Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: e/kvlXk1xw3IZTbDjBsULwPj9sHi+PB++ar8m2FSQcc=
Subject key identifier: F9:C0:09:41:AD:2A:47:7C:64:29:10:2F:B7:A3:A7:1D:E3:1D:C0:39
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019FAABF01D1EECEC46B1BD142A6B37DA4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 16FF
Signing time: Tue 28 Jul 2026 22:01:12 +0000
Manifest this update: Tue 28 Jul 2026 22:01:12 +0000
Manifest next update: Wed 29 Jul 2026 22:01:12 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: FR4eUJCr19uuQLE5usPKcmXz8nNixMiAlWhAniOyUEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:01:d1:ee:ce:c4:6b:1b:d1:42:a6:b3:7d:a4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jul 28 22:01:12 2026 GMT
Not After : Jul 29 22:01:12 2026 GMT
Subject: CN=f9c00941ad2a477c6429102fb7a3a71de31dc039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:14:30:67:85:b3:e6:e5:b3:7b:14:6a:78:
a5:24:ec:87:17:c8:b5:5f:ed:05:5c:72:7e:f4:f7:
bf:ac:48:0c:48:aa:7e:ca:d2:51:a8:b1:1c:83:f5:
b2:bb:5f:28:fb:5f:dd:f1:5e:8b:c6:7b:d6:33:f9:
f9:90:d9:31:dc:8f:a1:01:a4:6e:f8:f8:94:99:a6:
7d:f4:a8:0e:cf:9f:94:51:12:1d:98:c8:be:bc:d1:
d5:b5:00:19:f8:19:d7:a8:ba:2b:5b:82:2c:50:12:
da:04:20:5b:c9:0a:00:d5:2e:95:6d:1f:5f:3d:0f:
2c:2f:64:b7:b0:32:88:52:0d:0b:b7:70:d3:4e:d9:
88:32:60:73:13:3d:af:c3:97:f4:96:c9:e3:c3:06:
d6:54:24:44:ad:75:bc:8a:a8:0b:44:4c:2a:4a:96:
07:89:4c:74:5a:e6:98:7b:94:e8:ef:be:81:e9:92:
9a:2a:b1:4c:78:71:54:a9:3e:7a:b1:79:3d:d4:ca:
14:9f:88:d2:8a:0e:92:28:86:d0:5d:dc:06:bf:21:
4b:99:b3:ff:41:00:63:4d:57:2b:9b:39:2b:aa:89:
97:16:5d:a5:2f:4e:61:9a:d2:99:71:f1:a2:81:be:
02:65:ca:0f:65:d0:37:80:8b:68:94:29:cf:64:4e:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:09:41:AD:2A:47:7C:64:29:10:2F:B7:A3:A7:1D:E3:1D:C0:39
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:6e:e5:f6:7d:2f:64:59:51:e4:23:e2:1a:e0:7c:04:ff:
84:20:e2:7e:6a:c0:59:4b:38:41:4b:c1:d7:5d:0c:a6:3a:03:
36:a0:70:fc:82:7a:02:c7:d6:cc:9a:e5:1c:58:b5:32:f2:8a:
1b:06:bd:9d:76:c7:de:07:18:05:b7:ce:fd:86:b0:0f:fd:b2:
ce:7a:dd:0f:31:46:67:29:83:66:cc:4a:62:2a:32:da:c7:8a:
6c:5a:96:ac:06:47:8e:8e:ea:39:ba:d1:24:02:ce:00:6e:dd:
f5:70:39:7f:db:2e:56:34:33:64:4d:ab:9c:ce:47:21:69:48:
31:52:d8:a6:d5:ee:07:5c:51:1a:e0:4a:49:ed:14:65:4e:32:
b1:94:41:62:82:50:8b:b9:e4:ee:45:aa:c2:f5:25:30:91:d9:
1a:9f:4f:eb:ec:40:20:7e:4c:65:ed:ed:ca:c2:b9:2e:5a:8a:
33:dd:95:f4:20:74:57:7a:34:3d:a3:6a:9e:f2:4c:eb:34:1d:
0a:ff:64:e2:cc:45:50:33:f1:a2:13:94:b4:ae:31:39:97:e8:
4f:57:b6:e1:23:27:68:3d:4c:76:bc:d9:ca:66:35:ea:dd:11:
61:46:d3:b1:f1:c9:89:fd:dc:59:b8:1f:27:f6:a0:f1:9d:20:
bf:0f:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:00 2026 by rpki-client