Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: L4mi0FImOJdux9C7A0Yi6x5KQuLif87x03h2ax/RVjM=
Subject key identifier: 77:2A:73:BC:C1:16:43:A9:4F:C7:48:CC:6C:3B:7F:E2:7C:6A:1D:F4
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 019E7BFA6CEB65CE9683E39352CAC1775D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 10AB
Signing time: Sun 31 May 2026 03:01:09 +0000
Manifest this update: Sun 31 May 2026 03:01:09 +0000
Manifest next update: Mon 01 Jun 2026 03:01:09 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: GJx+qfWxmExrET43pa+5QvYcmIuyQ/KI/FVJPofh6vc=)
2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:fa:6c:eb:65:ce:96:83:e3:93:52:ca:c1:77:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: May 31 03:01:09 2026 GMT
Not After : Jun 1 03:01:09 2026 GMT
Subject: CN=772a73bcc11643a94fc748cc6c3b7fe27c6a1df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:16:35:d6:53:8a:f5:7c:42:0f:28:f1:75:
0b:7c:a2:7f:b8:5c:cc:be:5c:32:c0:00:30:b4:92:
82:75:3e:1e:8c:8c:f7:ed:02:b4:d8:a3:7d:54:e0:
2f:76:4a:16:32:28:fc:81:6c:d6:78:24:12:be:17:
c6:b9:ee:e2:10:be:b7:4d:94:de:4e:1c:f6:e4:b2:
b1:2c:06:8c:a3:73:37:6d:46:30:51:99:df:e6:b8:
da:42:80:86:25:e0:aa:3e:76:a7:5e:94:ea:bb:9a:
df:ce:46:be:a8:dd:0f:82:d5:dc:db:31:fb:d4:22:
91:3e:f2:8f:06:e3:28:43:2c:b5:f4:6a:2e:03:2b:
e5:2f:0c:e8:ec:1f:a6:22:51:17:41:22:3e:46:13:
07:2d:6d:67:a4:19:ee:f1:80:33:da:d0:f1:1d:42:
77:f7:50:7c:f2:d3:7d:26:7d:b5:50:44:c7:30:d9:
fb:d5:b9:3f:f5:91:95:bb:6b:a4:b9:9d:5c:1c:74:
2c:51:67:42:6c:94:05:7e:58:4f:cb:e7:ee:8a:4b:
b8:4d:b3:18:e3:57:c5:f6:7e:9a:ad:32:53:95:c1:
ca:ad:5a:22:31:2d:be:8e:8e:ab:f2:cc:f2:7c:67:
ef:b9:ca:59:f0:b2:72:a3:28:4c:ee:42:6a:57:c5:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:73:BC:C1:16:43:A9:4F:C7:48:CC:6C:3B:7F:E2:7C:6A:1D:F4
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b3:5c:dc:b9:c1:dc:83:e7:4a:b6:c0:45:4b:20:5c:9d:a1:
d5:f5:67:6c:fa:5f:b6:dc:30:33:db:a1:b7:24:4c:58:89:51:
59:19:5b:42:56:a3:5e:b6:f5:79:86:f5:58:ca:c3:12:d6:46:
1b:2a:60:d6:37:2f:c7:a1:7f:b9:a1:7f:30:c8:8b:6a:f7:60:
19:b8:8c:8a:1e:34:f2:8e:39:7c:e0:1c:0b:e8:4b:7f:12:82:
66:74:d1:cd:a4:a0:c7:b9:82:c8:24:e3:0b:b4:67:1e:b6:ac:
e2:d6:23:1c:4d:32:c7:cf:82:14:76:7c:86:93:60:2e:53:5f:
57:0f:cf:be:5c:f0:eb:c9:0b:6b:70:cb:a5:75:3a:29:05:64:
30:b8:7e:af:62:8c:c9:04:c1:ac:3f:e0:64:c3:49:04:1a:48:
69:24:08:ef:d5:9b:70:ee:5d:e8:87:2f:00:ef:e4:e7:d5:24:
fd:b1:a6:54:62:58:7d:e4:eb:17:cb:cf:84:48:20:9c:5d:cf:
aa:e2:2c:2e:70:c3:4d:61:12:af:fd:7d:8a:d0:d0:5b:d1:4b:
1b:3f:fe:30:07:9f:fe:2c:df:af:4d:d5:0d:f0:a6:59:89:a4:
cc:64:a7:5e:b5:34:36:23:c6:59:92:21:4f:15:0b:c8:7a:fe:
3d:5d:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:04 2026 by rpki-client