Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: lAowCCOuZar6Q48omxpQPjiC4OupHr0g3Vluff1Jdtw=
Subject key identifier: 74:8D:7C:A6:54:40:2F:CA:BD:F7:E2:A1:B4:38:38:67:4A:57:EC:BF
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019CAA58E0D71529C51372CE4A6FEA497AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: MuK0yO2EDiETMioDuWGpSy4DPrM.roa (hash: 9Q7+RkAvvoGZfwpOAVIRZoNvbHTT/lKkQt6ZodDPSB0=)
2: af2JbsFaiF65db9s1Px-v45Smq8.roa (hash: SgjbbnkwbwDgclTeMfNjxj2r3waXIVgmYqV+oR+91Xc=)
3: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: 6dtuJ/pwwsaWBllNadJ3jtitmt1v3HqYxbO3fHDqAqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e0:d7:15:29:c5:13:72:ce:4a:6f:ea:49:7a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=748d7ca654402fcabdf7e2a1b43838674a57ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:e3:96:79:5b:56:55:b8:ea:4b:0c:71:a8:
83:99:cd:a4:bc:44:09:c4:15:77:62:d4:08:64:6c:
25:6c:8f:08:a0:82:94:a5:9e:9f:ba:6b:8c:99:e0:
16:ba:4c:ee:04:ea:b6:df:94:48:09:62:50:e9:20:
b9:71:ff:e1:c4:9f:fb:d4:bd:43:94:92:69:84:6b:
c0:da:29:23:86:e4:77:1e:ce:f3:68:e2:da:8c:1e:
47:d6:1d:9e:ab:df:ed:f7:25:7b:93:e2:b1:d3:c5:
24:1a:e7:cd:8a:ce:26:42:d0:7c:d2:01:a0:72:f2:
af:24:33:3a:7c:8c:37:d4:4c:06:fb:f0:8a:5f:34:
6f:35:c2:d3:ac:04:79:12:e0:fe:dc:73:d8:0e:e8:
84:6d:a7:fa:4d:7e:21:81:63:c0:18:b3:2a:af:80:
57:ee:7e:01:b5:71:8c:3c:80:11:f1:5e:c0:60:a9:
fd:de:34:dc:ff:45:d9:2c:25:7c:48:56:53:dd:18:
7c:3e:70:7b:1b:a7:6e:cc:61:69:14:1d:19:3f:99:
cd:04:31:65:75:45:93:8e:2d:b1:5c:07:0c:b0:01:
1f:7f:c4:7a:df:77:dc:4b:89:45:61:5b:b5:50:04:
b7:36:e2:57:74:da:12:76:7c:2f:64:a0:7f:fa:56:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8D:7C:A6:54:40:2F:CA:BD:F7:E2:A1:B4:38:38:67:4A:57:EC:BF
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:28:d0:fe:e4:6b:3b:2b:44:3d:25:7f:63:ba:48:f2:18:a7:
6f:10:ad:28:ba:be:39:f9:c4:ce:ba:5d:d0:e8:ef:d5:4d:7a:
95:14:31:04:4d:cd:cf:6b:d7:7c:4f:70:19:dc:e4:bf:ae:91:
14:39:05:f4:e3:d6:b9:c9:70:19:7d:cd:f8:5d:f6:43:4f:61:
6e:69:2f:00:3a:8f:7b:f2:3e:d0:cd:d3:4b:00:d5:e0:f0:a6:
32:d1:eb:14:21:13:a9:d4:3d:4c:d5:d7:50:e2:cc:b8:76:54:
ab:4a:43:0a:c8:f8:b2:0f:a3:d8:97:bb:0f:85:82:43:0d:e8:
e1:30:aa:32:2f:4b:17:e2:98:bc:99:1d:88:e3:08:c9:3b:b8:
6e:9a:2b:a1:3f:5e:a6:a9:85:99:ea:5d:b4:1e:28:a0:03:20:
6f:bf:c6:12:7d:39:b0:06:ed:39:cb:41:94:06:e9:14:81:c2:
c2:c7:4b:0c:ee:8f:d0:13:73:5d:2d:62:88:f1:6f:8b:4d:13:
83:55:50:77:d8:3f:8a:7b:0d:25:92:62:cd:45:46:ec:b2:06:
fb:50:c9:24:81:b8:cd:da:f9:e5:91:dd:d1:dd:47:45:35:dd:
66:ea:98:94:ce:8d:a3:72:1c:46:ef:0e:57:9c:de:ef:6e:65:
11:b9:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:21 2026 by rpki-client