Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier: 0fGVCjsikLBW+7P3fPZB8NikXefMgsZRjklYSRKKLt0=
Subject key identifier: 98:40:16:5E:1C:B4:3B:D7:F5:90:6A:8F:0F:7D:DF:C7:EE:20:3F:BA
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial: 01A0E92E47625A06A10B472B845CA179138E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number: 0358
Signing time: Mon 28 Sep 2026 18:01:59 +0000
Manifest this update: Mon 28 Sep 2026 18:01:59 +0000
Manifest next update: Tue 29 Sep 2026 18:01:59 +0000
Files and hashes: 1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: IUGvUE4apYQyj7TrUVHPzH1A0RCGADvSY/Uhhg9NxAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:47:62:5a:06:a1:0b:47:2b:84:5c:a1:79:13:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
Validity
Not Before: Sep 28 18:01:59 2026 GMT
Not After : Sep 29 18:01:59 2026 GMT
Subject: CN=9840165e1cb43bd7f5906a8f0f7ddfc7ee203fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:89:94:d5:02:f1:e1:8b:ff:79:ca:7b:e8:
f5:a5:3e:1e:60:b3:a6:d2:9a:ba:85:a8:6a:07:34:
25:21:fc:e3:3d:dc:33:ef:29:58:be:30:08:e6:d5:
41:29:e0:52:eb:50:6b:5f:15:4c:e1:e0:69:49:84:
8e:81:6e:0e:a1:98:b3:4b:36:30:47:99:33:86:2a:
4c:83:4a:ed:be:69:92:6b:5f:f4:67:f2:ab:14:f0:
57:98:a4:9c:20:b4:0b:36:81:0b:c8:dc:c5:d5:65:
cc:46:47:a9:d4:a9:a2:75:a0:f8:b2:da:14:98:54:
ab:6a:0b:f3:6e:d9:89:e7:8e:09:bb:57:e1:2f:d2:
53:72:c2:c5:cd:d7:63:9d:89:ac:e9:84:f9:f8:46:
cf:d3:20:ed:f4:6c:50:e7:7b:44:7b:b7:66:0e:e5:
55:07:d5:22:be:50:58:46:40:a7:67:a7:8f:6c:e2:
16:2c:64:1c:49:a4:59:41:a7:32:0c:5b:60:8b:50:
6e:08:61:f1:55:4d:bb:d1:96:a0:d8:26:b2:5d:6a:
d4:5a:11:d1:16:60:1b:ab:b6:e4:7a:1b:94:ab:bd:
05:7b:c1:35:bf:84:e8:4b:99:ec:25:ae:6e:85:46:
b9:73:6a:a6:22:6e:42:8a:cb:25:53:c8:6e:52:c9:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:16:5E:1C:B4:3B:D7:F5:90:6A:8F:0F:7D:DF:C7:EE:20:3F:BA
X509v3 Authority Key Identifier:
keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f9:0c:79:b1:24:58:e7:b8:59:dc:88:c5:fb:1e:3b:4a:37:
61:03:00:8e:db:35:86:97:10:bc:49:42:0b:13:3a:66:67:1b:
e7:fd:7b:60:04:21:9f:ea:a1:a6:f9:a1:c2:33:df:b2:c5:d7:
68:09:7f:42:48:00:02:2e:00:c8:e7:5c:85:e1:4f:c0:cd:34:
a4:8f:93:59:1e:d1:1a:98:84:2c:9f:70:97:a9:9a:b8:d9:26:
b9:9c:e5:d4:f7:83:fa:29:8c:0f:c8:15:c4:6b:03:09:cc:8e:
26:5a:4b:44:a6:cb:15:ef:a2:a2:a7:fa:58:d8:25:23:cd:72:
0c:20:bd:ef:cd:ee:ff:b0:b6:8f:89:a2:b4:6d:4f:8a:19:2b:
bc:38:7d:b0:81:01:b5:3a:58:c6:5e:e3:c4:be:0e:a8:fd:aa:
6e:87:e9:04:84:b3:c8:59:41:e6:6d:1a:19:8a:ea:7a:16:97:
b8:ac:13:e3:ec:27:34:3f:7c:ab:87:37:2f:db:a4:38:33:a5:
30:6b:9b:63:95:9d:6a:cf:12:47:3f:87:52:8f:3c:78:81:fa:
62:96:51:19:7a:c9:4c:a8:5c:a5:b6:7e:8b:3f:c6:cc:bb:7c:
40:8b:ce:f3:49:ed:da:d6:bb:90:9d:25:9b:4b:ba:32:a1:d4:
d3:e9:cd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:34:16 2026 by rpki-client