Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: 1YlhF4loKBBWMF4N4neIStdpFTWgfwXscJmE0tOXx4w=
Subject key identifier: 9E:D5:94:1D:74:8B:D5:77:7E:D9:79:AE:4B:8E:46:5C:56:A5:E7:B8
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 01A0F37AD8710E88F0B0CDC55E2D99E4FB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 09AA
Signing time: Wed 30 Sep 2026 18:01:49 +0000
Manifest this update: Wed 30 Sep 2026 18:01:49 +0000
Manifest next update: Thu 01 Oct 2026 18:01:49 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: XBhffLDyy3kmlvSsyotRYeKJ5+CnN3rRVLtrxryLub8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 18:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:7a:d8:71:0e:88:f0:b0:cd:c5:5e:2d:99:e4:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Sep 30 18:01:49 2026 GMT
Not After : Oct 1 18:01:49 2026 GMT
Subject: CN=9ed5941d748bd5777ed979ae4b8e465c56a5e7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:a0:06:91:7d:1f:b8:98:03:55:e9:d6:3b:
40:06:95:6f:0a:e4:19:47:6a:2d:c2:35:70:f2:13:
77:2f:9f:17:08:ec:40:fe:3e:00:e7:f5:cd:5f:b1:
6b:2e:18:93:26:9d:72:3e:30:fd:55:eb:29:60:2c:
ac:49:a5:92:df:e1:b3:ea:4c:3d:65:25:b3:6e:44:
93:62:07:91:55:08:00:f2:df:11:27:72:3b:8b:14:
09:a4:c1:a6:34:86:f2:1a:fa:8d:21:0b:fc:52:37:
b3:41:09:68:e8:4e:d6:a2:6a:9a:a1:78:8c:51:92:
66:f3:3d:a4:34:b7:db:10:f8:ea:6d:70:70:c5:d0:
86:96:19:1a:8b:d6:6e:ec:ed:2a:1c:02:42:85:4e:
ab:e2:ff:62:5d:69:c6:26:12:fb:f9:50:67:f9:b6:
03:27:a2:e1:89:78:80:8c:95:e4:35:a8:72:32:76:
ae:1b:55:4e:62:db:6e:25:fe:11:11:e9:4b:f1:f6:
8f:10:9d:a1:6a:1c:d8:42:4e:41:4c:93:41:4b:ee:
01:36:df:aa:14:ce:b6:93:b4:fd:28:e5:00:eb:6f:
2a:57:96:9f:ee:c2:fe:f3:35:58:49:b4:45:52:01:
af:4e:28:ee:96:70:55:af:bd:a3:d5:38:a0:29:cf:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:94:1D:74:8B:D5:77:7E:D9:79:AE:4B:8E:46:5C:56:A5:E7:B8
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:93:bc:c6:86:28:74:ba:78:a4:96:99:d7:1a:88:5d:23:39:
12:c9:88:3b:ae:bf:4f:47:77:f9:2f:8d:40:d7:c7:e3:6a:b9:
40:76:b9:9c:f0:aa:f5:de:6e:a3:18:00:7a:99:bd:6c:7f:f3:
2a:11:e1:d0:e7:8c:8b:29:4d:79:68:89:dc:9b:d2:5e:73:f3:
3f:d7:57:78:33:e9:1f:f6:70:e6:40:a1:1b:fe:4b:06:ff:28:
e0:e9:60:6b:d1:44:52:83:e2:a1:91:3a:6d:82:30:ac:f9:4a:
53:3f:2c:0c:15:52:ec:d1:5a:c2:74:02:97:ef:30:c2:71:cf:
92:78:26:e6:1d:3d:c6:58:ca:d0:99:c9:6a:03:c1:03:dc:23:
07:58:71:42:72:c2:6d:d8:50:68:c3:41:d5:f1:5d:ad:39:d9:
65:94:9c:de:65:90:f0:26:e7:c3:58:62:5c:06:ec:a0:07:ee:
fe:44:07:14:da:5c:c8:b4:16:b1:38:51:58:e7:27:df:46:f1:
d9:c3:ed:f3:cb:b6:4b:b1:bd:45:32:3c:f4:4e:6c:8e:86:8a:
48:76:06:ff:b8:ec:36:a8:4d:89:e9:3d:71:6a:fc:8d:a7:ba:
35:b9:31:32:45:b1:4e:26:79:66:25:42:b2:3a:b2:c4:7e:0d:
9d:37:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:59:06 2026 by rpki-client