Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: auIhiQ+c20hWradW+9kB7bRbjaQPpb+dT7YFsATmnk0=
Subject key identifier: 73:75:C2:19:B2:A9:15:9B:12:2E:65:D1:EA:4B:6D:95:46:0A:AC:67
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 019D9C9AB13A304A99CB6A46B4539B59ED21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 09F3
Signing time: Fri 17 Apr 2026 18:01:16 +0000
Manifest this update: Fri 17 Apr 2026 18:01:16 +0000
Manifest next update: Sat 18 Apr 2026 18:01:16 +0000
Files and hashes: 1: Kch5YnfnliI8NHiCA07xVEbQzV4.roa (hash: 6jE9VEbDYjIrbBsLXEa9CMfNyqfSxGZFUWK682Q2o9I=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: vtjJb/VfuMZNtdz0iObtXTDRUbo3kHyBo+p6DYH0IYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:b1:3a:30:4a:99:cb:6a:46:b4:53:9b:59:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Apr 17 18:01:16 2026 GMT
Not After : Apr 18 18:01:16 2026 GMT
Subject: CN=7375c219b2a9159b122e65d1ea4b6d95460aac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:9c:10:b7:70:8c:7d:11:43:d5:63:b2:d2:
4f:4d:a3:a1:ea:8c:1a:13:01:23:14:5e:ca:c4:df:
c4:02:73:1c:11:f6:3c:42:8b:d8:fa:bf:e3:b5:b2:
a3:bd:0c:75:6e:2c:65:d7:15:2d:af:f3:62:ee:df:
4f:80:06:b4:80:56:34:9f:7e:d9:35:23:22:08:03:
da:a3:26:25:92:a7:a5:40:02:02:2c:e0:ff:ff:ea:
09:6f:f9:d0:ab:27:4c:0f:35:e8:9c:b2:51:99:ad:
43:92:5d:2e:fd:74:3c:3d:a5:c9:b7:5a:5b:cb:dc:
f4:8f:78:c1:bb:55:cc:5c:75:0f:3e:db:3a:41:2c:
72:11:16:1f:d7:48:c5:54:d1:d4:4b:ad:0d:08:da:
60:6b:98:21:31:02:05:8d:48:0b:83:be:50:80:0c:
a6:70:80:ce:fe:f0:5a:77:57:49:32:bc:ea:4b:29:
a1:b3:59:b3:ba:19:9f:39:0b:9d:e5:3e:f0:90:13:
e9:10:40:ea:d0:70:ad:da:dd:69:9f:51:f5:03:a6:
99:0d:3b:03:aa:83:9b:45:06:9d:f4:e4:6c:6f:45:
8a:ef:03:1b:97:82:97:71:ca:84:ad:45:6f:99:d5:
2f:9f:04:cf:92:4a:74:23:ba:b1:75:6d:8b:ed:6c:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:75:C2:19:B2:A9:15:9B:12:2E:65:D1:EA:4B:6D:95:46:0A:AC:67
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:90:da:68:3b:9f:4b:77:df:af:de:29:ef:a3:87:93:3a:
e7:3e:d4:17:5c:b4:70:d7:73:f3:6c:01:bf:90:aa:3a:3f:aa:
e9:51:3d:cd:38:61:4b:86:88:cf:58:2e:46:3c:0d:f3:81:38:
62:14:a9:c4:2e:f6:8b:9f:f7:f8:24:60:4f:86:f0:b6:3b:be:
84:29:e7:05:f7:2e:90:05:1c:72:3b:51:9e:82:89:ff:24:7b:
00:07:c9:23:cc:3a:08:5b:5d:d9:61:56:60:9f:10:b1:ff:31:
7d:42:51:c5:b6:70:e8:e6:81:44:26:80:a5:1d:b4:bc:74:8f:
e3:4d:dd:7d:d7:86:be:79:9a:fb:e9:5c:b5:6c:8a:cf:34:09:
f0:35:5f:f9:da:e5:bc:8b:19:f6:bb:4f:ee:61:e2:66:75:df:
fc:03:0a:11:6b:c7:3b:b3:da:e1:44:26:a8:a5:72:a1:3e:df:
d0:85:ef:29:df:14:4a:ea:0a:ea:17:a3:27:02:1a:ef:26:e3:
c4:74:11:7c:e7:de:ec:63:3c:4f:74:0e:56:fb:42:f3:62:10:
28:b7:1d:da:29:70:06:bf:57:fa:f9:74:3d:26:13:55:60:c4:
bc:72:38:e3:f4:f9:f6:7f:91:0f:3a:e4:aa:ea:83:ae:92:08:
f4:4a:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:24 2026 by rpki-client