Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: JZskuz/JMA2Yu7ET2InLecDB/wM1N/INilDE1F9bLaw=
Subject key identifier: 81:45:AB:C9:B7:DE:1E:47:91:BA:94:D0:EB:1E:A4:03:FD:14:23:93
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 01A0CC6C829BC4D477EA87A03B7D99BA022B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 1795
Signing time: Wed 23 Sep 2026 04:00:58 +0000
Manifest this update: Wed 23 Sep 2026 04:00:58 +0000
Manifest next update: Thu 24 Sep 2026 04:00:58 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: bq64jOoeBZ12BIar39MJGB0pFsmSh0jdeFRoS5Rh4gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:82:9b:c4:d4:77:ea:87:a0:3b:7d:99:ba:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Sep 23 04:00:58 2026 GMT
Not After : Sep 24 04:00:58 2026 GMT
Subject: CN=8145abc9b7de1e4791ba94d0eb1ea403fd142393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:d4:b7:1d:c2:bf:94:d9:7e:e4:2b:ec:69:
6f:03:a6:5a:75:7c:86:eb:6e:e8:2a:71:70:26:20:
f4:9d:f8:be:72:d8:d4:39:1a:a0:56:ed:15:5f:60:
d7:91:89:9a:e7:33:c7:1b:c6:82:06:ec:40:5a:cd:
0b:ee:06:b1:ba:c6:77:15:5f:8b:5d:d6:35:bc:04:
99:69:08:dc:ba:d9:db:25:05:ff:e4:79:90:47:8b:
5e:84:52:a1:7a:47:69:5b:53:52:b7:04:37:71:49:
b5:fa:1b:98:70:cd:83:d5:da:e0:52:0b:1c:d9:74:
32:b0:a8:5f:a2:e2:4d:9f:85:de:06:0e:79:d1:9a:
f6:06:41:20:10:c8:13:e5:c7:02:a9:e1:b6:55:7f:
75:2e:7c:9b:e9:13:11:c6:4f:0f:58:e4:82:3d:e7:
2e:c7:a1:50:c0:b2:03:da:90:5c:a3:1b:00:e6:af:
9c:65:83:7e:62:a0:e2:c4:e8:5f:d1:8b:ba:76:a4:
f0:62:d9:fb:d7:fc:c9:8c:d3:43:ca:9a:72:20:82:
c1:35:b8:0e:75:fc:a2:7d:b1:a6:6b:a4:30:b7:9a:
c1:a3:bc:c4:48:05:e4:d5:ee:b5:74:88:00:88:9c:
24:99:c6:28:14:0b:ce:02:b8:93:22:6d:d2:91:f6:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:45:AB:C9:B7:DE:1E:47:91:BA:94:D0:EB:1E:A4:03:FD:14:23:93
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:7f:58:0f:9b:ba:74:ee:34:25:c0:13:b6:36:a3:f1:a7:23:
9d:1f:48:0d:ef:e8:60:37:cb:2d:a2:04:48:6b:a8:cd:58:51:
1d:62:4f:f3:67:eb:b5:a7:8e:b9:76:5c:65:45:35:b7:e4:de:
f3:83:2e:77:d4:32:99:5c:1a:4b:1e:40:44:d9:95:d9:f1:9a:
71:71:1f:5a:f2:8d:34:05:9c:7c:b6:4a:32:57:e6:d2:5d:5f:
16:06:7a:52:ba:f3:e9:33:aa:5d:40:02:a4:d7:27:94:2b:97:
8f:94:84:2b:73:2d:f7:4e:23:f6:d4:c4:80:32:d0:13:50:03:
82:6a:66:0c:ca:1b:2f:f0:2e:e6:34:bc:1e:49:c9:da:90:40:
dd:92:78:be:f3:de:76:67:f2:56:8a:42:fb:02:06:7c:0c:6a:
fe:d1:34:73:ba:e0:45:81:c6:53:81:d4:5a:69:29:82:55:25:
73:07:8b:e1:ad:ac:97:e4:ce:05:35:48:65:0f:0a:80:33:c3:
c3:13:0a:f8:d0:3e:2b:dc:65:d8:65:e1:1f:92:4f:6c:e1:89:
a2:16:c4:7a:ec:3d:fd:e8:1b:68:d7:99:5b:5b:42:bb:15:f0:
f5:2f:f2:23:f5:c0:71:f6:75:41:5f:62:86:2f:ed:c4:2a:ec:
73:46:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:46:25 2026 by rpki-client