Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: YbTLflp2C62n18Ok9KhgYt+GMccc/dkRRqgJPO2mJP0=
Subject key identifier: 49:1E:7C:47:C1:B4:FD:FB:4B:4C:70:81:DC:8A:5C:64:BE:A4:1F:EC
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 019FAD1B21CC8904AA6BC5E47B8286E47FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 0B05
Signing time: Wed 29 Jul 2026 09:01:04 +0000
Manifest this update: Wed 29 Jul 2026 09:01:04 +0000
Manifest next update: Thu 30 Jul 2026 09:01:04 +0000
Files and hashes: 1: FcGNPYwz5_J_IpZa2PQ-hVZxs3s.roa (hash: zBwo4xD9J4OLhTz0HKnWTIlad5vyr6fVYYxN7r1dvp8=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: 0hC0KaT2SadgIY4E06X0NrysrYE0YQldCudloEbK8mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:21:cc:89:04:aa:6b:c5:e4:7b:82:86:e4:7f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Jul 29 09:01:04 2026 GMT
Not After : Jul 30 09:01:04 2026 GMT
Subject: CN=491e7c47c1b4fdfb4b4c7081dc8a5c64bea41fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:b7:1b:dd:e1:5c:f7:4d:06:3a:90:88:ac:
e0:84:8b:ec:de:68:b0:df:0d:b7:96:9e:fd:c2:08:
b1:08:91:b0:7b:72:91:82:9b:43:55:79:59:e4:c4:
39:db:41:f6:e8:32:6d:c2:0c:93:8c:92:6b:e3:86:
04:9f:d1:43:29:71:d3:89:72:99:b2:21:b8:7b:77:
8c:3d:4b:e8:39:bf:f8:fc:4b:c7:4a:e9:b4:5d:ed:
69:a3:07:48:e5:c8:21:b6:6f:45:8a:f4:cd:81:d3:
a9:55:94:cb:17:f5:ab:7e:cc:08:63:da:f5:92:20:
7c:fd:ac:66:9c:cb:5d:c1:e5:7c:3f:6d:0d:17:5c:
cb:f6:fa:14:92:e8:82:a5:25:3d:3b:7c:44:a3:fb:
a9:73:a1:bf:34:39:2c:1a:1f:9c:81:3b:ed:aa:05:
bf:4a:6d:8c:df:af:d5:9e:f5:25:6e:07:ad:11:56:
d0:96:f2:48:63:6d:25:bb:59:13:9a:3b:9e:5d:57:
97:e1:7c:24:fc:3a:d2:e9:b4:33:6e:4b:2c:71:dc:
12:d5:3a:cc:ff:2e:f4:07:49:6e:95:d7:03:be:bb:
dc:b6:b7:2c:76:aa:67:57:40:13:dd:46:b6:d3:24:
21:74:fc:e8:5d:dd:0f:43:49:b1:f7:dd:5e:4c:74:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1E:7C:47:C1:B4:FD:FB:4B:4C:70:81:DC:8A:5C:64:BE:A4:1F:EC
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3b:31:91:4a:b7:ed:4a:e8:fe:bb:da:94:b9:eb:ee:33:03:
df:f3:99:75:3e:38:e8:42:10:1c:f6:da:3a:54:fb:3d:d6:65:
23:27:b3:ed:a5:a8:89:da:47:62:a4:15:be:32:a6:78:2e:82:
cb:4b:d3:bb:be:f3:6b:53:7a:fe:76:68:f4:db:de:88:a5:d0:
a5:bd:2e:75:17:d6:56:6a:e1:ca:47:7f:69:e1:21:c6:76:b5:
fe:51:29:89:13:5c:98:15:fa:9f:c3:a8:43:a8:39:fe:34:0e:
92:ac:0e:65:2a:69:e0:27:38:6b:b5:ed:68:aa:74:9a:55:fa:
61:43:9f:68:cf:54:c6:3b:c9:e1:56:2c:d0:09:02:6b:79:09:
c0:5d:ae:14:64:66:64:7e:69:a8:50:b7:5c:1b:d0:8a:07:c1:
2e:c3:4c:23:b1:ad:00:5d:53:7e:c7:08:12:5c:69:ed:a5:aa:
47:38:cb:6e:24:68:19:cd:c2:87:37:10:8d:5f:21:e8:0e:66:
ef:be:b9:6e:16:fb:5a:03:fb:a2:4f:e5:56:d8:09:1e:e4:57:
7a:79:81:08:3e:39:6a:0a:d4:3b:96:d9:b8:3e:c0:fe:37:8a:
e8:33:0c:a8:6f:e8:92:e2:82:74:40:75:83:8f:cf:55:30:05:
77:b3:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:07:23 2026 by rpki-client