Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: jH1jIzaZGTgo5LB0F2Wf4vl0EvggHKELb6COZCH/7aY=
Subject key identifier: 97:AF:7E:2C:4E:5B:5C:7E:C7:4E:C6:4C:C0:48:F6:AB:1C:12:77:18
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019FABD1CC6C23BC3CEB63EFC1E23F6F617B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 03:01:21 +0000
Manifest this update: Wed 29 Jul 2026 03:01:21 +0000
Manifest next update: Thu 30 Jul 2026 03:01:21 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: CdXXIqbtD8AA/0JbZgtPB/5mFK/zskS+3jxdExRSZOw=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:cc:6c:23:bc:3c:eb:63:ef:c1:e2:3f:6f:61:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jul 29 03:01:21 2026 GMT
Not After : Jul 30 03:01:21 2026 GMT
Subject: CN=97af7e2c4e5b5c7ec74ec64cc048f6ab1c127718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:a3:98:08:33:75:87:86:ed:bb:83:eb:30:
dc:94:b1:e0:8f:42:3b:40:df:c1:36:09:78:e6:2a:
b4:0e:09:e3:6b:78:a4:c6:de:93:a0:5a:00:51:34:
c0:56:1d:30:10:60:51:84:a5:ac:67:de:a9:3d:03:
96:e0:52:b2:20:b3:3f:df:42:b1:59:0a:39:05:bc:
2f:00:69:8a:c9:3a:db:be:fa:9c:15:b5:87:6d:e7:
71:3b:3f:da:1b:b1:ea:02:1a:84:5c:e0:9b:4a:b8:
2b:1a:6d:f7:fa:df:67:b3:93:a6:55:f5:20:b3:f2:
fb:ea:9a:1e:1e:dc:fb:c9:e3:ee:25:08:d1:1a:84:
9f:3d:40:df:47:45:2b:76:f8:0e:7c:36:2b:ac:70:
0e:ca:c9:0c:35:c1:92:73:e6:e2:b9:b2:da:53:98:
7e:31:40:c3:6b:7a:42:20:92:7d:82:6a:00:02:aa:
fe:43:af:61:c8:c7:a5:b4:2c:63:d0:02:c0:53:13:
eb:f8:60:cb:e6:8c:95:14:35:a3:85:8f:9e:d6:60:
47:eb:ce:94:55:fb:56:89:50:a8:73:37:a3:df:bf:
37:f3:94:90:8f:5f:21:5b:cf:86:64:0c:18:8b:31:
70:fd:fa:50:80:f6:6c:db:8e:47:51:dd:ba:57:19:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:7E:2C:4E:5B:5C:7E:C7:4E:C6:4C:C0:48:F6:AB:1C:12:77:18
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e5:d8:c4:23:33:03:30:fe:13:e3:86:92:fb:f9:b9:62:57:
c9:9e:ac:f2:d1:4a:bd:61:12:f5:88:46:cc:9f:f2:3c:94:e3:
36:8f:a6:ed:1e:bb:a6:00:cb:54:9c:1a:c5:25:65:29:9b:1f:
a8:a1:c5:f8:10:b3:ab:b3:ee:ac:ee:1f:89:e6:fb:c4:63:4c:
1c:ef:ee:e6:b7:c9:1c:0b:eb:ec:54:e4:60:c2:5e:e1:7e:a9:
07:ac:36:0f:b1:79:cb:71:55:56:3d:06:21:17:29:80:51:36:
04:58:f2:e8:e0:9c:91:77:f7:f0:26:bd:de:7f:c5:01:44:ce:
16:9f:6d:20:1d:70:cd:27:19:01:40:4c:b4:ca:23:92:1f:e7:
93:1b:67:2a:74:7d:43:15:0c:06:7c:a0:40:94:92:72:1d:53:
e4:cc:cf:be:7b:30:7e:df:a1:04:94:28:fa:2b:e8:3e:21:28:
ee:70:cb:97:e3:79:a2:06:02:aa:59:ae:2b:89:b0:ca:e0:82:
39:5a:a9:8b:b7:95:61:32:77:75:84:d9:48:39:6d:86:c2:5a:
de:dd:92:9c:87:56:69:0c:81:c9:17:f8:ef:78:8f:17:d2:d7:
c5:87:6f:85:f3:b3:47:93:1a:67:fc:9c:74:95:50:5b:48:48:
5f:f1:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:19 2026 by rpki-client