Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: tZ9ix3iQAG4ibD4wSJxaFYHmmTBC8DN4dkPeguY3RrI=
Subject key identifier: 2B:DB:4D:A1:77:E0:D4:B3:1A:7A:E2:89:09:C3:30:F9:AB:78:BF:8C
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 01A13AEDF4743CA39A7AB43EF4DDCDEDFB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 1217
Signing time: Wed 14 Oct 2026 15:00:35 +0000
Manifest this update: Wed 14 Oct 2026 15:00:35 +0000
Manifest next update: Thu 15 Oct 2026 15:00:35 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: RrWQHsrqSbgWrKC6kASMxAKzhooLNtAAyuQTFJUZh0I=)
2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ed:f4:74:3c:a3:9a:7a:b4:3e:f4:dd:cd:ed:fb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Oct 14 15:00:35 2026 GMT
Not After : Oct 15 15:00:35 2026 GMT
Subject: CN=2bdb4da177e0d4b31a7ae28909c330f9ab78bf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:d2:11:bd:7e:09:45:c2:4a:1c:18:9a:c9:
ce:3b:a6:c4:39:9b:f6:65:c5:08:f5:31:6d:ac:e7:
fa:5b:3d:06:5f:c8:01:95:22:f3:e1:1d:99:1f:12:
c4:3e:61:ac:6b:f4:35:7c:1a:8b:7b:bc:d6:6c:5f:
ef:4f:f0:65:60:b8:b5:00:2f:d7:2a:0c:34:89:a7:
79:ef:55:6d:01:bd:eb:d3:6d:e3:06:d7:b2:8e:53:
9d:a5:9b:fc:91:f6:bd:f3:6b:f1:81:25:19:30:e5:
e7:ee:78:75:fe:8f:fc:07:d0:f7:54:12:07:ec:6f:
9c:e3:4c:5b:5b:56:5e:52:d4:43:39:e2:cf:2f:0c:
6d:73:38:ef:e7:47:83:f2:86:e3:ed:b7:a8:f5:77:
25:f4:47:47:35:1c:4f:56:c9:2a:36:e3:57:a0:a3:
0f:86:fc:19:11:aa:01:3c:bd:aa:34:e0:6f:6b:2d:
b1:eb:00:10:aa:9d:b6:b2:3d:a8:67:3e:17:b7:df:
d9:3d:c1:61:81:91:df:5b:66:6c:fa:96:7e:22:ad:
dc:e4:1d:26:7d:49:63:40:36:69:28:dd:06:e9:f8:
e7:0a:82:87:cd:b7:d9:22:26:db:7f:06:dd:dd:e0:
06:8a:15:48:41:6d:63:29:d1:b2:b2:5b:7e:0d:54:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:4D:A1:77:E0:D4:B3:1A:7A:E2:89:09:C3:30:F9:AB:78:BF:8C
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:31:4a:14:84:c4:cb:a0:20:55:2a:66:98:4f:58:0a:0a:
b7:1e:9e:57:14:79:ad:f8:63:ef:27:74:6c:72:af:2f:4b:7d:
fe:9a:b2:b0:34:84:0f:9d:da:61:3c:17:b2:dc:1e:9f:e9:b3:
cd:e3:86:4f:fb:f7:30:a7:b9:e2:1e:66:0a:25:f1:b3:01:47:
46:2f:e8:ff:d3:20:6d:db:7e:cc:de:12:97:4d:36:24:39:0c:
8c:85:c1:98:3d:4c:8a:99:c4:02:d0:21:33:4f:e1:9d:c0:78:
a1:dc:26:5b:56:7c:b1:dc:53:07:bb:6e:45:fd:24:17:e5:1d:
ce:b5:37:62:e8:39:8b:f2:d3:c2:59:6f:16:f9:5d:f7:db:33:
1f:03:3c:3c:23:6f:4d:51:e3:a3:49:4e:ba:87:4b:3f:0c:ba:
38:e1:34:d6:59:86:54:9b:5a:52:44:ed:07:9d:58:b4:2f:a1:
72:92:f9:77:18:92:8c:66:3e:bc:a5:0c:55:63:19:93:c9:a3:
d2:f6:1a:b6:bd:8b:cd:41:8a:17:39:4f:f1:fd:e4:b0:26:5a:
72:bc:ba:7e:0d:03:82:88:ac:0e:7c:43:e3:f9:5e:cf:19:ad:
4a:b9:ae:31:14:99:0f:a4:22:3b:23:11:01:7c:bd:b9:71:21:
96:b4:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:40:17 2026 by rpki-client