Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: 5ZAx1/4fcM6mYUL1T/hfy2zdoF0YxEY6R07JD9EaXvs=
Subject key identifier: F4:52:88:73:A7:A4:F1:3D:B0:34:BE:7C:46:85:5D:B9:FA:88:89:77
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 01A0C5FBD1B03E77C4037A57DEB2426CECB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 1952
Signing time: Mon 21 Sep 2026 22:00:09 +0000
Manifest this update: Mon 21 Sep 2026 22:00:09 +0000
Manifest next update: Tue 22 Sep 2026 22:00:09 +0000
Files and hashes: 1: WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa (hash: 2P6nSAZ1sPNq/s5iROpnF+sOeXvgcoADYMvtdAcO7JY=)
2: gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa (hash: gknScLT558AwNuqdvMmD/GV256E2UaSmjDtUQzxe0LE=)
3: i_-V4OPL2bnrphceOdLgdtuR7V4.roa (hash: MEzcu6m3xXGlNC1nBud+d+m6w2Ubzcn12Gp6SG4lSN4=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: H0W2iM99ZFCIp27DbOcNHQrfaFrgSD6LH6PDByWXsZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:d1:b0:3e:77:c4:03:7a:57:de:b2:42:6c:ec:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Sep 21 22:00:09 2026 GMT
Not After : Sep 22 22:00:09 2026 GMT
Subject: CN=f4528873a7a4f13db034be7c46855db9fa888977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:b9:9f:a9:46:f9:4a:9f:8b:45:29:7a:5d:
f0:fc:14:6f:23:c0:76:e4:50:c2:cf:5d:78:bd:c2:
f9:70:7e:46:5e:fd:7d:be:9e:49:9c:e7:07:01:c6:
1e:0c:52:25:e8:7c:e7:84:7a:4b:b4:50:bc:42:13:
13:6d:e8:b6:24:cd:d1:06:8b:95:e1:a9:92:a9:33:
1c:43:ec:5e:bf:6d:c6:7f:93:9e:55:3d:1a:2e:13:
65:9f:2f:00:a8:ff:6c:e3:d6:d8:64:4d:a0:8f:74:
3f:d5:56:b5:cd:91:27:ef:f5:ca:7d:33:9e:f7:90:
92:c8:39:c4:fb:8d:60:f7:cb:02:f8:f1:83:88:5b:
06:09:52:01:5c:d8:5a:c6:72:2c:93:77:05:ca:d5:
0f:85:89:5d:e4:c7:28:35:2a:41:e7:e7:69:7e:96:
ca:89:6d:50:5b:11:73:88:3c:72:2d:08:b0:f1:df:
29:28:15:f5:7e:1b:95:b9:3f:46:4c:f7:d4:ea:68:
c4:3a:51:47:34:aa:30:58:51:e3:a1:b4:b3:49:50:
74:cf:8b:ea:31:d8:a9:94:2a:e8:53:c7:1d:1d:a2:
65:4d:5b:c5:26:41:5e:e7:d7:21:49:d9:1c:1a:83:
00:24:4f:88:5e:2b:38:d0:96:fe:23:5a:fb:ff:ed:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:88:73:A7:A4:F1:3D:B0:34:BE:7C:46:85:5D:B9:FA:88:89:77
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:6b:20:c5:63:68:a3:69:fc:dd:5b:d9:1d:14:0f:49:55:
33:94:c7:9c:0f:bc:a3:a5:9c:a5:49:27:8d:18:08:fc:fc:5c:
cd:7e:55:78:88:b6:6b:2b:6d:c9:29:f4:2f:21:17:75:ec:08:
cb:ab:62:15:9d:df:67:0f:24:17:6c:69:44:6b:54:01:2a:54:
c2:7d:ce:57:0d:04:a0:b9:73:98:3b:8b:f4:22:9f:41:36:7e:
f1:35:4d:dd:c7:34:58:dc:3f:6d:5f:89:e3:78:49:cb:48:db:
84:27:b9:62:15:d8:c0:76:ab:a4:d3:d7:23:45:b9:c4:90:60:
51:ff:82:d1:31:02:21:17:58:18:66:07:9c:a6:8b:00:0a:1a:
fa:54:60:ec:9b:63:6d:8d:1c:ea:50:d7:53:64:71:44:d5:87:
1b:f3:30:8b:b3:3e:c8:d3:cd:b5:77:5d:c6:60:a8:9b:03:db:
8b:c6:71:29:e6:0c:4c:3e:20:ff:b6:b9:bb:c9:2c:39:e0:7a:
4b:aa:81:8e:1e:f5:b7:b8:87:a0:64:89:88:af:c0:2a:66:4e:
d0:01:8e:52:07:15:1f:35:17:75:84:2d:22:00:97:d1:47:a4:
bc:88:85:7d:d2:d4:c1:f8:20:15:ea:13:e4:3f:61:c5:6f:98:
82:a4:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:46:36 2026 by rpki-client