Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: Ngb/PjeKWDFocqgTfI40zGjvkUzDXD+m856LkEar57w=
Subject key identifier: CE:ED:24:AD:21:0C:F3:EF:81:40:54:4D:63:8F:47:06:33:53:EA:17
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 01A0EAAEB02A49CB0F81FFB2989176470CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 170C
Signing time: Tue 29 Sep 2026 01:01:51 +0000
Manifest this update: Tue 29 Sep 2026 01:01:51 +0000
Manifest next update: Wed 30 Sep 2026 01:01:51 +0000
Files and hashes: 1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=)
2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: Ncc0UXoPnL2nFxJk/ju/yAdH72oTVnDrovyjMyBD+d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:b0:2a:49:cb:0f:81:ff:b2:98:91:76:47:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Sep 29 01:01:51 2026 GMT
Not After : Sep 30 01:01:51 2026 GMT
Subject: CN=ceed24ad210cf3ef8140544d638f47063353ea17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:1b:43:15:03:df:d6:ac:fc:7b:15:9d:28:
13:2e:e8:8a:eb:48:5a:02:53:b3:e6:ee:d2:b4:46:
e6:a2:af:f6:42:a9:8b:94:32:dd:d3:b8:63:ef:49:
48:a7:b9:02:77:e5:31:fe:ac:b9:58:b7:7d:a3:56:
42:b0:79:49:c9:f1:3f:99:e5:bb:b8:09:55:ab:f8:
a8:62:f9:c0:a6:e1:ea:9d:3e:50:9f:5a:d6:db:59:
17:18:ba:2e:0d:b4:e4:25:88:7b:f9:e8:10:6d:9a:
93:66:c2:f5:3c:28:0a:1d:f8:09:6c:83:3b:9c:49:
96:c3:4f:66:b5:f7:e1:f6:9f:85:49:16:f7:06:d9:
aa:db:52:b6:b8:86:06:1f:5c:19:7b:d9:81:35:31:
45:6a:24:2a:ce:4b:43:e2:b3:3f:fd:3e:c8:45:d1:
ab:0c:ab:62:e4:59:fe:db:74:3f:0e:25:f5:70:03:
9c:46:2c:22:5a:2f:52:76:31:ec:8b:fa:c4:95:91:
92:7a:49:03:37:35:96:ff:3a:89:ae:6c:95:a9:b5:
5b:ab:e9:d3:40:b9:c3:08:17:b8:f7:ad:52:17:88:
18:06:3f:df:c9:21:d3:4b:c6:fb:fa:30:1d:7b:af:
f0:0b:95:c4:e8:34:c9:a7:03:0d:b9:b5:87:ef:94:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:24:AD:21:0C:F3:EF:81:40:54:4D:63:8F:47:06:33:53:EA:17
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8e:d9:90:ed:44:dd:68:44:b4:52:3f:9f:aa:3e:89:3d:80:
03:ee:81:bc:83:3c:12:18:4d:9b:7f:ea:02:5e:f0:6d:13:58:
94:b1:b9:bf:68:d7:9d:7a:53:7b:38:59:bb:5c:b2:9d:70:af:
9e:97:d6:e4:99:61:77:78:bc:7e:ca:a9:9d:01:79:18:92:d1:
84:6e:0d:b2:d1:4d:f2:44:bb:b9:f9:05:1f:81:3e:45:8e:a2:
f3:36:2a:f3:38:f6:3b:c7:e0:33:f0:ef:11:20:74:91:3c:04:
b8:a7:43:a5:85:08:6e:b9:f4:48:33:61:5d:85:f3:43:4b:77:
9e:50:ff:6c:b0:20:3a:32:e4:54:8c:e6:44:ad:1c:bb:f4:7c:
d1:3a:20:69:ad:2a:95:01:4b:c9:c7:4e:b4:23:e4:89:5b:52:
73:9d:b5:0e:67:27:fc:b4:69:8b:b3:5d:4c:d2:03:1e:12:bd:
e8:9b:3a:00:ee:f6:e4:b1:ba:2d:a9:9e:6a:93:dc:50:1f:bd:
ed:db:50:8f:67:49:d0:85:ef:16:42:bb:71:e0:75:07:84:80:
eb:ab:e2:c2:e1:ff:ba:a6:e2:0a:c3:1b:6b:98:d2:13:73:77:
f6:6c:ee:0c:32:4c:9a:64:46:bd:ec:8f:1b:ff:7d:af:01:ca:
11:49:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:12:14 2026 by rpki-client