:4f:1a:2f:94:2f:bb:
a0:8e:00:3c:ed:ac:f5:59:bb:13:fe:78:5b:47:f9:
87:7e:ff:91:21:f2:61:25:9c:e4:a6:bc:12:c8:46:
ea:80:cb:9b:cf:13:7d:c1:0c:f7:eb:ec:bd:a1:6a:
93:65:57:25:48:df:d3:4d:a6:63:de:0d:f7:8a:22:
9b:3e:22:5d:b3:9e:71:fc:95:ad:e4:dd:82:4c:e6:
f7:79:3d:59:f9:54:3b:70:57:6c:ee:8e:e1:12:3b:
ad:8b:44:99:d0:ea:e8:14:06:48:3e:9e:ae:78:c1:
ed:e0:21:06:6c:35:b4:b9:d8:2f:d0:06:76:ac:fd:
79:57:1f:cf:3c:a5:6c:b7:d6:2c:c1:6c:cf:6a:78:
e8:ec:81:56:e0:f7:05:7e:b4:5c:4e:a3:45:d1:5c:
77:5a:63:ac:35:89:14:fa:53:69:7f:0d:90:bc:bf:
0d:46:5c:20:2a:bb:0f:ec:01:78:4c:80:9e:94:76:
27:4e:72:6e:5b:d4:42:50:a0:30:04:10:9d:57:76:
eb:c3:2e:70:87:ea:28:47:4b:3e:d1:a8:6c:e4:1e:
ac:51:59:22:33:94:43:b1:6e:f5:88:76:95:8c:ef:
b0:e2:7f:0b:cf:5a:34:01:74:cd:6e:fa:bf:8d:1d:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:97:51:48:14:8C:2C:74:91:76:8C:76:C4:ED:A9:3E:27:27:A2
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:51:73:7a:17:d6:22:aa:1f:f7:8a:68:7f:44:16:90:b1:c6:
98:5a:a3:3c:28:3f:12:ca:90:ea:05:96:cf:1d:4a:44:8e:6d:
df:b1:31:0c:dd:12:43:2b:7f:e9:5f:95:c9:ac:32:b2:4d:3e:
67:34:4f:0c:d2:81:7f:84:d5:45:42:de:a2:49:f4:cb:bf:e0:
5b:ea:36:7c:5e:ca:99:bb:f9:d1:a6:4e:e1:99:27:d4:ad:be:
5e:27:3d:12:42:c8:7e:98:1a:c6:a8:fd:30:ce:a8:84:a7:83:
dd:7f:8d:ef:06:8a:39:f3:e4:39:76:c0:26:53:63:ae:57:d9:
23:bf:bc:9b:85:ba:c5:cc:7d:77:07:2b:88:09:48:2a:e2:8a:
f1:d0:8e:5c:0c:ee:82:b2:e7:9a:62:b0:7f:0d:be:0d:f7:ea:
b8:2c:85:32:55:82:b4:e1:3a:06:b8:3d:44:c6:11:22:fe:15:
b7:6e:d2:f0:c1:b5:f6:d4:ee:8c:cf:7b:19:47:9f:fc:28:ae:
65:f0:8a:5b:1f:03:44:c8:fa:28:61:a9:5c:a2:e6:e9:06:ae:
23:9c:43:68:59:26:81:e2:1f:f7:fd:53:4b:e7:77:1b:aa:1c:
f4:e0:d5:5f:07:de:87:bb:15:e7:30:05:c6:6d:63:48:73:f3:
02:f8:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:21:32 2026 by rpki-client