Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: hJIzBmFoLBVyI6RKt5NGPJFWBt2Mb2Fz4ZefqKJ7Amc=
Subject key identifier: 22:E0:7C:4C:3A:19:C5:32:14:D7:E0:02:8A:A7:B0:89:4B:1F:70:60
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 01A0CA46FA7D609208FB5E80370A6713E0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:44 +0000
Manifest this update: Tue 22 Sep 2026 18:00:44 +0000
Manifest next update: Wed 23 Sep 2026 18:00:44 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: uJuHb5SIUpEJ2prwjrieoa0bT6wUTJajp231jzQbU2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:fa:7d:60:92:08:fb:5e:80:37:0a:67:13:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Sep 22 18:00:44 2026 GMT
Not After : Sep 23 18:00:44 2026 GMT
Subject: CN=22e07c4c3a19c53214d7e0028aa7b0894b1f7060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:4d:88:fb:dd:d8:4f:8a:9e:b6:c4:bf:cf:
5f:07:7f:b8:5f:fb:c5:c0:dd:5a:54:e8:c7:7a:3b:
aa:03:0b:a5:56:81:4a:e5:9b:6c:44:24:9e:fa:f0:
21:e9:9a:76:74:2a:ff:c9:08:ad:c0:f1:d3:5e:fb:
af:65:91:de:63:5b:71:da:c9:65:18:3d:b0:e5:d3:
7c:63:12:7b:da:f7:2d:a5:0d:70:32:09:aa:03:89:
88:8e:0a:39:58:20:50:ce:95:1e:89:0b:a6:a0:38:
13:32:b1:ee:65:63:80:0a:35:53:79:5d:7a:7c:b2:
dc:c6:11:77:13:f1:cc:1a:20:f6:1d:de:a4:78:2b:
6f:26:26:bc:2f:76:22:b9:69:77:3f:0d:3a:b9:6d:
da:38:e8:55:9d:1b:d7:3c:2a:31:fb:d2:72:5b:2c:
a7:a4:1d:08:72:7e:a6:f6:d7:63:04:37:f5:a4:39:
67:8e:22:79:ca:0a:9a:0e:a0:c2:d8:6b:27:93:84:
92:68:4a:96:2f:52:6e:4d:24:fd:73:4b:ed:d3:78:
af:ca:19:49:ee:91:f1:5e:1a:b5:5d:dd:56:d3:a2:
a4:47:61:26:72:d1:16:1e:09:6a:7a:b1:5e:7b:62:
b3:7d:9c:0c:09:d5:a6:ec:fc:b4:cf:21:f4:36:87:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:7C:4C:3A:19:C5:32:14:D7:E0:02:8A:A7:B0:89:4B:1F:70:60
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:ad:97:4b:ea:61:9b:39:bc:93:72:37:29:bf:26:90:f1:
5e:e0:85:4f:cf:ec:fb:07:74:c2:2f:ce:04:b5:2e:7e:a5:73:
de:33:b5:6f:b6:47:48:48:f9:7d:76:3a:1f:07:bc:9e:3d:76:
08:bd:8a:10:b0:4b:14:43:ee:31:ad:88:c7:f6:00:84:2d:07:
08:d4:6a:a8:e8:c9:67:cc:f6:5d:99:92:30:8c:c4:6d:c1:d8:
54:40:bd:28:6a:80:9f:a5:d2:b2:15:b0:fc:76:80:c7:47:a5:
37:ee:45:bd:da:51:bf:91:fe:bf:d1:dd:bd:50:99:85:f1:fe:
59:a4:10:da:b5:f7:2d:fb:49:05:77:96:ff:e0:9c:64:4a:40:
a7:be:b4:24:79:bf:47:ab:63:07:77:e5:34:66:56:b4:60:3f:
bd:f7:29:85:13:4a:8d:44:2e:f8:c4:ce:84:6d:5e:ef:72:c7:
8c:88:cf:0b:f4:7e:3c:38:00:ae:64:04:c0:6a:d2:54:05:dc:
00:33:8b:0c:02:3b:15:5d:6e:2c:6e:1a:8b:69:05:bc:6f:99:
7e:66:3f:f2:af:cb:e0:ea:ea:a7:8c:fc:7f:3e:44:e9:51:da:
bf:37:f1:23:21:0e:df:ce:86:e0:9d:6d:c8:36:76:b2:88:0e:
f8:1d:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:59:14 2026 by rpki-client