Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: u1z5GT2wWzRWupIXjJLht0UO+zk8dsXpTyxiJP+PaBU=
Subject key identifier: 55:7D:D4:60:C1:30:D3:A6:00:D9:76:E9:AD:75:F6:57:4D:FB:A4:54
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 01A0C28E318729EDAC4459C68C34C3889B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:01:33 +0000
Manifest this update: Mon 21 Sep 2026 06:01:33 +0000
Manifest next update: Tue 22 Sep 2026 06:01:33 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: kmQOhu5GIXtkKDf20X/noOyyjL/4kEpnE57o/t7uzKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:31:87:29:ed:ac:44:59:c6:8c:34:c3:88:9b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Sep 21 06:01:33 2026 GMT
Not After : Sep 22 06:01:33 2026 GMT
Subject: CN=557dd460c130d3a600d976e9ad75f6574dfba454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:8a:a6:a9:37:b7:0f:44:6a:c4:cf:8d:f6:
a4:34:a8:27:f0:3d:43:29:a1:f2:7c:56:85:9f:00:
62:51:06:a4:c9:ba:d7:96:a5:32:0c:fc:96:2b:2a:
70:22:c6:38:0c:da:06:2b:7b:d8:68:30:60:44:ba:
f5:57:5a:98:62:3b:0e:96:81:90:54:e2:9a:68:8e:
14:62:ee:3d:32:81:f9:0f:38:27:3e:96:33:1e:15:
b6:80:62:39:31:a0:4f:69:46:7e:79:07:ef:da:b5:
c7:8d:08:03:26:8f:2f:89:f3:e5:27:7f:4b:de:d3:
49:42:67:9d:26:38:37:5c:02:1d:23:af:c4:53:42:
14:cd:ba:b3:1f:27:c2:ec:7e:f6:e1:e7:b6:3f:ea:
94:cf:6f:a2:cb:0b:be:52:f6:92:63:e8:8f:e4:87:
36:46:ee:79:56:ac:9c:a8:04:ef:16:0d:42:c6:f4:
7a:63:af:ac:cd:f6:35:10:72:a6:7e:e6:53:6f:ad:
84:3e:2b:d2:50:68:de:a2:bb:c4:62:58:c0:a5:c9:
ba:66:bf:dc:d7:b7:11:cc:4c:88:e2:61:63:cf:f7:
13:62:10:85:9e:d7:49:2c:ec:60:b5:17:41:50:e5:
b1:8c:bd:cf:33:8e:31:af:89:32:a0:e4:fd:ff:7c:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7D:D4:60:C1:30:D3:A6:00:D9:76:E9:AD:75:F6:57:4D:FB:A4:54
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:07:11:9b:6d:58:2f:42:bc:3f:7c:ab:70:5e:c7:6a:79:02:
92:2b:62:d3:57:1f:ba:ee:af:2e:5f:ac:7c:87:02:d4:cf:23:
94:36:2d:06:39:82:80:5b:77:2c:5d:ef:6e:64:39:e6:4b:6e:
b6:22:5b:59:96:fc:0a:cd:b2:b5:66:a2:bd:b2:e4:dc:09:a3:
32:4b:06:59:9c:7c:bc:be:c3:ec:8a:39:e8:1c:75:0c:da:40:
4d:7c:ff:6f:d4:06:40:65:10:9f:60:e6:43:16:f2:52:a4:f2:
eb:13:81:36:6a:12:a2:75:7c:86:53:48:6c:45:ed:49:7e:88:
39:c4:f9:ce:2e:d4:90:08:3b:1d:5a:ed:b4:3e:17:a0:88:7a:
2b:ba:92:0b:19:08:11:c2:e1:11:2f:72:4a:72:a5:c7:dd:f3:
8d:b4:e4:b1:c1:68:ce:c6:61:1f:69:f9:47:6d:4f:5b:c7:9d:
f8:96:d0:3f:a7:7e:a2:86:c6:3e:f2:5e:38:e9:b4:4b:17:f8:
fa:f3:cf:9c:ac:06:40:38:bc:47:54:8c:ed:fd:27:ed:0f:9c:
6f:d5:81:03:fd:59:20:ee:85:a3:53:07:2d:18:53:b7:db:e4:
7e:66:0b:20:02:e8:a9:82:c8:7e:d5:51:b7:07:20:0f:29:4e:
63:35:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:30:12 2026 by rpki-client