Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
File: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft (raw, json)
Hash identifier: FPpqIzFwA4uoRYuiyaHtLHckdJMDwtU6S+JByqek1uo=
Subject key identifier: B4:AC:00:A9:5B:47:14:0E:3C:BA:55:84:55:CF:D4:53:72:69:0C:56
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 01A0C8FD2EBB4158D3EF7AAFE63E0D47900C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
Manifest number: 0220
Signing time: Tue 22 Sep 2026 12:00:30 +0000
Manifest this update: Tue 22 Sep 2026 12:00:30 +0000
Manifest next update: Wed 23 Sep 2026 12:00:30 +0000
Files and hashes: 1: 7Nec0zgnRC0mgd2UCiQb57qGoQo.roa (hash: QAq0HQWlQiRt1izpzv0A0gRL3ce2Gd+6X/bnw4KM3nA=)
2: EqD5liyFpdPq2XLyZyti6Tv-BNE.roa (hash: 45CS/GD+FH3aynJbkHhA0cCnbCPZTt1kF44EBED09Gk=)
3: IIzd337ndqahUTUYLMzPo6Cdln0.roa (hash: UWEgCoa1LHV7YeRQ9V+WSXpDfY1u+biM1IYHbQp0DpI=)
4: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl (hash: hIQ7uJYnBM15S2Uewfq7//4PF7MiFbD14UdwqmJy4uQ=)
5: ZUFhy3Q3TnBrOEV6oC_51srJdWY.roa (hash: 9diosIXqGs1+lYyW3HLA/DSBkni7soymXvUgQxb3AL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:2e:bb:41:58:d3:ef:7a:af:e6:3e:0d:47:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: Sep 22 12:00:30 2026 GMT
Not After : Sep 23 12:00:30 2026 GMT
Subject: CN=b4ac00a95b47140e3cba558455cfd45372690c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:77:1e:7d:d4:1b:55:a0:9b:7f:f2:79:9b:
81:f0:07:c5:f4:35:44:bc:74:95:02:5a:a0:a8:1d:
3e:1a:6e:d0:52:c3:96:ae:15:79:d5:9a:68:c5:a3:
7c:01:94:4e:57:6d:2a:37:d1:90:27:16:ca:48:93:
93:60:43:59:c5:e7:98:2b:95:07:57:b6:e9:bb:44:
b4:6c:00:82:5c:ae:3f:35:af:e3:c1:b3:78:51:50:
92:ce:7b:53:57:d3:ec:8e:90:55:a5:94:f1:57:8b:
e4:75:9e:0c:92:f4:66:d2:a8:b6:3c:f4:40:eb:fe:
be:d4:17:d1:4e:c1:05:a1:02:d7:43:bb:86:fc:8f:
90:20:fd:5b:97:51:13:93:d3:c1:e4:6e:f9:2b:30:
f1:c9:37:06:1b:c8:27:4e:15:9c:d0:62:5e:4c:9e:
db:0a:51:06:d6:6b:d7:ec:5f:bd:90:b9:f6:6b:19:
a5:65:a8:32:6f:ee:3b:3b:8f:74:c7:fa:d4:84:74:
8f:8d:b5:4a:08:92:eb:9b:b3:0b:d0:e6:a2:ff:82:
9d:77:a5:24:91:68:2d:a6:5f:ad:2e:68:99:13:b7:
c3:11:a8:b3:fc:cb:e3:24:32:1b:65:5f:fa:d7:8c:
fb:ac:ef:c9:a7:0d:fc:9d:e9:2b:e7:3b:29:ea:eb:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:00:A9:5B:47:14:0E:3C:BA:55:84:55:CF:D4:53:72:69:0C:56
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f4:21:e6:a2:81:bf:13:e3:41:3e:81:e1:7e:5a:49:ea:8a:
83:4f:77:69:18:22:86:07:47:29:a9:a4:46:e1:3c:28:70:45:
50:44:d1:09:a9:52:35:90:de:8f:f5:cd:1e:07:f3:19:fb:d3:
f7:8e:08:c0:42:42:2c:04:af:01:6b:72:c0:6a:ec:e3:22:4c:
df:f9:8a:a2:58:29:93:de:0d:01:79:22:e0:2d:c4:29:fc:53:
af:cb:f1:4a:06:5b:61:2e:17:3f:d3:4e:aa:8e:b5:93:0d:be:
aa:1e:31:e1:26:cd:e0:5d:df:25:c3:53:49:7b:20:28:50:03:
44:d8:63:63:4a:81:55:5b:7a:73:df:f7:a5:70:89:46:e6:e9:
9e:94:a2:a5:39:15:4b:f3:98:43:08:0c:d6:fa:ef:ae:88:81:
09:e6:99:e5:f9:04:ea:a5:14:6d:63:13:3a:cb:36:d6:7b:52:
96:a3:08:41:3b:51:4a:e2:22:42:a2:48:2f:26:4b:da:9c:b1:
ee:6e:d7:80:3b:b9:3f:80:a0:25:b8:ad:aa:dd:c6:cb:c6:be:
8c:e7:9e:c9:bd:82:10:48:1f:be:8a:0a:aa:fc:ea:61:27:b3:
15:0f:84:85:59:db:0e:03:92:38:c6:aa:8f:09:b3:86:61:68:
70:01:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:01:48 2026 by rpki-client