Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: yUQZIy/7swiYPcqrdaEGs9l5gybA8BWZLutkPP5WohU=
Subject key identifier: C7:6F:E4:3E:BD:91:25:A0:68:19:13:5F:DC:82:2E:4F:A0:CF:D5:89
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019FAB2C3F0DE8E5E8E4A6E56B4F3BCDD25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 0900
Signing time: Wed 29 Jul 2026 00:00:31 +0000
Manifest this update: Wed 29 Jul 2026 00:00:31 +0000
Manifest next update: Thu 30 Jul 2026 00:00:31 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: WlW+Nzs1Yg15qL2HDEGc4c9QxuQpwZknt5C7R2dcaho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:3f:0d:e8:e5:e8:e4:a6:e5:6b:4f:3b:cd:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Jul 29 00:00:31 2026 GMT
Not After : Jul 30 00:00:31 2026 GMT
Subject: CN=c76fe43ebd9125a06819135fdc822e4fa0cfd589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:b0:56:09:7e:d6:e2:a2:4f:dc:87:48:d6:
b5:a3:ab:b2:cc:77:32:3b:87:99:64:ee:66:41:e2:
c6:0c:5e:94:86:ed:00:c1:09:da:2b:3f:37:38:d5:
06:e6:4a:61:e7:c6:ff:bd:59:1f:2d:8c:91:d7:eb:
00:cf:a8:bb:f9:93:46:2b:2d:4c:59:4e:b5:f7:b9:
7c:bf:2f:f8:e8:c5:28:2b:4b:8f:03:91:56:d0:0a:
46:56:8a:ac:f3:35:53:dc:92:c0:48:8a:2e:2a:a4:
df:fa:1e:33:a5:3b:b0:b0:98:82:d1:58:51:b0:0b:
3a:d0:0d:aa:bd:69:9f:e0:c6:dd:22:53:f7:12:f2:
fe:c2:60:c7:71:79:a6:bc:13:ca:60:98:76:f7:39:
dd:30:f3:5d:09:49:1e:d7:ca:f4:75:41:8c:86:19:
fa:22:44:ea:de:33:c2:5b:e2:7b:bb:f4:5a:60:7f:
3e:ab:4d:04:d8:68:60:6f:c1:f0:d6:97:6b:2d:47:
0e:af:40:09:33:a7:62:b9:58:fc:35:08:89:df:a0:
e7:46:94:68:60:c6:b5:61:b9:ba:9c:c0:1f:7e:37:
db:05:73:4a:6c:48:6d:df:83:33:65:be:4d:1b:3f:
16:f9:1e:a4:66:fe:c6:49:e5:da:d7:30:9a:b1:bd:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:E4:3E:BD:91:25:A0:68:19:13:5F:DC:82:2E:4F:A0:CF:D5:89
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:95:38:48:c2:20:85:22:d4:08:3a:e1:d7:9b:0e:f9:7e:02:
ca:92:88:a3:ee:e7:07:a6:15:8d:be:94:b4:81:1e:09:1b:ed:
a3:1a:b5:e5:6c:9f:c1:e0:ea:a2:a3:2c:3b:31:2f:41:fd:29:
92:28:3c:04:c7:a8:8a:f9:6d:03:76:bd:31:87:a0:93:1e:02:
37:bf:5f:e8:95:7f:70:0d:34:42:4a:15:a0:a0:a2:ef:65:6e:
08:65:f6:4a:13:29:71:f2:1e:7c:00:e9:7d:06:84:e0:3c:54:
b6:cf:35:4e:a6:6c:44:40:75:93:12:ae:48:23:31:1e:56:cf:
a5:c1:34:28:58:de:e1:8a:0d:d5:a1:8f:6d:ea:41:69:3b:d3:
0c:76:3f:48:38:f1:3d:2d:27:a4:7d:42:f9:15:09:47:51:03:
96:34:7a:05:eb:82:bd:20:ff:f9:98:56:00:c9:66:9d:80:48:
48:e5:ba:ec:95:84:10:36:e1:09:01:51:8e:1d:22:a6:da:80:
98:d9:59:88:a2:14:27:3c:80:13:77:d5:32:5a:91:ae:c6:2a:
fc:67:96:67:b9:fb:15:93:cd:e9:fc:dc:9b:4f:be:b3:cb:11:
9c:8d:34:ba:e8:9c:9e:85:80:f0:0c:df:12:ee:0a:0c:bd:88:
e9:45:45:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:21 2026 by rpki-client