Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File: mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier: icJ9DcsxWtC3RTAzoy6C7lt/fnjkPZTc4b5NwRyyHrE=
Subject key identifier: 2D:0F:3C:04:AA:71:17:7C:F4:E1:68:89:00:6F:93:F7:25:E9:3D:93
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer: /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial: 01A0C8FD007625DCD6F78F3987321FE2C67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number: 020D
Signing time: Tue 22 Sep 2026 12:00:18 +0000
Manifest this update: Tue 22 Sep 2026 12:00:18 +0000
Manifest next update: Wed 23 Sep 2026 12:00:18 +0000
Files and hashes: 1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: V12hZIwlUpfFE2NVeGPR8Nog5XVU0vKBsD08S+Hg0Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:00:76:25:dc:d6:f7:8f:39:87:32:1f:e2:c6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Validity
Not Before: Sep 22 12:00:18 2026 GMT
Not After : Sep 23 12:00:18 2026 GMT
Subject: CN=2d0f3c04aa71177cf4e16889006f93f725e93d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:27:26:b4:c3:08:a0:c8:83:b5:df:d8:65:
31:f3:d2:3f:4b:fe:df:7d:b3:5b:12:82:d9:df:e6:
13:80:e0:8b:7b:c1:34:b3:8b:28:72:a0:e3:db:5b:
25:85:73:27:ff:0c:03:1e:99:0a:80:6f:9a:7b:f1:
77:29:0e:35:c5:46:9f:f3:0a:5e:7e:4e:87:87:c1:
63:06:0f:b7:c1:8d:8b:fd:3f:7c:47:76:7c:e1:77:
8c:56:d7:dd:21:c7:1b:fb:e0:57:af:b0:20:17:a7:
6c:70:1e:c8:75:eb:8d:aa:4e:28:fb:e0:32:cb:ea:
86:e6:70:b6:c7:b5:3e:19:8f:a2:b5:16:75:81:c4:
d0:e2:9c:ea:58:f7:df:40:8e:4e:82:97:30:a0:75:
63:fb:4b:e8:a7:6b:d2:62:e8:5c:98:ed:11:75:4b:
f7:28:b7:78:1a:ea:ec:bf:c0:1a:66:5b:06:8f:ed:
62:3e:e6:c1:8f:fa:98:c0:45:5f:bc:94:05:4f:2e:
57:91:27:26:b4:70:1e:33:26:e1:dc:55:33:d0:3c:
d4:6e:55:45:4a:f0:24:a1:a0:ba:f3:6f:68:af:6d:
c2:fb:8b:12:fa:f4:38:f3:cf:e7:3d:01:95:28:c4:
af:a0:c6:68:05:13:01:ab:dc:90:3f:4b:d7:c5:55:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0F:3C:04:AA:71:17:7C:F4:E1:68:89:00:6F:93:F7:25:E9:3D:93
X509v3 Authority Key Identifier:
keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:f8:97:aa:aa:1a:8e:be:d8:2c:b8:fc:90:e4:d3:2a:a3:
09:95:1a:d8:1a:8b:ad:39:3f:2e:81:a5:e6:95:59:02:96:e1:
d2:61:04:ea:13:6c:12:20:2f:19:fe:8b:ac:f9:2c:4f:d7:d8:
64:7f:43:05:12:48:f9:4a:0c:f9:b1:f9:be:53:4a:59:24:5e:
e5:98:ec:2c:1f:86:28:a5:fb:9f:7a:bb:26:18:5c:34:ad:4a:
f4:29:30:94:de:b4:77:2e:0e:d5:79:74:69:11:90:18:73:de:
43:e1:09:56:77:5f:ab:9a:f1:bf:7f:4e:d6:59:da:a8:a9:d0:
ca:b4:ff:f3:7c:24:41:78:b7:37:5d:e9:1b:df:d2:e0:78:c5:
68:b7:6d:9a:1d:86:37:35:65:b6:4e:a6:89:7e:83:d8:a5:d7:
d9:0d:11:6c:a1:85:6f:77:f6:25:43:da:ed:f5:46:e0:88:28:
a7:fb:ec:17:47:66:02:d2:1f:34:39:5b:f5:7e:cf:ca:ea:7e:
1d:cc:35:47:1f:cf:60:3a:c2:9c:68:bf:95:f7:5c:cd:2f:ba:
bd:56:ab:b8:5d:d0:06:10:05:3b:29:ce:5c:dd:5d:8a:b9:fa:
f8:46:a9:b8:0c:e1:03:fe:0a:0e:44:97:01:78:71:22:04:60:
8c:27:5f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:54:43 2026 by rpki-client