Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: 1p0h8UI7xyoMAMRbbz33G6Ct/fHVHwhh5ffV1X0gbxM=
Subject key identifier: A8:CC:03:8B:56:60:F4:27:04:53:A1:16:CD:B5:CA:7D:33:7F:1C:FC
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 019D397778F3FADD9FBECC48E8D7558F133B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 1004
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: REzg14JzyEdSbfTP/HrDzEJ0VFKIm+TXhObk4nlyUUM=)
2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:78:f3:fa:dd:9f:be:cc:48:e8:d7:55:8f:13:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=a8cc038b5660f4270453a116cdb5ca7d337f1cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:bb:c9:2d:3a:da:31:73:50:16:66:d5:66:
bf:98:d3:ef:a0:2f:b6:1d:04:e0:1b:4f:55:64:41:
41:9c:87:24:99:b8:ef:98:df:ce:2a:27:c4:e4:50:
a0:65:d4:1a:c1:6d:dd:b2:49:a9:18:e4:d6:57:c3:
f2:a0:b8:5f:bd:47:26:1a:04:1a:7c:8a:ef:06:a8:
16:74:66:b4:cb:ea:d9:02:05:42:78:05:e4:6d:18:
25:4a:63:9e:6b:71:c7:03:9d:7d:b3:ee:f3:52:a1:
b4:72:53:16:de:98:22:1b:dc:55:91:f2:21:f5:8f:
c9:f3:b2:e0:ee:a9:d3:15:02:30:ff:4a:bc:99:73:
f6:1e:ed:fb:95:57:20:45:db:0e:9e:ee:a4:05:0b:
f9:f2:61:57:2f:f5:04:2b:43:7d:42:12:13:07:86:
e5:88:c2:14:8a:81:f7:f9:6c:1c:84:40:68:bf:d1:
9b:4b:d0:16:7f:2c:72:13:5b:9a:53:f4:95:dd:17:
ea:f9:12:28:42:26:f6:4f:33:22:83:c0:4a:d2:61:
ec:52:5b:37:70:5b:17:c4:48:74:b6:6e:f0:12:2c:
16:d0:ce:90:63:78:c3:cb:3f:81:8b:44:c0:8c:5d:
f0:f9:72:44:da:29:37:c3:f2:b6:bb:23:1d:a0:ba:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:03:8B:56:60:F4:27:04:53:A1:16:CD:B5:CA:7D:33:7F:1C:FC
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7b:f9:ae:0f:8f:40:8d:d4:ad:98:95:e1:9b:b1:fd:84:c9:
23:1a:50:64:81:1f:c8:f9:78:2d:3b:ce:68:e5:24:72:bc:93:
2c:26:2e:b0:be:9e:14:3d:f8:27:f9:59:44:07:35:cd:3a:84:
9c:03:a8:cf:63:a4:88:57:c0:b1:d4:5b:5c:63:cd:5e:72:9f:
36:19:ed:41:da:1f:43:1c:21:17:58:16:74:ea:57:30:c2:ba:
5d:12:34:8d:5a:4f:bb:10:5f:04:4a:77:91:92:0a:37:0e:13:
6d:b1:c5:69:cd:78:4c:69:74:b8:25:89:8f:d4:45:41:eb:5b:
90:38:e7:9d:5b:55:0f:f1:55:cf:01:cb:f4:24:98:e9:dc:cf:
22:5f:44:b0:5a:7c:f4:fa:f2:24:e3:4d:f7:63:22:33:06:c9:
40:ac:00:b1:33:f9:87:20:d5:07:bd:53:06:c8:75:37:b0:72:
5a:3e:b6:ab:fb:9c:fe:a0:6b:0c:d6:71:b6:fb:4c:48:75:c1:
cb:20:a2:81:21:3f:74:02:c6:c1:1d:a5:2c:60:ae:84:e1:69:
68:fd:3c:65:4c:f2:1c:13:46:82:41:78:0b:7b:76:ef:be:25:
a9:4f:fb:3c:e9:b1:52:9d:94:f5:95:1b:23:a1:86:5a:1e:12:
73:9e:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:11 2026 by rpki-client