Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: 5nazdrM7sUP1M1nEBMVvpOYZ4AWSe0CU1yceLb2m0ys=
Subject key identifier: 48:76:D2:1F:87:7C:E6:40:CD:56:4F:B8:1C:0B:10:E3:01:8D:F3:05
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019CAC1034E4325FA26DE984E6DC8F43A111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 1571
Signing time: Mon 02 Mar 2026 01:01:08 +0000
Manifest this update: Mon 02 Mar 2026 01:01:08 +0000
Manifest next update: Tue 03 Mar 2026 01:01:08 +0000
Files and hashes: 1: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: 2fbT4x1uWsm1EuLYVe7VBvCoTiX2EGuiGyPSJ7p30cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:34:e4:32:5f:a2:6d:e9:84:e6:dc:8f:43:a1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Mar 2 01:01:08 2026 GMT
Not After : Mar 3 01:01:08 2026 GMT
Subject: CN=4876d21f877ce640cd564fb81c0b10e3018df305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:b9:4f:75:fe:e0:3d:bc:69:e8:6d:57:6b:
20:2a:b3:16:5e:63:6b:d3:2b:42:c7:83:8f:a7:27:
23:a1:94:13:a9:b6:8f:95:9b:85:f6:b2:07:7a:2f:
5d:b0:5b:97:46:ea:87:99:c5:a3:44:4c:a8:f2:c6:
d8:a7:8f:53:12:2e:17:c1:f9:1f:74:fe:36:29:c4:
15:a6:a0:98:33:63:e8:fd:d6:ff:de:36:14:9a:60:
28:12:9f:1e:a0:1f:8c:f2:b1:ed:12:f8:21:ca:ca:
16:47:f5:88:dc:12:35:19:70:ef:4d:57:a9:e5:64:
05:3c:64:11:61:f7:a6:eb:b2:31:90:92:1a:a2:36:
c6:8e:d5:54:da:2e:1a:91:d8:51:44:bb:91:d7:1a:
b8:b5:1f:56:50:39:f9:bf:1f:37:45:6c:c6:3a:74:
40:21:96:64:d4:58:8a:4a:82:48:a6:42:6e:5d:4b:
e6:9b:f2:da:8e:d8:cf:11:66:62:12:5b:a4:65:b5:
8f:ca:53:4b:55:67:01:23:1b:96:cf:5b:50:8a:24:
48:2e:39:34:01:d9:dc:b3:4d:ef:35:12:dc:55:e9:
2c:92:e7:d9:88:67:2c:af:18:38:f5:21:f8:9d:45:
33:ce:17:21:e3:e2:1c:ea:9f:f8:2b:a9:93:e8:01:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:76:D2:1F:87:7C:E6:40:CD:56:4F:B8:1C:0B:10:E3:01:8D:F3:05
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6c:ba:7a:e0:52:2b:3f:85:55:c0:f4:19:1b:35:ff:3b:e9:
40:ea:6b:31:c1:96:c8:de:67:1d:f3:dd:43:79:a6:56:c0:bf:
bc:76:b4:c0:e0:53:f5:bf:51:ad:73:bc:74:2b:bf:e0:a8:eb:
06:cb:bb:15:55:1a:a6:44:4d:88:55:01:0b:8d:6f:77:e9:3c:
02:aa:e2:53:c5:0e:05:4f:ef:f2:5c:9e:99:a4:e5:63:39:12:
78:f0:9c:91:84:eb:c0:f4:9c:a9:cd:53:b8:3e:5a:20:c5:57:
8f:fe:ff:85:c1:26:89:ee:69:95:79:5f:f1:89:e8:8c:5f:e8:
4c:f0:4e:fd:b3:b3:4d:0a:8c:82:51:66:72:14:ab:c6:7e:a8:
1f:e1:31:d1:d1:88:2e:61:8f:ce:92:14:73:3b:0f:c1:7d:86:
d8:d2:f1:d3:c0:6e:d0:61:dd:15:eb:d9:2d:aa:db:21:ca:c0:
f0:bd:2e:c2:b3:c5:1b:fa:a7:96:0d:fd:3f:b3:6a:6f:c7:14:
8f:aa:70:69:1b:5f:58:22:1f:af:e5:58:d6:f0:db:d9:e8:ec:
7c:b2:17:c5:b9:62:93:29:60:c0:f4:00:1b:81:c7:91:13:9a:
fb:c0:c4:47:e5:a7:8c:84:b0:ad:88:e9:fa:aa:58:91:65:3d:
08:99:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:19 2026 by rpki-client