Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: kJLQga2+cxCzKoNzm5O3Fc8jNnz1ZpENMLX0qEEZm5o=
Subject key identifier: 93:EC:1A:F6:7C:51:52:FB:AA:C6:04:82:76:2B:62:AD:05:02:0B:C2
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019CAA8FAA390B5DDF6E02249CB184BFE5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 0772
Signing time: Sun 01 Mar 2026 18:01:07 +0000
Manifest this update: Sun 01 Mar 2026 18:01:07 +0000
Manifest next update: Mon 02 Mar 2026 18:01:07 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: uK6+4347niWhbZtxE23fH+kgc6Z3rFKysQxvYwyjXgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:aa:39:0b:5d:df:6e:02:24:9c:b1:84:bf:e5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Mar 1 18:01:07 2026 GMT
Not After : Mar 2 18:01:07 2026 GMT
Subject: CN=93ec1af67c5152fbaac60482762b62ad05020bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:b0:61:7b:56:6e:e8:38:28:fa:ba:ec:ad:
cd:99:7f:f7:2f:00:6c:63:76:4e:60:bd:a2:11:a0:
83:c6:5a:38:ed:6d:56:30:5f:25:ca:1d:0b:f3:85:
2d:58:26:13:8a:e6:13:b2:a9:eb:54:cb:74:13:e7:
51:e9:fb:a2:d9:69:b9:db:b6:8c:f5:b8:49:1e:d1:
f2:97:e4:4a:58:fc:4d:90:88:97:1c:c5:2e:a8:06:
f6:10:3c:3a:0f:0d:1e:d6:6b:d8:f2:cf:c3:4e:e1:
93:b2:5d:3f:08:9f:12:04:e6:f6:21:7c:8a:d0:8c:
41:2b:40:2a:e3:e6:d6:a2:49:fa:48:c1:f9:3a:66:
6c:67:d7:62:54:94:46:97:60:60:1c:ac:a3:c5:07:
f0:78:dc:6e:3e:28:4e:99:a4:3d:70:09:68:9b:08:
03:3d:f2:a0:fa:e9:53:b1:90:ac:62:a3:89:89:36:
e5:8d:bc:ca:a3:a5:1f:19:93:ff:b3:6a:46:ae:a0:
8c:47:f4:35:e6:63:67:5c:62:0e:e3:36:23:c1:87:
96:2d:a7:ff:12:1f:63:ea:03:e0:b9:01:87:69:9c:
37:06:e2:85:56:ca:2b:d9:6b:e3:fc:1a:83:6e:e4:
f5:c1:e1:4a:e4:00:c8:38:5c:25:31:ec:bf:0e:37:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:1A:F6:7C:51:52:FB:AA:C6:04:82:76:2B:62:AD:05:02:0B:C2
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ea:98:a6:1d:3e:9e:c8:e3:01:39:57:39:19:70:fe:76:81:
ff:36:7a:bd:c3:30:41:16:26:a1:a5:a8:8c:02:c1:eb:6a:93:
ca:71:d5:b5:4d:89:5f:e0:29:36:5f:ac:a6:9e:2b:55:a2:99:
f5:11:37:5b:1b:0f:c8:e3:0a:18:4c:49:dc:ae:00:43:d3:95:
b3:80:17:c3:7a:b7:7a:a3:36:b0:29:b8:72:99:e7:10:f3:f4:
ff:4c:aa:26:08:96:6e:77:1d:eb:8e:ad:e6:ed:5c:f2:47:a1:
57:c3:a3:ed:90:16:f3:0c:26:6c:4f:e4:4a:e6:90:a1:b1:3d:
5e:ae:9b:02:c7:23:01:63:b3:75:5e:dc:b5:3e:01:ff:ab:f3:
85:5c:48:9c:93:17:fe:a8:cb:df:ca:9f:29:e2:7a:a3:85:ff:
3c:0c:c2:24:01:67:9e:c3:83:59:b9:b1:a3:75:2b:0b:31:ef:
3b:cb:6f:bb:77:b9:ca:28:66:b0:7d:73:07:b1:f5:ee:98:b8:
fe:99:3b:7e:3b:23:a7:83:55:27:28:ce:fd:57:3e:c4:bb:0f:
47:86:60:03:b7:ea:40:2b:92:47:8b:ad:23:1a:ec:8f:72:6e:
d0:6d:36:bc:f1:bb:0b:e9:2b:fd:f9:10:89:a5:49:9b:ef:f6:
7c:b5:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:54 2026 by rpki-client