Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: xoBgFliodM1NQ/0O9x/VRuPnSvH2WQ9iCEfC+WI3qsQ=
Subject key identifier: BE:5E:16:54:8D:FE:AE:27:2B:76:B8:6D:D3:34:9F:0D:BB:30:50:94
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019EC17FF56352BAABF6ABCE0FC395D9F89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 0887
Signing time: Sat 13 Jun 2026 15:00:49 +0000
Manifest this update: Sat 13 Jun 2026 15:00:49 +0000
Manifest next update: Sun 14 Jun 2026 15:00:49 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: rKr3LKquZFe1Vw/Mo/qwajnfZxiMrrglL1PjeINz2ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:f5:63:52:ba:ab:f6:ab:ce:0f:c3:95:d9:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Jun 13 15:00:49 2026 GMT
Not After : Jun 14 15:00:49 2026 GMT
Subject: CN=be5e16548dfeae272b76b86dd3349f0dbb305094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:7a:96:07:1e:e2:24:90:e3:f0:38:e5:f4:
c3:6e:f9:4e:f7:43:21:2e:89:f8:52:c4:9a:30:b3:
30:7c:f4:16:a9:28:69:a8:51:a0:c8:6b:76:25:ac:
86:cd:d9:33:de:60:9d:8e:4b:fe:85:40:e3:db:05:
c0:a9:63:8b:8b:3a:7f:4a:06:46:16:5c:ee:b2:e3:
f1:6b:1a:c3:c9:4c:93:0e:2f:1d:8a:60:02:5c:f1:
f8:a7:80:b1:aa:09:82:ae:93:36:3c:d6:84:63:ed:
fa:bf:31:e3:0e:42:3a:ee:67:ae:c3:58:08:20:5b:
13:57:7f:92:bb:a1:70:75:29:d9:c5:4a:1e:46:2a:
aa:90:25:bc:b8:8b:85:1b:72:2e:0c:96:c3:c1:a5:
83:d5:20:62:6e:3d:8e:d1:a7:ef:cd:9d:eb:f9:31:
93:34:ff:2e:c6:6b:0a:72:46:b5:ca:d1:aa:95:db:
60:e3:22:50:da:a1:d9:39:bf:1d:f2:8c:22:48:de:
a9:a7:86:e3:03:e4:21:43:34:0d:6b:f2:f7:6d:c7:
c3:68:06:50:3b:35:cd:a4:12:f5:b0:79:96:2b:cc:
d4:e0:73:58:68:1e:da:29:51:56:aa:f3:02:53:7b:
ef:85:37:02:31:53:ce:75:8a:1b:1c:47:d1:db:42:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:16:54:8D:FE:AE:27:2B:76:B8:6D:D3:34:9F:0D:BB:30:50:94
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a8:60:3b:56:76:a6:83:eb:3c:d5:df:f7:32:ed:06:3a:d0:
5c:93:cd:df:dd:c4:56:49:33:b6:4e:c0:ab:6d:c2:a9:31:08:
ce:08:3e:8d:4f:d6:83:c7:51:ca:4e:b8:3c:7f:cd:20:04:03:
f6:83:a7:0b:3a:44:45:c9:36:3a:f2:ab:0b:66:fd:05:22:0d:
21:d1:79:32:cc:66:21:b0:1c:7b:12:83:67:f8:58:08:39:c6:
b1:78:b8:1f:20:9b:b1:83:39:26:56:c0:d3:6b:ce:c4:ae:f7:
a0:92:d2:4e:f4:cd:26:9d:f0:45:1b:ce:dd:d9:1f:61:72:e4:
36:ae:1f:e6:07:92:a7:7c:f7:45:ca:3a:64:3b:73:3b:96:fa:
23:44:98:13:92:f3:b0:ca:4d:cd:fc:89:39:f7:77:f9:06:d6:
3c:26:ec:83:13:93:0b:ff:58:68:85:8d:c4:c1:54:e3:80:73:
ce:7f:26:5a:7c:55:65:7c:03:1f:82:c0:b0:39:a2:3e:52:0f:
08:71:7e:b0:c6:18:68:73:89:20:15:e7:d5:48:cf:05:47:44:
c5:35:7a:f7:37:e8:d3:cb:51:16:6b:50:31:64:1d:f8:fe:8c:
ac:ff:3b:31:10:62:14:45:c1:bd:10:05:9f:7e:90:6f:68:d0:
22:8b:ec:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:49 2026 by rpki-client