Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: 0kllXB9s+iN1EJqp5U1zFy5nGjclGFeaP/NQo7XAlKA=
Subject key identifier: 7D:92:E9:ED:03:5E:7A:51:3E:89:1C:E2:58:18:55:2C:31:44:E9:BB
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 019CAB6BAB596858987E42F1D57C6DE19FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 172F
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: 0ATyl4ekFRj-WxgYIcv02NV23tI.roa (hash: JP25J8vGC7AY6JQNIpPVJxNPRtt2vIdmRIL8Ejj1OxQ=)
2: WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa (hash: 2P6nSAZ1sPNq/s5iROpnF+sOeXvgcoADYMvtdAcO7JY=)
3: gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa (hash: gknScLT558AwNuqdvMmD/GV256E2UaSmjDtUQzxe0LE=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: aUYCjsD7ApImHl7oE5ljJiw+VyMDAen9AetyEP1CMf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ab:59:68:58:98:7e:42:f1:d5:7c:6d:e1:9f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=7d92e9ed035e7a513e891ce25818552c3144e9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:58:bc:80:c5:09:74:49:0e:2f:ce:a3:6c:
83:05:fe:0b:f0:df:65:72:6f:1d:9b:dd:f3:78:b9:
cd:fc:77:3a:40:f8:4a:b8:52:e6:45:22:d1:3b:4d:
dc:56:ab:30:39:60:4b:6d:a0:b9:d4:14:81:71:9e:
bf:e5:af:39:ad:ff:27:6b:57:b1:ae:e7:59:58:bb:
ac:fd:d8:c0:0c:95:db:bd:ee:56:eb:c3:f4:6f:31:
73:9a:74:ae:b7:d3:c2:65:45:44:70:2c:b8:f8:65:
74:a9:43:e1:fe:a1:9a:21:f8:3f:73:6f:f2:15:a4:
ab:a4:d0:f8:47:f9:dc:c6:e8:03:a9:3c:49:bc:a9:
61:c2:ed:62:5c:2a:6e:03:bc:fd:f0:bc:ce:e2:91:
43:bd:fe:07:38:0d:dc:9d:13:56:4d:e9:fe:20:9a:
a7:19:58:ed:8a:f9:fc:82:83:15:55:ec:6d:9e:a6:
0d:a8:cc:7d:e4:22:b2:25:85:26:56:bd:4f:bd:63:
e1:a2:24:2c:01:a7:3f:5a:c3:5d:4d:db:40:bc:bc:
19:65:61:96:db:94:ec:3a:c2:c9:0e:53:37:3f:5a:
73:cf:fc:78:73:2a:89:48:e0:02:f5:97:bc:ae:68:
b1:f6:94:3d:64:35:3d:25:bd:95:4a:70:a0:a3:96:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:92:E9:ED:03:5E:7A:51:3E:89:1C:E2:58:18:55:2C:31:44:E9:BB
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2d:c3:10:6a:32:e6:49:66:a8:b2:cf:b6:bc:7b:7f:da:75:
13:37:5c:a4:a4:dd:74:07:11:02:c0:c1:e1:b6:ab:7d:f3:74:
cb:6f:60:18:3d:b6:4e:7c:eb:4b:cc:7f:e2:2f:d2:ee:02:66:
14:f6:89:ef:98:69:87:df:99:e8:81:27:c4:7c:68:f1:32:29:
02:4c:02:12:6a:f3:d7:9b:b0:61:20:63:5f:ca:40:49:40:39:
61:22:6e:82:f0:ac:d6:4f:66:b1:be:56:a4:49:77:31:46:6f:
ac:82:b4:13:03:c8:05:9d:fc:bb:ce:d0:c2:a3:b8:ca:3a:26:
e4:eb:51:0b:0f:cc:73:2b:d6:d3:9a:8e:8f:8d:97:ef:a9:52:
bc:76:8e:0f:90:a4:7c:3d:95:23:34:fc:28:c6:28:ac:2a:fc:
bc:b2:24:1c:c5:ac:1a:4a:fe:1c:77:6a:6b:24:29:b9:c7:85:
77:fa:49:81:0a:53:43:da:74:c5:49:3f:6b:20:41:16:f4:b1:
d4:cb:56:29:8b:d6:89:e6:b1:c4:ab:64:27:d8:10:bf:b0:9a:
db:23:e4:eb:4a:66:d5:10:a7:60:a5:ac:a2:74:4b:7c:48:fa:
c6:83:e5:fe:d4:9b:ba:ba:43:4c:b6:32:93:e6:70:ad:dc:8c:
40:77:ca:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:13 2026 by rpki-client