Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: tzkqXvdggPbNxYM93aFTBU3C3fXc0KWefLKTJB9iFPQ=
Subject key identifier: 16:F7:53:CD:12:B6:93:E2:B5:B9:9D:A0:41:61:E3:9A:3B:27:C8:21
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019D26CD1085B5FD0F645B1C656990A00467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: mOOLW3Y63BnTVj+C6XJAR28tfMEL9LvXSHb9QqmVz8o=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:10:85:b5:fd:0f:64:5b:1c:65:69:90:a0:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=16f753cd12b693e2b5b99da04161e39a3b27c821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:39:62:dd:e4:9f:cf:cc:33:d9:d0:ba:1d:
be:5d:c7:ec:bf:3e:ec:68:dc:48:04:2c:2f:41:f7:
a8:01:e5:ca:2c:f4:e4:3e:8f:ed:18:b8:85:0f:33:
cd:21:f5:a7:07:b8:15:58:f1:b8:04:87:41:60:53:
d6:e7:3b:2e:93:e5:f0:0c:49:60:22:17:be:1f:45:
fb:78:38:81:f9:09:ac:0c:a5:08:15:b2:3a:82:f1:
42:30:f2:b3:38:47:c6:09:e1:ac:17:70:24:22:69:
32:9e:6f:0e:e8:cd:e3:cc:02:61:56:aa:e0:d6:80:
79:9d:8a:84:03:53:08:01:7a:3b:e5:62:da:1e:82:
bd:f5:94:a8:94:12:14:71:a4:5b:a0:cb:ee:1f:1a:
94:bb:f8:fe:39:96:a7:af:e7:a9:7d:da:04:be:c4:
c9:8b:c6:a6:d4:c3:3e:0d:54:d7:61:5d:2c:0d:b5:
b0:6f:a6:e5:c7:28:29:35:41:94:54:6a:da:1d:38:
d1:bf:db:d1:23:25:2b:e3:27:05:4f:1f:b2:bf:ac:
74:b1:14:28:b3:22:e5:95:b5:9f:ac:c1:ea:da:74:
c5:28:0e:c8:ec:b9:74:9c:60:a5:a4:53:90:b5:26:
3b:17:e7:0f:ee:f2:dd:8d:80:0f:58:27:22:f1:2f:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:53:CD:12:B6:93:E2:B5:B9:9D:A0:41:61:E3:9A:3B:27:C8:21
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bd:6c:e7:ea:d0:3c:84:91:13:a3:85:cf:a7:51:db:c5:c9:
16:a0:54:2e:d1:69:c5:87:3f:7c:0a:75:3a:33:fc:50:e1:3f:
02:13:ee:ca:7d:38:da:6d:c7:59:38:a2:b4:a4:ab:41:9e:6c:
c2:bd:e0:4b:d6:72:b9:94:df:ff:6a:b5:6f:96:05:34:05:5b:
de:ea:22:02:98:fc:67:70:b1:f4:6f:46:72:28:44:6f:f2:42:
c6:50:11:26:e4:73:6c:29:57:e5:4d:b3:40:53:77:43:83:a8:
1f:3d:e9:d0:8e:43:98:66:e0:bb:83:ae:84:0b:ab:89:08:a3:
14:3c:9b:a8:dd:14:0f:3c:ab:e6:d7:9d:bf:f0:75:f3:04:03:
ed:c8:42:5a:6d:9e:a0:e8:3e:7c:74:47:7a:a5:96:0c:b5:55:
74:8e:81:16:13:f2:97:84:0d:16:c3:cb:a6:a0:2f:b2:30:64:
4b:2d:d0:20:b8:6e:6c:83:43:fa:cc:7e:72:15:0e:dd:a8:c6:
51:eb:61:3d:59:5b:bf:49:5a:3d:22:8f:2b:b2:17:42:22:df:
53:57:ba:fc:27:88:59:70:6c:4d:ac:90:63:f3:da:8a:4c:e7:
a3:0f:11:89:1d:29:88:79:a6:74:66:25:f9:f1:98:07:dc:19:
72:e0:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:47 2026 by rpki-client