Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: aWxVZYLIa0j8hshNRvOvz+qyopXnV+PsDWLzRmgywCU=
Subject key identifier: 0E:DC:6D:A6:E7:5B:C0:97:E4:46:AF:D8:D1:84:68:FF:78:C8:22:17
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 019FA89A0C87A866431C9141AF9ACA5141B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:35 +0000
Manifest this update: Tue 28 Jul 2026 12:01:35 +0000
Manifest next update: Wed 29 Jul 2026 12:01:35 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: LpExUFkNtwfhyNP52KLhIWM/j0D+AnbTpVxBReMJohM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:0c:87:a8:66:43:1c:91:41:af:9a:ca:51:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Jul 28 12:01:35 2026 GMT
Not After : Jul 29 12:01:35 2026 GMT
Subject: CN=0edc6da6e75bc097e446afd8d18468ff78c82217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:07:f4:9e:e1:6f:44:1c:5d:cc:23:93:f9:
e2:21:c8:d5:5c:1e:7c:c4:67:a8:85:5f:4e:de:50:
58:9c:2d:cd:bb:0d:fe:15:9c:18:fb:da:67:aa:cd:
d7:5c:af:a6:ef:75:c2:8c:de:0f:54:ea:87:57:97:
1a:35:6f:a9:24:44:8a:48:ea:c2:bf:68:04:06:7a:
c8:d6:ab:2e:d6:66:16:2e:f3:08:3c:19:25:1d:f9:
92:94:87:ac:30:08:00:11:db:12:97:ad:ff:43:54:
b5:7b:21:3e:3f:db:a0:43:27:46:9a:44:40:12:4a:
ef:8b:d7:f8:e7:ac:d9:02:2b:dc:d7:8d:5b:7f:08:
77:9c:95:ea:4e:1c:ab:e5:7d:d2:4f:47:41:07:2a:
c0:55:a2:a4:19:4c:84:d1:6a:95:09:34:1a:5e:a6:
7d:77:f7:89:2c:4c:9b:fb:1e:71:bf:df:36:20:03:
f9:04:ac:e4:8c:b3:6e:8a:4d:5f:e7:aa:f3:fc:59:
ad:cb:af:07:db:f6:94:6b:11:b4:18:e5:d9:78:0a:
a4:ad:7f:a8:f1:9c:ba:bf:05:11:3e:13:e4:48:fa:
8a:4e:e5:97:40:d6:9e:7c:4f:dc:fa:26:3c:84:c1:
d0:40:88:dc:29:1c:bc:ea:f1:a9:d5:f3:a3:e3:1b:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:6D:A6:E7:5B:C0:97:E4:46:AF:D8:D1:84:68:FF:78:C8:22:17
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:bd:6c:5d:b1:7d:f9:26:5d:1c:2e:71:4c:06:39:7b:de:
86:2b:3c:82:9b:58:a1:4c:4f:09:16:aa:77:41:70:97:b5:6d:
d9:06:09:15:be:e0:dd:59:9d:86:fe:c7:80:18:23:36:85:70:
3e:25:2c:2b:f6:9c:00:e3:9a:4f:b7:e2:67:cb:4f:33:50:f9:
d3:a2:10:a6:f9:01:e7:c9:a8:0e:7f:d6:e7:34:14:9b:b6:82:
f2:52:67:0d:a3:ec:09:32:76:38:a7:97:c9:ed:d0:ee:bd:52:
b3:8b:68:5f:14:92:c9:0d:7a:85:d3:12:7b:08:a9:48:57:19:
9a:ac:ea:c2:3f:ea:1b:b6:bf:f1:47:9c:a3:80:e1:fc:59:e9:
87:c9:c9:29:f6:4c:3c:90:df:e1:14:ff:ae:6d:81:ea:bd:04:
af:c2:01:e1:11:61:d5:87:ca:a8:20:c9:ec:76:66:91:7d:9d:
14:ec:b5:9c:e1:3a:50:8d:87:fa:16:74:f8:5c:e4:7a:1e:ed:
ac:98:76:89:9f:d8:fb:01:fc:91:2d:69:f4:7a:9d:9f:31:36:
07:11:0f:79:35:d5:f1:1b:0b:90:ef:94:6e:c2:83:3d:05:07:
8c:2b:42:76:f5:a5:df:be:69:1d:49:5b:83:71:17:92:3b:bd:
6f:b0:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:03 2026 by rpki-client