Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: kxvTNzD85fnxk/usyw18OpgnXYQl2iPI/sM6SIeCWxo=
Subject key identifier: 03:12:F0:FA:3D:3A:11:68:5F:89:74:4D:66:79:B1:A1:22:C6:BC:C6
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019D99D086E324C31E5D83757B09E93B3AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: MuK0yO2EDiETMioDuWGpSy4DPrM.roa (hash: 9Q7+RkAvvoGZfwpOAVIRZoNvbHTT/lKkQt6ZodDPSB0=)
2: af2JbsFaiF65db9s1Px-v45Smq8.roa (hash: SgjbbnkwbwDgclTeMfNjxj2r3waXIVgmYqV+oR+91Xc=)
3: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: cFUL2PkVCtFT8LZmJ7X6UU3LJbXx6j/Zbu3TuYfO3Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:86:e3:24:c3:1e:5d:83:75:7b:09:e9:3b:3a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=0312f0fa3d3a11685f89744d6679b1a122c6bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:98:d0:6e:b3:18:22:60:1b:2e:bd:cc:3b:
92:cc:49:eb:94:c9:e4:ce:cc:f6:5a:97:12:00:af:
69:42:29:05:b3:12:0a:87:e3:1a:4a:1c:18:f0:1f:
e5:b9:14:9a:21:60:81:06:46:c4:1a:13:ae:7e:25:
32:1c:f2:9a:54:2a:5c:24:98:e8:07:d7:78:c5:36:
4c:d5:69:46:c0:3e:e5:e4:88:80:2d:12:fe:d4:02:
bc:b9:44:8b:b3:13:5c:66:e2:e9:f7:19:cd:2e:1c:
53:f4:97:ea:6c:37:4d:ac:ae:4b:04:e2:b3:54:ec:
d4:55:4c:e4:78:3c:64:b0:96:8e:b5:43:c6:6b:ca:
47:06:79:c5:53:33:e1:7a:67:c4:7e:e2:55:43:2c:
f7:8d:34:ab:9e:bc:f9:bc:e6:20:60:70:1b:9e:43:
a0:fb:b4:f7:4a:2d:1a:b0:cb:94:69:7d:68:4e:2c:
e3:9c:8c:ca:11:a3:28:e4:42:0f:e2:ff:b7:62:f4:
86:8d:c5:20:27:c9:38:f4:3d:49:bf:06:36:f5:ac:
4f:db:42:e2:3f:63:0c:88:90:1d:fa:fb:a7:28:5c:
43:18:71:52:24:36:c7:bc:b7:95:ad:93:54:9c:84:
d5:7f:fe:92:39:f0:c0:19:bd:d8:38:b1:e3:3f:19:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:12:F0:FA:3D:3A:11:68:5F:89:74:4D:66:79:B1:A1:22:C6:BC:C6
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ff:c2:b0:e7:ca:9b:43:23:3f:1f:95:77:ed:b7:b9:1b:f3:
20:03:75:15:b6:4d:a3:7a:03:56:55:11:4c:31:81:02:76:42:
a9:bd:3b:54:d9:02:a2:1f:9b:c5:d2:92:3e:6c:9a:12:b8:f0:
16:e8:5b:21:5e:c2:6d:3d:da:7c:cd:2a:0b:fd:72:7a:91:a6:
9a:c9:47:b1:66:a8:d2:ba:6c:48:80:ed:48:f4:07:31:3d:ed:
ba:88:ce:53:cb:5a:36:a3:66:dc:3d:f5:fd:41:cd:8e:cb:d4:
90:67:88:b9:29:7d:6a:84:e9:00:ad:b1:e5:72:c4:f6:4d:e1:
11:58:ff:6e:a1:78:53:d9:0b:cd:46:a4:32:b1:94:70:be:8b:
96:d3:3f:62:f1:8b:58:0b:d3:f1:fe:6b:a3:ce:70:f2:20:75:
8c:5f:cc:84:33:b5:b9:74:ba:5b:b4:da:8d:67:22:13:fd:9d:
b0:63:1d:6c:d9:1c:c8:2a:a3:43:ee:6f:53:31:d4:6a:8e:15:
79:b1:27:cc:1b:6a:b2:63:6c:b5:4a:ad:0f:97:bc:16:fb:4b:
8e:81:86:10:68:ca:3c:60:d2:f8:7f:43:0d:f4:af:5d:49:ef:
ea:e8:f7:f8:05:f0:b1:5e:c0:87:8b:19:aa:8c:a4:27:2f:ca:
af:f6:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:27 2026 by rpki-client