Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: VYC83rRS+sT9K4QqQohrKSjMRXvsHRW1bFHqchOxt/o=
Subject key identifier: F9:49:D0:AE:E7:D2:95:2A:54:20:C8:0D:98:2C:D6:15:9D:F0:B9:11
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 019F83E908614DFA5B3C442314771CE29394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: 39
Signing time: Tue 21 Jul 2026 09:01:55 +0000
Manifest this update: Tue 21 Jul 2026 09:01:55 +0000
Manifest next update: Wed 22 Jul 2026 09:01:55 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: C1pizwXXgbYTb+qC/GCkA9fMIVnKf+ubKTnusgZWodE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e9:08:61:4d:fa:5b:3c:44:23:14:77:1c:e2:93:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Jul 21 09:01:55 2026 GMT
Not After : Jul 22 09:01:55 2026 GMT
Subject: CN=f949d0aee7d2952a5420c80d982cd6159df0b911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:72:37:45:b4:8e:20:29:85:28:f0:e1:25:
a0:ed:b5:e3:81:1d:99:e6:52:82:74:43:22:ef:b1:
43:a9:45:f7:ae:24:94:49:cc:ac:f8:1b:96:d3:db:
81:9c:af:07:d8:6f:6e:f2:40:60:5a:02:35:dd:11:
18:86:82:68:d7:b3:08:c3:f5:01:93:e9:7c:7e:13:
a4:3b:93:7a:96:e6:c8:8d:eb:81:35:f6:5f:cc:b6:
59:ab:dd:96:dc:39:49:6e:00:73:a2:50:0c:ec:32:
fc:43:d5:a2:8f:6a:4b:7f:1b:13:ec:02:7e:fa:c9:
05:cd:59:f3:7c:04:75:45:3f:5a:c6:58:47:ae:87:
cd:1d:87:2e:28:c3:3f:c6:ff:1a:8d:b9:cf:2f:6d:
81:32:50:28:c5:da:b8:c4:1c:74:a3:46:f8:bf:cd:
05:09:d8:35:98:75:ef:cc:5a:65:ce:93:cf:68:1a:
60:8d:53:65:20:59:e1:c6:97:46:a5:d2:61:b1:fe:
fd:6a:27:49:fc:ab:e2:c4:d4:e6:10:e6:7e:19:ef:
fd:63:ee:81:a4:40:db:ff:7f:05:3f:39:7d:27:d0:
bb:86:9a:7a:be:b0:e4:a3:6b:a8:4f:1b:8a:9d:a6:
69:39:ba:8e:9e:0f:b2:58:6c:04:e8:ba:d6:29:04:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:D0:AE:E7:D2:95:2A:54:20:C8:0D:98:2C:D6:15:9D:F0:B9:11
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2c:0f:2f:0f:5e:cf:46:7b:61:cc:56:ca:d9:33:4a:23:0a:
62:db:11:bf:0b:e5:5d:87:e0:2e:9d:04:ef:da:d2:eb:19:59:
c8:04:35:7a:81:92:c7:81:12:73:7b:02:15:1e:f3:98:08:ba:
41:b3:73:70:0e:12:a7:06:a1:ca:30:47:c4:9b:3d:be:cf:69:
aa:6b:79:77:58:a3:fc:76:77:dd:f6:f8:01:07:5d:5f:6c:cb:
5f:bb:12:90:47:69:a0:7b:6b:18:01:36:8d:d7:a7:2a:66:f8:
49:12:ed:67:09:3f:54:2e:51:b0:39:7b:02:b9:11:8c:5e:d0:
81:69:05:71:7c:7e:a5:be:2b:d0:60:17:d6:1e:c0:6e:67:67:
91:76:ea:fb:79:d5:26:ad:80:b6:f4:d1:6a:05:b5:1c:66:8c:
22:0f:cf:50:8e:b8:b3:ee:c2:0d:a7:2a:52:a9:eb:e9:6a:5f:
bc:51:81:98:d5:4f:80:41:22:f9:12:f4:c5:d1:3f:a0:58:57:
b2:3c:6c:c0:b8:42:be:cf:96:72:1d:56:66:bf:a6:79:38:e4:
53:5a:82:a6:93:8d:ea:97:4c:ba:bd:40:a8:a8:86:e3:d2:c1:
92:85:2c:84:6f:4f:f6:0e:db:97:dd:55:4e:ea:83:2a:2d:ba:
10:f7:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:19 2026 by rpki-client