Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File: mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier: oXAgIYPbxV8o48mPICD91Wl3M5PZ1UdbxZY/6ZfPJSg=
Subject key identifier: EA:0E:0E:03:09:8B:13:BF:90:EC:57:FD:59:0D:8B:9B:99:A4:03:EF
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer: /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial: 019D9818B11CCCB5876954C3ABE3D1274C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number: 66
Signing time: Thu 16 Apr 2026 21:00:48 +0000
Manifest this update: Thu 16 Apr 2026 21:00:48 +0000
Manifest next update: Fri 17 Apr 2026 21:00:48 +0000
Files and hashes: 1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: h4NVZiWzZTA4q2MIWQalxvEaIzCCcUouiSelo/iMczg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b1:1c:cc:b5:87:69:54:c3:ab:e3:d1:27:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Validity
Not Before: Apr 16 21:00:48 2026 GMT
Not After : Apr 17 21:00:48 2026 GMT
Subject: CN=ea0e0e03098b13bf90ec57fd590d8b9b99a403ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:b6:24:b4:76:bc:e3:c6:7b:f9:50:35:72:
54:85:d7:97:c8:48:1b:6f:92:87:3e:9c:70:7c:b2:
a4:97:40:de:6e:d4:71:87:de:92:99:05:31:8b:cb:
05:dc:28:93:fb:9e:ed:c7:62:fd:ec:d0:85:c1:84:
cd:ed:56:2f:5b:da:6a:b1:5f:06:5c:6e:f1:35:99:
02:1f:68:45:0b:a2:b6:21:ce:79:31:b3:21:ef:a8:
4b:b8:7a:6a:f2:92:b6:24:83:97:6f:dd:64:f1:2a:
d8:f3:30:dc:12:ab:0d:6e:07:d8:18:07:fd:d3:e4:
60:41:ba:9f:c9:47:6c:3c:0d:0f:6c:62:7f:8b:fa:
2c:2a:e2:a9:40:e2:df:30:1d:6d:8d:ce:d5:1e:e8:
12:4c:58:8e:5d:c3:17:46:de:d6:e8:54:78:ce:b7:
ac:02:41:1a:dd:e5:b9:91:09:df:57:31:90:63:53:
af:7e:77:7e:bc:53:27:0d:fb:9c:d7:5e:90:b5:4b:
01:b8:80:8b:65:ee:01:ae:ee:80:a2:a1:67:8a:8b:
c7:0a:82:f8:01:07:1e:ae:35:f3:7d:59:ee:5b:23:
a0:89:97:79:9b:f8:7c:57:e9:c4:fc:b0:3f:83:1f:
bf:a1:12:9a:d8:e9:03:a9:50:de:44:5d:0c:44:16:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:0E:03:09:8B:13:BF:90:EC:57:FD:59:0D:8B:9B:99:A4:03:EF
X509v3 Authority Key Identifier:
keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:08:6c:29:38:d8:f9:da:dc:4a:93:bb:d8:7b:a4:f4:64:
04:2c:41:84:03:b4:a4:60:64:49:9a:39:32:c6:df:cb:66:75:
91:4c:e9:e2:cd:57:7b:14:23:1c:9e:fb:4d:d4:8f:4f:00:26:
49:40:8d:15:9f:da:22:46:7b:2f:10:1b:57:50:69:6e:a8:1b:
67:02:9a:19:94:6c:d7:93:23:e1:77:32:b0:46:e4:0b:90:7a:
64:b0:08:7c:e4:d8:6a:08:e5:4f:4c:59:f9:86:c2:3f:25:14:
21:4e:62:d4:12:ce:65:cb:65:86:77:c7:50:4c:6f:14:b4:77:
19:e1:91:58:2c:9e:c0:75:e8:65:99:72:7f:d5:e5:98:74:8f:
42:21:77:c4:0e:88:42:66:71:08:3e:82:4f:e8:cc:99:a0:2f:
85:04:5e:63:d1:f3:32:1d:a8:39:d3:32:bd:e8:09:65:f5:bc:
a0:01:dd:7a:f6:aa:9f:ff:5a:fa:51:c4:1b:e6:72:5a:e7:90:
e0:46:f8:87:c1:e2:34:86:a9:37:f0:32:d8:db:b6:b3:5e:88:
87:0c:ee:81:b2:63:50:38:ad:27:55:53:f8:79:66:fe:a0:7b:
d1:1e:15:1d:95:ce:07:89:0b:a5:25:ca:19:76:ff:91:17:0f:
0d:a7:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:18 2026 by rpki-client