Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: QXdlcq3n8sn5ExjuV3vuNZp0+DU/OiGqLw/8OBaP0CQ=
Subject key identifier: FC:EB:D2:CE:86:E5:77:32:A8:D3:C8:9D:45:C2:F8:DF:5A:AB:6A:CA
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 019D9A750B3D3C9B06635BCEDFEFEF67D034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:54 +0000
Manifest this update: Fri 17 Apr 2026 08:00:54 +0000
Manifest next update: Sat 18 Apr 2026 08:00:54 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: Lcx4N0YUur8Q7oq9GkfnotsBjskI5TbIve2oFtEAbH8=)
2: f3tAelSfrjtbwXNkrU-p9qfZWxU.roa (hash: OShTtHN/eSOshwx4hclkGBY5i0hC3YPjort+nwJu9SM=)
3: kDiYDHMztIHYvDXXzL3WVBFRgRQ.roa (hash: 4/nnDK2ikVBeX90b+2r+JvM3VbUxHJhqZEDdUrk+hj8=)
4: lgASEf8e2wSRk9xbv_20wIJbXDM.roa (hash: OBNbGNbD7TSZJPMMT4UYmjERp8O1mPv9E5azwcAja4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0b:3d:3c:9b:06:63:5b:ce:df:ef:ef:67:d0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Apr 17 08:00:54 2026 GMT
Not After : Apr 18 08:00:54 2026 GMT
Subject: CN=fcebd2ce86e57732a8d3c89d45c2f8df5aab6aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:fe:91:6f:32:8c:b7:b8:38:65:77:19:d5:
3d:e7:5e:64:e0:ae:9d:fd:47:c4:04:5b:e9:1e:c6:
2d:af:6a:3d:76:68:95:ce:69:5e:cc:e7:bf:c2:45:
76:05:08:58:5d:b3:7c:14:b5:d2:6b:c3:b1:bf:ae:
7c:ad:2c:d2:08:22:55:e3:1b:73:40:2e:98:af:cb:
2a:c6:77:43:71:c2:1d:bb:3b:43:e7:d7:ca:17:a3:
58:ea:29:79:57:89:64:57:5a:06:20:1d:a3:c9:6e:
1a:9f:c4:5c:d9:ad:97:e6:73:38:6c:90:04:69:80:
d2:f5:10:2e:48:c6:d0:d7:2b:6e:52:1e:4b:db:81:
c4:e6:18:24:9a:ca:b6:67:66:fa:93:85:ea:52:60:
c8:b7:89:12:9b:ac:98:b1:c3:ca:64:50:ea:2f:98:
c5:15:50:1d:42:bd:93:50:2a:04:dc:59:b6:a9:2e:
2e:8c:95:51:06:fa:67:7c:fc:44:d1:3d:49:9e:96:
9d:01:42:1b:3b:88:b9:4c:4a:7f:23:fb:31:c5:e8:
d1:a7:99:2c:e3:46:a1:37:6e:c1:99:72:e7:24:f2:
1b:f8:b4:a4:2e:16:0c:b0:5e:ba:4e:8f:ef:70:fa:
c6:90:68:c0:57:27:86:f6:56:5c:dd:33:80:e3:e5:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EB:D2:CE:86:E5:77:32:A8:D3:C8:9D:45:C2:F8:DF:5A:AB:6A:CA
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:19:ee:32:f9:a7:9c:c8:d7:1f:6d:89:17:a7:9a:86:f4:7d:
1a:f7:9d:1c:dd:2e:b9:0a:bf:a6:bb:1b:7f:96:bd:cf:44:26:
ba:36:da:07:fb:e5:49:88:b5:a1:10:d1:21:58:ab:91:5b:79:
7e:c0:72:8a:ce:87:76:c7:cd:39:07:34:5f:52:cf:c1:01:94:
a7:01:8e:6a:25:de:aa:05:44:01:86:d8:1f:18:65:f4:27:39:
17:b6:fd:65:9d:94:a6:64:52:8e:62:95:58:84:3e:21:8c:00:
11:71:ad:5b:2f:5b:ad:a0:47:c7:d3:47:12:b1:07:68:9d:12:
92:41:b3:fa:d7:77:90:77:de:f6:b2:4f:e8:97:46:be:7c:0e:
da:d0:49:b0:89:b1:3a:36:5b:e9:ff:3e:3d:e4:94:90:2b:46:
6e:de:73:02:f2:14:b0:77:ec:fc:39:e5:88:12:1e:d7:2a:19:
dd:4b:ed:42:fd:21:c5:70:31:2f:8a:25:5a:d5:5a:ae:5e:35:
e1:0b:1e:35:fa:92:83:2d:61:92:29:ad:90:9d:09:5c:3e:23:
a9:bc:90:8d:61:5d:44:16:c4:24:63:1a:22:c3:a1:40:f5:4a:
30:74:49:50:1a:d4:f7:e4:c1:10:be:25:cb:d7:37:eb:49:77:
3c:67:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:11 2026 by rpki-client