Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: uUN6wEUQWigUptfpeTiiJxmbiN2BCntzbzCstjdHA08=
Subject key identifier: CB:E5:9A:89:6C:FF:C6:51:FE:CF:BA:17:34:32:E0:3B:D4:F6:66:64
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019D9A7516C3DD79F0FF51DDFF1760255FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:57 +0000
Manifest this update: Fri 17 Apr 2026 08:00:57 +0000
Manifest next update: Sat 18 Apr 2026 08:00:57 +0000
Files and hashes: 1: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: +J8dMXBngwB61tw0CGsTra1vLL83M3yY4fWEzX518+M=)
2: Y4Ztj_LvVduFmJe-S8DAGQ8C-Xw.roa (hash: PnJYtORtq7q9TMkof+95kidGWv4p60mPQyI6Q4NduWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:16:c3:dd:79:f0:ff:51:dd:ff:17:60:25:5f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Apr 17 08:00:57 2026 GMT
Not After : Apr 18 08:00:57 2026 GMT
Subject: CN=cbe59a896cffc651fecfba173432e03bd4f66664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:91:7d:fb:aa:17:90:35:bc:09:2c:31:cc:
62:d7:f1:62:90:c2:4f:82:90:89:08:d5:1a:57:17:
e7:58:a0:12:56:04:6e:f6:71:62:cc:6d:9e:7c:bf:
5c:28:c0:f8:1e:f3:fd:a2:c5:df:8e:a2:6b:22:57:
c3:fc:87:0e:00:98:a5:d5:16:ac:9f:0b:3e:b0:b1:
9c:2e:6f:b7:d4:68:5f:9b:af:b1:8c:c2:27:cc:3e:
bc:f4:a8:9b:d8:5e:a6:82:ca:55:7e:26:a8:19:d5:
90:04:8f:b3:49:d8:d3:8e:bd:38:dd:07:80:ce:6d:
82:4c:31:4e:e8:ad:a4:68:dd:e0:88:f9:7d:c5:8a:
55:66:02:04:fd:13:ee:09:fd:12:05:0d:8c:26:74:
7a:6c:90:ce:58:58:5c:18:89:b1:57:68:74:a7:c6:
ed:9b:31:7e:ba:b7:ab:a9:cd:24:2d:7d:9c:e8:19:
9a:89:90:5c:64:b1:99:12:a4:19:30:f3:58:78:e9:
24:11:d2:11:5c:7b:46:4c:df:34:4c:d0:7f:01:30:
30:2b:b7:61:06:cf:5d:40:95:8f:20:f0:b7:9a:05:
01:20:19:f3:5c:ee:9d:e9:f4:b6:e8:33:38:90:6d:
80:7b:73:d6:f6:89:f8:6e:a5:26:a8:a1:83:82:60:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:9A:89:6C:FF:C6:51:FE:CF:BA:17:34:32:E0:3B:D4:F6:66:64
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:28:ae:00:b0:e7:e8:df:95:9a:43:a4:fd:0d:b7:d0:c1:ac:
5e:49:1d:5c:0b:e6:4c:fb:10:76:35:b9:11:b5:71:62:d9:f4:
b9:2c:b2:a2:e3:e1:c9:df:c9:91:b2:f0:39:e4:0c:7f:bf:f8:
0b:33:06:39:5c:23:40:1c:7b:f3:34:7a:bd:a4:61:4a:d2:48:
49:c3:b1:3c:fc:d4:cb:24:e5:51:d7:87:a1:72:47:1d:91:76:
49:de:bb:32:0b:de:66:fa:d9:4f:53:f4:d5:e3:d7:4a:df:c6:
7f:03:57:17:d4:65:b7:b8:b0:77:3d:e4:ec:0a:14:3e:89:8e:
63:2b:2d:bf:dc:94:73:4f:3f:bd:55:41:40:d7:c7:f8:39:59:
a3:3f:51:54:88:8f:3d:0e:53:0a:9b:12:e8:f1:d9:e7:9e:a2:
a9:81:c2:14:c9:29:ee:4b:53:dc:b1:0b:ad:c5:9d:62:4e:e8:
01:80:f2:ce:cd:18:e9:c9:9b:a4:74:0f:67:3b:51:1d:8e:49:
bb:60:9c:06:dd:54:4d:67:33:57:db:fd:cd:a9:b2:68:1f:8d:
98:eb:f8:1a:c3:37:22:b5:81:33:3d:0e:f9:69:4f:3e:fb:bc:
e3:0f:b0:2e:be:43:a0:ab:d6:c5:f3:0d:b5:73:72:65:f0:25:
15:bf:20:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adRbD3Xnw/1Hd/xdgJV/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2VmNTVhZTc2ZDQyMjUwNGVhZTViMjA2NzI0ZDM2NDQz
MzExYzcwHhcNMjYwNDE3MDgwMDU3WhcNMjYwNDE4MDgwMDU3WjAzMTEwLwYDVQQD
EyhjYmU1OWE4OTZjZmZjNjUxZmVjZmJhMTczNDMyZTAzYmQ0ZjY2NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpGRffuqF5A1vAksMcxi1/FikMJP
gpCJCNUaVxfnWKASVgRu9nFizG2efL9cKMD4HvP9osXfjqJrIlfD/IcOAJil1Ras
nws+sLGcLm+31Ghfm6+xjMInzD689Kib2F6mgspVfiaoGdWQBI+zSdjTjr043QeA
zm2CTDFO6K2kaN3giPl9xYpVZgIE/RPuCf0SBQ2MJnR6bJDOWFhcGImxV2h0p8bt
mzF+urerqc0kLX2c6BmaiZBcZLGZEqQZMPNYeOkkEdIRXHtGTN80TNB/ATAwK7dh
Bs9dQJWPIPC3mgUBIBnzXO6d6fS26DM4kG2Ae3PW9on4bqUmqKGDgmBQZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvlmols/8ZR/s+6FzQy4DvU9mZkMB8GA1UdIwQY
MBaAFDF+9VrnbUIlBOrlsgZyTTZEMxHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAt
YzJjOWUyMzkzYTMyLzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAtYzJjOWUyMzkzYTMy
LzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCiuALDn
6N+VmkOk/Q230MGsXkkdXAvmTPsQdjW5EbVxYtn0uSyyouPhyd/JkbLwOeQMf7/4
CzMGOVwjQBx78zR6vaRhStJIScOxPPzUyyTlUdeHoXJHHZF2Sd67MgveZvrZT1P0
1ePXSt/GfwNXF9Rlt7iwdz3k7AoUPomOYystv9yUc08/vVVBQNfH+DlZoz9RVIiP
PQ5TCpsS6PHZ556iqYHCFMkp7ktT3LELrcWdYk7oAYDyzs0Y6cmbpHQPZztRHY5J
u2CcBt1UTWczV9v9zamyaB+NmOv4GsM3IrWBMz0O+WlPPvu84w+wLr5DoKvWxfMN
tXNyZfAlFb8gog==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:16 2026 by rpki-client