Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: Gfy+mwH+quJPNirXQZVgUxdg2xasyIvA1GKkaHFjPg4=
Subject key identifier: 9E:98:31:BB:54:68:F5:E8:26:7D:7B:3C:63:FF:17:6D:71:7F:1C:CD
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 019CACEBD4A779155B4DBDFC30CADD8A0507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:01:02 +0000
Manifest this update: Mon 02 Mar 2026 05:01:02 +0000
Manifest next update: Tue 03 Mar 2026 05:01:02 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: g+CDd0I3vhb3o1R0wrMlDME6Pz2ULgCilEJjq7/Bh9c=)
2: f3tAelSfrjtbwXNkrU-p9qfZWxU.roa (hash: OShTtHN/eSOshwx4hclkGBY5i0hC3YPjort+nwJu9SM=)
3: kDiYDHMztIHYvDXXzL3WVBFRgRQ.roa (hash: 4/nnDK2ikVBeX90b+2r+JvM3VbUxHJhqZEDdUrk+hj8=)
4: lgASEf8e2wSRk9xbv_20wIJbXDM.roa (hash: OBNbGNbD7TSZJPMMT4UYmjERp8O1mPv9E5azwcAja4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d4:a7:79:15:5b:4d:bd:fc:30:ca:dd:8a:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Mar 2 05:01:02 2026 GMT
Not After : Mar 3 05:01:02 2026 GMT
Subject: CN=9e9831bb5468f5e8267d7b3c63ff176d717f1ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:b1:f1:7b:a4:e3:a0:4e:02:4c:0d:f5:23:
a1:52:21:6a:6c:e1:62:28:ed:6b:77:85:4b:46:52:
9c:76:38:20:10:8e:9c:1f:a9:e7:7b:7c:1a:bf:f6:
2b:a8:a7:2e:fb:a6:5a:0e:ec:59:a6:38:3b:40:44:
06:d2:9a:4d:89:48:2f:05:f5:26:f7:d4:e5:3d:b6:
d0:ba:85:16:37:6e:84:6d:60:6e:f6:57:e5:74:e2:
51:8f:af:9e:d6:02:7d:cc:6d:cc:a2:be:dc:6a:f8:
8f:a9:14:a0:10:c7:d1:d2:7e:c2:a6:0e:fc:57:1c:
b4:ff:46:2d:bd:33:13:d9:09:a7:2d:76:f8:3f:64:
d6:0a:24:3c:24:a1:c9:b2:c0:b5:9e:c2:f9:67:e9:
a9:05:3d:c8:f0:b1:64:21:c8:42:f7:18:16:90:ae:
eb:94:74:1b:6d:5f:a3:5c:1e:f1:48:6f:02:0c:08:
ed:48:7d:ec:4d:2c:d1:95:15:2e:5e:c8:90:4a:18:
7d:01:26:6a:ce:bc:31:bc:fd:1e:19:8f:77:4a:c6:
b8:1b:41:6e:06:21:e6:ac:75:f4:2b:0b:dc:15:21:
92:29:e1:04:92:60:eb:f6:91:39:bb:83:d8:a4:5d:
41:5f:0f:71:40:8e:16:70:98:69:4d:e7:f7:69:ca:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:31:BB:54:68:F5:E8:26:7D:7B:3C:63:FF:17:6D:71:7F:1C:CD
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:55:02:9a:23:ff:de:d2:be:e9:54:eb:5d:c5:00:8f:c0:7a:
43:3d:ff:f4:bf:da:a5:bf:ab:a9:80:8b:d8:a5:48:78:a8:ad:
5a:18:04:07:c7:8c:7a:f5:b7:82:a1:11:70:db:3a:65:e9:de:
6f:f3:8e:02:e9:ba:4d:3a:1f:1f:e7:29:b1:45:94:dc:0c:08:
eb:24:45:41:e2:d1:4c:a7:48:a5:47:42:21:d6:5c:f6:3d:a8:
1b:f4:c4:91:95:87:dc:3d:a0:47:b7:8a:5a:fe:73:0e:d7:10:
bd:c5:30:d2:28:ed:ca:3e:d6:28:0f:cd:71:df:fb:d8:e6:02:
06:42:bf:5b:13:ea:35:ca:b0:29:0c:4c:ef:96:db:44:b1:27:
5b:a7:d9:66:07:93:11:32:2b:fe:0d:1b:9f:b6:60:5d:91:40:
82:1c:a1:b1:01:65:8b:0a:b5:6f:ad:50:78:ea:62:8b:0b:4e:
cb:58:73:47:06:06:0a:d4:f9:9f:fd:21:c3:14:8f:5e:f8:2e:
23:c9:b1:89:01:1c:92:4f:65:7e:aa:ae:61:74:8b:41:55:6a:
91:e3:80:3b:be:dd:a8:6a:f7:7b:16:20:30:3d:86:fd:04:cb:
f0:e8:25:14:ef:31:d4:d7:d5:5e:cf:5e:d5:f3:13:5c:57:31:
98:43:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:51 2026 by rpki-client