Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: Sh79waGYOZZRCENPODrelxU7OCbKImuz4I8AK8qB/48=
Subject key identifier: 4E:CC:14:8F:CD:8D:AC:32:93:3A:55:1B:28:3E:ED:1E:5D:E8:B0:4E
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 01A0D5396EA65FBF481EB87AC37D507A13FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 21:01:45 +0000
Manifest this update: Thu 24 Sep 2026 21:01:45 +0000
Manifest next update: Fri 25 Sep 2026 21:01:45 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: JQNFsMzw5Deo+vT+Slx4Auirmqg9n1rwnWSt5GytKF4=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:6e:a6:5f:bf:48:1e:b8:7a:c3:7d:50:7a:13:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Sep 24 21:01:45 2026 GMT
Not After : Sep 25 21:01:45 2026 GMT
Subject: CN=4ecc148fcd8dac32933a551b283eed1e5de8b04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:81:fe:0d:a2:37:f4:76:5a:2c:29:ac:b8:
71:d9:2b:24:6e:7e:9e:b3:46:b4:08:57:34:76:05:
77:f7:14:26:4a:a7:25:69:4f:f5:97:df:0a:b1:fe:
a5:cd:7c:9d:a0:ad:41:86:63:75:1d:d7:13:40:33:
bf:c2:e7:00:99:89:37:32:7d:81:55:bd:50:24:d6:
c5:1f:17:dc:25:ec:c0:e3:1c:70:41:e6:0c:a2:79:
1a:74:bc:9c:1f:74:fa:33:e8:51:af:89:3d:a6:13:
cf:04:a1:39:7d:21:60:9d:d9:01:a3:61:60:80:7b:
66:fb:4f:df:88:4d:29:ee:cc:eb:8d:1a:b5:fb:8c:
b5:29:eb:a6:16:3d:b7:c8:ef:82:2e:4c:1e:83:85:
a2:05:21:ae:e3:d0:4a:31:0f:70:09:42:16:98:99:
36:99:94:12:2d:44:89:9f:48:0b:0b:01:fc:98:b2:
13:fc:7c:28:0e:62:3a:35:58:0d:fc:4a:e1:34:68:
a6:e7:5e:d8:fb:08:58:db:3d:df:94:9b:f1:c5:c2:
c5:3f:e7:df:06:bc:53:19:f3:9b:bf:a5:4a:3e:23:
3d:8b:ef:4d:4a:99:bd:ce:50:31:91:ff:d4:62:80:
0f:e7:be:1d:fb:80:a7:2e:95:f2:75:c6:0c:b8:21:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:14:8F:CD:8D:AC:32:93:3A:55:1B:28:3E:ED:1E:5D:E8:B0:4E
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:da:f5:f5:7f:18:00:15:94:de:66:df:14:e0:c1:b1:65:c2:
4d:09:22:d7:07:09:f8:4f:c0:18:56:15:87:c2:6a:4c:b6:95:
8b:06:34:ec:1c:f9:52:67:7b:5f:09:55:e9:d2:fe:fb:dd:da:
b3:ec:bb:e5:8f:a1:6d:34:9a:ce:bd:cb:2b:86:44:21:f0:17:
17:64:66:75:ab:14:02:7c:ce:d1:5a:4a:e0:68:3a:68:24:1b:
24:e7:26:b4:66:e8:bc:e7:c3:57:f6:a8:9a:a1:32:e6:6d:b8:
2e:2f:71:0f:d9:73:45:2f:2e:90:1e:e2:65:37:af:ce:35:42:
31:57:de:f4:ee:2a:2b:b0:fe:9f:78:b4:61:27:13:b2:2a:89:
27:8c:e5:7f:ea:44:5c:cd:f8:e0:d7:0e:49:9b:b1:63:05:cf:
3e:b0:48:8d:3f:f4:76:60:aa:59:b0:3b:15:ea:3f:32:73:21:
fa:05:dd:79:35:7a:39:f6:79:1d:38:4c:9e:3b:30:5d:c4:50:
d4:66:27:85:73:6a:7b:94:90:e0:24:d6:58:a4:d3:db:d8:bf:
07:f3:c8:72:8f:94:cf:06:a3:c5:b0:ce:00:88:e0:09:28:f2:
48:79:56:ff:e7:4a:5a:c6:f0:40:04:67:d6:21:24:51:ed:b9:
b2:6d:c9:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOW6mX79IHrh6w31QehP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzQzMTY1MmNkY2Y1MjFjNTViYzQwMDVjMGRhZTMyY2Ew
YTNlYzYwHhcNMjYwOTI0MjEwMTQ1WhcNMjYwOTI1MjEwMTQ1WjAzMTEwLwYDVQQD
Eyg0ZWNjMTQ4ZmNkOGRhYzMyOTMzYTU1MWIyODNlZWQxZTVkZThiMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR2B/g2iN/R2WiwprLhx2Sskbn6e
s0a0CFc0dgV39xQmSqclaU/1l98Ksf6lzXydoK1BhmN1HdcTQDO/wucAmYk3Mn2B
Vb1QJNbFHxfcJezA4xxwQeYMonkadLycH3T6M+hRr4k9phPPBKE5fSFgndkBo2Fg
gHtm+0/fiE0p7szrjRq1+4y1KeumFj23yO+CLkweg4WiBSGu49BKMQ9wCUIWmJk2
mZQSLUSJn0gLCwH8mLIT/HwoDmI6NVgN/ErhNGim517Y+whY2z3flJvxxcLFP+ff
BrxTGfObv6VKPiM9i+9NSpm9zlAxkf/UYoAP574d+4CnLpXydcYMuCGunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7MFI/NjawykzpVGyg+7R5d6LBOMB8GA1UdIwQY
MBaAFKzEMWUs3PUhxVvEAFwNrjLKCj7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgt
NjcxYmVlMmJjYzA0LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kOGQ2YmEtZWY5NS00ZGM1LWJlOTgtNjcxYmVlMmJjYzA0
LzEvck1ReFpTemM5U0hGVzhRQVhBMnVNc29LUHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedr19X8Y
ABWU3mbfFODBsWXCTQki1wcJ+E/AGFYVh8JqTLaViwY07Bz5Umd7XwlV6dL++93a
s+y75Y+hbTSazr3LK4ZEIfAXF2RmdasUAnzO0VpK4Gg6aCQbJOcmtGbovOfDV/ao
mqEy5m24Li9xD9lzRS8ukB7iZTevzjVCMVfe9O4qK7D+n3i0YScTsiqJJ4zlf+pE
XM344NcOSZuxYwXPPrBIjT/0dmCqWbA7Feo/MnMh+gXdeTV6OfZ5HThMnjswXcRQ
1GYnhXNqe5SQ4CTWWKTT29i/B/PIco+UzwajxbDOAIjgCSjySHlW/+dKWsbwQARn
1iEkUe25sm3JYA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:45:52 2026 by rpki-client