Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: 7xMy6KGwSNAt3Ruk/xr2xuk/lgJXxB9rqO/b8431eTo=
Subject key identifier: EE:70:C2:88:B6:61:D6:40:75:93:BB:FF:7E:79:A9:79:BD:0E:E6:E0
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 019D98F4B99884A513CF5ECFE7F79A437467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 1554
Signing time: Fri 17 Apr 2026 01:01:08 +0000
Manifest this update: Fri 17 Apr 2026 01:01:08 +0000
Manifest next update: Sat 18 Apr 2026 01:01:08 +0000
Files and hashes: 1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=)
2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: 9w4HWs3CsQuZ+cEqgPdcD4jZfqP+la7yiszrXifrcvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b9:98:84:a5:13:cf:5e:cf:e7:f7:9a:43:74:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Apr 17 01:01:08 2026 GMT
Not After : Apr 18 01:01:08 2026 GMT
Subject: CN=ee70c288b661d6407593bbff7e79a979bd0ee6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:41:53:fa:41:4d:91:50:82:27:fa:af:68:
40:57:7d:10:ed:61:93:da:95:1c:c5:53:85:6d:22:
26:5f:4c:de:b9:00:95:1d:84:b7:1d:9c:a3:02:0f:
96:d1:ed:ff:56:29:06:ee:fb:09:c4:81:f5:c0:3e:
9b:96:3e:13:0d:ca:7f:e7:e8:d6:66:55:b9:38:e3:
67:c5:da:cd:a7:48:03:58:3e:b2:11:24:fc:a0:c5:
cf:62:c7:38:16:fd:3a:c8:f1:6b:e5:0c:d6:20:c1:
7c:54:f7:e4:b4:c4:1c:61:52:a8:59:8c:4d:f5:81:
14:b4:30:f0:53:74:c7:7b:05:59:2d:64:77:1d:ce:
be:52:b5:1e:ff:12:f7:3d:75:81:3c:2c:84:38:fb:
e5:d7:c6:7a:72:a7:93:36:69:99:db:85:1b:5e:28:
4b:71:81:e1:ae:be:df:29:9c:39:d5:79:ca:69:4e:
17:61:9a:9b:91:cf:bb:4c:48:2a:75:3b:b1:59:6c:
fb:94:52:e9:ea:53:93:3d:9d:d8:1b:ba:f3:5b:84:
0d:ee:89:f2:3c:95:91:d0:ee:f0:ae:2e:6f:25:38:
4e:5b:f2:1d:a0:1b:46:7b:e0:dd:85:4a:c3:d3:29:
39:5a:af:8c:54:5e:bb:1e:4e:16:d7:18:35:f8:5b:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:C2:88:B6:61:D6:40:75:93:BB:FF:7E:79:A9:79:BD:0E:E6:E0
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:08:17:91:f1:c9:aa:5f:38:81:bc:96:22:71:81:37:2b:
3b:57:a8:3d:b5:fb:ec:ff:35:89:e9:c6:c0:d7:14:11:a1:d7:
20:bb:14:1e:39:0b:94:3a:e9:f3:ff:d2:b3:2c:72:27:96:7f:
9c:c6:a8:0d:5f:d5:2e:34:ca:8a:26:98:37:bb:ee:40:8e:41:
42:4c:68:b1:1a:3d:d9:6e:44:97:38:f4:65:79:41:40:ac:09:
17:20:4e:39:c5:3f:f4:ba:71:b5:9f:c0:3a:17:fc:d3:74:86:
25:65:1b:96:7b:d6:48:e8:b4:62:e4:0b:90:80:bb:08:58:e1:
32:c5:7e:88:9a:d2:4d:da:c9:f6:4d:6d:9e:96:8a:4c:4b:d5:
cd:d3:51:52:fa:d6:c0:4d:ec:89:a7:b0:7a:c0:aa:ea:e9:d1:
18:e2:31:1a:97:ba:12:8f:11:f5:ce:5a:e0:5c:19:16:de:27:
4c:ad:65:5c:31:22:9e:51:2e:d2:54:b3:67:d1:95:50:96:8b:
05:c6:f4:61:56:68:db:a1:f5:c1:73:eb:ff:17:0b:e4:20:55:
5c:f5:b3:ef:e0:92:f2:2f:b4:41:d0:2b:9c:b3:f7:b0:4f:39:
28:9d:1c:e1:ce:1a:4c:69:84:65:23:77:03:ed:d5:2e:a7:31:
d2:5b:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:40 2026 by rpki-client