
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: O/6QMziQ7bUbyzabujKy/l/sT9BmKty4FoU4FJS4vgg=
Subject key identifier: 47:23:D4:18:5D:DC:5E:DE:4E:80:99:1C:01:0D:AE:8A:6D:2C:2D:09
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019FA8D0816D1FE8FBF2249F608BC9FE4AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 16FE
Signing time: Tue 28 Jul 2026 13:01:04 +0000
Manifest this update: Tue 28 Jul 2026 13:01:04 +0000
Manifest next update: Wed 29 Jul 2026 13:01:04 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: xikgmOauMt61CjMBCM0Ac6ycmfMSQqztMoMI/ud00HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:81:6d:1f:e8:fb:f2:24:9f:60:8b:c9:fe:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jul 28 13:01:04 2026 GMT
Not After : Jul 29 13:01:04 2026 GMT
Subject: CN=4723d4185ddc5ede4e80991c010dae8a6d2c2d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:f5:85:3b:92:39:32:19:c4:ac:b9:88:fd:
78:6a:f3:86:b1:4a:4b:29:95:99:cf:1d:2b:3b:ef:
db:42:79:f8:e6:c5:50:d0:1b:93:f2:5b:15:cc:50:
4e:20:e4:44:72:f1:b1:b9:ac:3f:63:3d:ec:05:3d:
8e:75:10:25:48:8a:98:23:1d:b6:71:05:64:3e:46:
8b:74:7f:fe:9a:bb:8d:a0:48:c9:5a:ec:2f:40:d8:
c7:21:30:3a:cd:b6:4a:3c:9c:33:9e:25:b3:48:d2:
97:fa:af:c6:3d:d4:92:fb:16:c2:53:81:d3:6a:02:
fb:32:28:0a:1c:ba:4e:33:69:4f:ea:21:84:ef:cd:
47:01:23:6a:15:21:c0:e9:f3:ed:4e:8d:25:1b:61:
6e:36:31:5e:b8:40:18:e4:8d:cf:29:72:c1:4b:47:
f9:a0:5a:e4:c2:25:5d:ec:96:18:f8:de:06:7d:16:
34:a7:93:33:19:d7:f9:e8:6b:7b:6d:42:6e:fa:a0:
6e:b0:b3:6c:2e:33:3a:30:54:c2:87:76:21:94:7f:
83:01:a6:87:bb:e1:e9:12:4f:51:f8:8c:03:ae:17:
f9:29:cc:a6:a3:19:a4:52:6e:8f:8b:e2:d1:2c:d5:
85:e8:4b:b3:93:7d:18:68:8d:14:3a:c0:5e:b4:42:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:23:D4:18:5D:DC:5E:DE:4E:80:99:1C:01:0D:AE:8A:6D:2C:2D:09
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0e:1a:0c:96:2e:12:17:5e:64:73:aa:47:75:5c:1b:19:59:
de:61:52:11:91:98:70:81:70:d5:27:91:fc:66:8c:77:e0:d1:
ba:b7:ec:96:a1:42:d4:f4:c5:a4:01:68:c6:7d:bc:e8:49:da:
4a:e9:74:fa:14:74:a0:f5:73:dd:75:73:99:c1:8a:22:f1:66:
88:51:9d:0c:76:63:53:f3:d0:2b:ea:b6:bf:3a:80:77:89:e8:
fe:20:25:48:e5:b8:09:36:99:c5:af:32:5c:26:ff:37:c3:48:
a6:07:b7:80:7f:88:72:cf:d7:2d:7b:09:9e:8d:98:20:93:6e:
05:42:a0:e7:e0:07:bb:b9:db:07:b6:1a:80:97:df:5f:e6:02:
d4:a4:aa:dc:5f:a1:71:16:8a:e7:e6:56:a2:19:a9:d1:00:0c:
e0:55:ae:5c:8a:41:a3:c5:74:70:8c:b8:0e:9d:ac:86:27:fa:
cf:73:a5:b2:71:ef:ca:09:fa:ed:7a:f8:2f:13:a5:98:61:f5:
55:c3:3e:fa:9b:7e:87:11:69:d1:88:0a:c5:d5:fe:4f:86:c4:
fa:2e:fe:f6:bb:50:f7:9e:73:3d:f5:21:d9:5c:b2:e3:7d:2c:
45:ed:1e:69:a0:74:4f:fe:4d:d1:50:8a:0d:51:bd:d4:47:65:
7b:2a:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:36 2026 by rpki-client