Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: V4B9HJppRVOOaKQRPSwiruf+CPrbdVAFvxVZVZXz9aQ=
Subject key identifier: D5:40:CE:02:56:F1:A0:AC:05:A5:BC:2F:A4:7F:DB:AC:89:1B:BA:2B
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 019FAC07D8400BA17FA45F4BB481A17ACD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 1667
Signing time: Wed 29 Jul 2026 04:00:22 +0000
Manifest this update: Wed 29 Jul 2026 04:00:22 +0000
Manifest next update: Thu 30 Jul 2026 04:00:22 +0000
Files and hashes: 1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=)
2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: AABpVpOnK+X9yL1N//PyeW1sHBIy2W3XqxLZ6vA6qyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:d8:40:0b:a1:7f:a4:5f:4b:b4:81:a1:7a:cd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Jul 29 04:00:22 2026 GMT
Not After : Jul 30 04:00:22 2026 GMT
Subject: CN=d540ce0256f1a0ac05a5bc2fa47fdbac891bba2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:a1:ec:44:bf:b2:33:21:50:26:58:b8:35:
86:39:79:2b:c8:b5:c9:1d:52:0b:07:4e:54:88:95:
e4:8a:9c:ea:b3:d1:5d:14:43:26:9b:4c:45:1e:a3:
c8:43:e2:db:e4:9b:da:22:e1:41:ac:cd:20:69:cd:
e6:56:eb:12:75:88:1a:c2:79:c6:9f:c8:46:59:4f:
55:2c:b9:3b:74:e8:5c:cb:4c:3d:15:7c:7e:86:c6:
d3:e5:f5:d0:55:8a:55:36:0f:88:88:5a:bf:53:23:
f4:ad:bf:74:3f:e3:27:93:01:75:73:84:ed:c6:94:
3b:37:9c:29:b9:75:52:df:de:fc:32:06:a3:63:16:
6d:51:15:13:c7:c1:a3:ab:3a:68:a8:c7:ad:b4:a9:
49:39:21:0d:cd:47:53:b8:af:b3:6a:b8:1b:df:79:
e7:86:68:fe:7a:a0:5e:24:e8:fd:e6:3d:8a:e7:5b:
76:5b:19:9d:c0:d1:ba:e3:01:6c:82:c4:03:9e:2b:
39:2d:5c:12:9f:f5:73:3a:75:70:0f:c0:c0:d0:5b:
70:9a:3d:68:55:a1:3c:9c:d9:cb:2d:77:77:3a:49:
25:c0:51:5b:c0:77:6b:a3:55:6d:95:36:d1:c4:38:
a0:9c:40:89:0a:7d:7b:09:91:e1:60:f2:60:60:5e:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:CE:02:56:F1:A0:AC:05:A5:BC:2F:A4:7F:DB:AC:89:1B:BA:2B
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e8:6c:54:e4:53:cf:2f:f4:b9:b2:e2:b3:c6:fa:ca:2b:11:
b7:d5:0e:df:5e:85:0f:0e:6e:bc:e4:fb:37:20:42:95:d1:9d:
b4:02:83:c7:d4:9e:b9:24:38:7f:d7:16:56:de:e0:ec:cb:40:
91:17:3d:f2:68:0f:9b:68:a3:4f:f4:e3:a6:c3:59:dd:b9:c8:
a8:98:34:dc:41:fe:2f:95:95:14:05:87:e4:53:a6:ae:e9:14:
75:96:a0:7e:c9:d1:b2:11:22:79:fd:4b:ce:be:66:b5:d8:2a:
a0:5c:65:0b:0c:c2:f8:e0:bf:76:b8:15:0c:1d:a0:ca:c3:a6:
3c:4d:f4:3f:bd:31:3b:9a:44:4c:d6:a9:7b:40:78:98:c6:7a:
42:90:39:55:5f:ce:75:0c:1e:22:d0:e4:96:11:14:f2:a8:91:
26:e3:6e:a6:15:f2:7c:6a:6b:d1:93:4e:07:fc:57:e9:c0:72:
8f:f7:1f:18:95:f2:47:37:4b:81:6d:81:03:34:e6:80:3d:e6:
84:68:48:03:6c:d2:96:d8:01:a0:af:36:41:f3:2f:1a:f2:de:
81:da:0c:6f:f3:93:bd:6c:9e:78:d4:d0:ef:fd:d6:5d:80:92:
06:9c:6c:98:6b:af:a8:d5:1e:01:ea:79:25:7a:d4:c8:dd:a4:
35:8c:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:00 2026 by rpki-client