Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
File: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft (raw, json)
Hash identifier: AcQZqIRhMEe6JevMzioMySegDmu8cQK23e+tPUqRSb0=
Subject key identifier: A7:F2:9E:65:48:29:55:C2:75:FA:EF:EA:C8:9A:DB:F9:BD:EB:C8:CA
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 019FAA1A105DDA69501202E46AA84E7BC8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
Manifest number: 018B
Signing time: Tue 28 Jul 2026 19:01:02 +0000
Manifest this update: Tue 28 Jul 2026 19:01:02 +0000
Manifest next update: Wed 29 Jul 2026 19:01:02 +0000
Files and hashes: 1: 7Nec0zgnRC0mgd2UCiQb57qGoQo.roa (hash: QAq0HQWlQiRt1izpzv0A0gRL3ce2Gd+6X/bnw4KM3nA=)
2: EqD5liyFpdPq2XLyZyti6Tv-BNE.roa (hash: 45CS/GD+FH3aynJbkHhA0cCnbCPZTt1kF44EBED09Gk=)
3: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl (hash: AT3DSpPy+l6NVI2Ztrbw3wttYRGQWRzz37WbuJPWRlY=)
4: ZUFhy3Q3TnBrOEV6oC_51srJdWY.roa (hash: 9diosIXqGs1+lYyW3HLA/DSBkni7soymXvUgQxb3AL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:10:5d:da:69:50:12:02:e4:6a:a8:4e:7b:c8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: Jul 28 19:01:02 2026 GMT
Not After : Jul 29 19:01:02 2026 GMT
Subject: CN=a7f29e65482955c275faefeac89adbf9bdebc8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:c7:77:1a:ba:8f:4f:6e:df:95:90:70:5a:
a8:19:5b:ad:1d:3c:0d:c9:09:1e:91:b8:7f:f3:59:
25:d0:89:b3:2e:47:8f:51:e9:59:a6:91:f9:3c:c7:
b3:1b:a1:3d:25:3b:05:2b:40:0d:a6:ff:5d:96:69:
ee:8a:d7:4d:6c:35:87:f7:ec:61:a2:9e:2a:9b:6f:
d9:2f:06:f8:e9:bd:0f:82:88:2f:0c:88:c8:4d:0e:
33:7c:30:8e:87:6c:4d:9a:e5:88:2a:c4:ee:b1:b2:
61:77:43:c6:e0:a3:47:76:90:6c:be:88:3b:de:2c:
25:48:e3:39:fc:10:9d:52:fd:8d:10:ba:92:4c:82:
86:9e:7d:87:d8:dd:67:f3:ba:26:12:55:6f:fc:64:
d0:36:4f:8e:d2:c6:c5:07:aa:72:19:22:98:29:65:
fc:52:8c:ea:78:4c:35:8e:5b:ee:9e:7d:59:fc:2e:
45:a6:0d:40:f5:e7:3a:5d:e3:37:ac:7c:c3:7d:9b:
51:6d:75:fb:3d:0f:0c:eb:56:b6:a1:1d:23:c4:77:
cd:28:71:be:90:87:7c:a6:53:d3:53:e3:71:32:a2:
6d:16:ce:69:4e:8a:4a:dc:66:a1:42:8b:0a:54:70:
70:29:96:42:8a:e5:46:1f:7a:5e:56:85:f0:05:cc:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:9E:65:48:29:55:C2:75:FA:EF:EA:C8:9A:DB:F9:BD:EB:C8:CA
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e3:7d:59:3e:2a:a8:41:6e:40:79:d8:98:dd:8c:a9:d7:52:
b9:a0:8d:94:b3:cf:3c:70:04:5c:2e:26:09:df:b9:ac:2e:f4:
15:a6:b1:e4:d2:d7:63:9e:60:5f:bf:8c:ab:6b:ce:62:3e:28:
37:e8:5e:90:7b:f4:a5:c7:d2:0f:9a:c8:73:55:0c:2e:25:65:
8a:78:47:b0:d3:7e:9f:d2:66:d5:46:fd:c8:c3:70:95:d2:25:
47:cb:11:63:84:84:9e:39:09:32:3d:05:35:9c:76:f0:0d:f6:
09:55:9f:88:ca:34:a5:ac:46:49:e9:66:73:d5:74:e7:28:33:
e1:c7:98:d1:c8:0d:11:bd:d9:b6:1b:e3:95:99:ec:e5:97:b5:
4e:5b:a7:1e:92:02:fa:79:58:48:41:d2:14:a3:03:94:90:c4:
3e:07:b5:95:39:0e:1f:5e:fe:d5:67:48:da:eb:ea:c1:10:a2:
2f:fe:48:8c:02:58:85:aa:dd:f7:f8:a9:ee:74:a1:d1:02:17:
ab:ca:7e:47:b7:89:e1:e2:0d:65:2d:84:8f:a1:48:ae:2f:29:
b1:f8:93:ab:22:cf:ec:8d:20:c6:15:f5:05:48:cd:d4:71:5d:
e2:81:56:db:fd:77:47:a8:82:f3:fc:55:b2:5f:d5:b0:ee:62:
5e:6b:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:54 2026 by rpki-client