Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier: ZWA5olQIdEwmMp1RM5jIUflza+6fV3ktSEeMTiz2SEI=
Subject key identifier: 3B:C9:29:92:E5:6D:4A:C7:F9:C9:D3:35:AB:16:56:A2:C0:78:E2:01
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial: 019CADC7712CCF1299F87DDAD8A7236BC9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number: 0127
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: W02EPvyDpGZof76IPcOwrmeGTJGjWYU896UOJJH8iGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:71:2c:cf:12:99:f8:7d:da:d8:a7:23:6b:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=3bc92992e56d4ac7f9c9d335ab1656a2c078e201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:13:37:a2:8e:c6:5a:2f:8a:d4:10:5e:ce:
b8:67:7b:86:c4:50:ad:2e:b8:cf:4c:57:19:e9:32:
fb:58:9a:0a:b3:5c:bc:de:c0:f7:d1:b4:7e:fc:1b:
05:29:c6:f3:b9:7c:ea:7b:79:07:d5:6b:ab:7f:f5:
bb:e8:37:5b:dc:3f:42:1a:e0:dc:dd:63:c2:03:23:
68:b8:34:44:e4:f4:b9:d1:6f:88:5d:20:fb:26:bd:
8c:97:60:0c:ec:4c:1d:f6:66:b3:f3:ac:f1:12:43:
49:06:f1:37:60:e2:ab:75:86:b2:4a:4b:34:bc:8f:
10:c5:45:67:43:b2:06:dc:ee:04:b1:b0:37:15:f0:
8a:dd:19:7e:bb:87:ae:cd:6c:c0:2e:0d:c8:81:34:
c4:55:f0:50:8f:69:01:b3:4f:37:58:c3:32:c9:86:
d9:73:ba:7b:d9:6a:e6:46:ad:43:4a:2e:3f:98:c8:
92:d1:20:0f:b0:8d:5b:f4:dd:e5:26:31:69:32:cb:
22:f3:c5:1d:03:f5:b7:67:7a:f3:63:37:12:6d:e5:
89:9d:c6:73:03:e9:8f:8d:2c:fb:d8:be:d2:9a:05:
95:0d:a3:33:da:fa:f5:2e:c5:5b:f2:0a:b8:45:0c:
26:74:0b:ed:d5:77:07:22:ea:cd:fd:52:43:8a:c3:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C9:29:92:E5:6D:4A:C7:F9:C9:D3:35:AB:16:56:A2:C0:78:E2:01
X509v3 Authority Key Identifier:
keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bb:50:b7:72:c6:c3:63:6b:31:2a:a5:cb:a5:5f:70:16:13:
b0:cc:ef:cb:65:1e:1c:54:cd:0b:a0:fd:4a:c3:98:a3:d3:45:
37:ba:6a:e5:a7:d8:7f:87:86:4a:fe:f2:02:92:d0:c0:6e:0f:
15:aa:23:85:b6:84:0e:6a:20:63:85:39:e6:0f:ec:4e:44:0e:
a0:bd:c7:16:af:cb:47:ce:2f:f2:fb:44:5f:9e:77:0d:ae:1f:
56:47:ce:a5:51:8e:8a:16:aa:ec:07:74:0d:e6:77:2b:57:7c:
03:1e:76:2a:34:7c:0e:a7:77:b9:26:b9:19:54:ec:dc:de:de:
86:e3:e0:b3:5c:34:72:05:37:d8:2f:d0:e6:19:6a:60:23:bd:
7c:f1:b8:f3:dd:5f:4f:fa:9e:f0:e4:8c:68:57:ec:c7:60:34:
1d:9b:68:ec:2f:b5:13:d9:57:17:55:10:6f:47:f1:de:12:63:
8c:86:d6:9b:8b:57:c0:97:8e:b0:52:7e:cf:59:50:3a:b5:24:
e8:c9:ad:99:d4:60:1b:30:78:e7:7d:49:14:c4:5a:8c:1d:a2:
a6:31:6e:fe:c5:48:54:03:27:d7:31:af:23:6f:84:53:6d:f9:
de:a1:02:c6:0f:a0:ad:5d:94:f3:e6:f0:ac:46:99:d3:29:8e:
d7:6c:3e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx3EszxKZ+H3a2Kcja8ndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2M4MjU4MTM0MzVmYjAxMTU0MzhlZTNmNjA3NjM3Y2Vi
ZDhlOGUwHhcNMjYwMzAyMDkwMDU0WhcNMjYwMzAzMDkwMDU0WjAzMTEwLwYDVQQD
EygzYmM5Mjk5MmU1NmQ0YWM3ZjljOWQzMzVhYjE2NTZhMmMwNzhlMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG0TN6KOxlovitQQXs64Z3uGxFCt
LrjPTFcZ6TL7WJoKs1y83sD30bR+/BsFKcbzuXzqe3kH1Wurf/W76Ddb3D9CGuDc
3WPCAyNouDRE5PS50W+IXSD7Jr2Ml2AM7Ewd9maz86zxEkNJBvE3YOKrdYaySks0
vI8QxUVnQ7IG3O4EsbA3FfCK3Rl+u4euzWzALg3IgTTEVfBQj2kBs083WMMyyYbZ
c7p72WrmRq1DSi4/mMiS0SAPsI1b9N3lJjFpMssi88UdA/W3Z3rzYzcSbeWJncZz
A+mPjSz72L7SmgWVDaMz2vr1LsVb8gq4RQwmdAvt1XcHIurN/VJDisPqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvJKZLlbUrH+cnTNasWVqLAeOIBMB8GA1UdIwQY
MBaAFJl8glgTQ1+wEVQ47j9gdjfOvY6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzIt
MjhmNzFhYmJhMDNhLzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzItMjhmNzFhYmJhMDNh
LzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbtQt3LG
w2NrMSqly6VfcBYTsMzvy2UeHFTNC6D9SsOYo9NFN7pq5afYf4eGSv7yApLQwG4P
FaojhbaEDmogY4U55g/sTkQOoL3HFq/LR84v8vtEX553Da4fVkfOpVGOihaq7Ad0
DeZ3K1d8Ax52KjR8Dqd3uSa5GVTs3N7ehuPgs1w0cgU32C/Q5hlqYCO9fPG4891f
T/qe8OSMaFfsx2A0HZto7C+1E9lXF1UQb0fx3hJjjIbWm4tXwJeOsFJ+z1lQOrUk
6MmtmdRgGzB4531JFMRajB2ipjFu/sVIVAMn1zGvI2+EU2353qECxg+grV2U8+bw
rEaZ0ymO12w+7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:25 2026 by rpki-client