Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: bQN2zdjmBHpvT1x2f7fHgK1NLC63yY3jFKc1QDti3yw=
Subject key identifier: BA:7C:E0:9D:59:5D:DA:D8:57:8D:81:AB:F1:8E:56:4E:21:D2:A5:1F
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 019DCE994D71E3E6D4B6753A672B60C969F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 11:00:46 +0000
Manifest this update: Mon 27 Apr 2026 11:00:46 +0000
Manifest next update: Tue 28 Apr 2026 11:00:46 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: +1jPdG+WrmPps8KQueWhG6TGDpPMRXQO2y/c+SSCuBA=)
2: f3tAelSfrjtbwXNkrU-p9qfZWxU.roa (hash: OShTtHN/eSOshwx4hclkGBY5i0hC3YPjort+nwJu9SM=)
3: kDiYDHMztIHYvDXXzL3WVBFRgRQ.roa (hash: 4/nnDK2ikVBeX90b+2r+JvM3VbUxHJhqZEDdUrk+hj8=)
4: lgASEf8e2wSRk9xbv_20wIJbXDM.roa (hash: OBNbGNbD7TSZJPMMT4UYmjERp8O1mPv9E5azwcAja4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:4d:71:e3:e6:d4:b6:75:3a:67:2b:60:c9:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Apr 27 11:00:46 2026 GMT
Not After : Apr 28 11:00:46 2026 GMT
Subject: CN=ba7ce09d595ddad8578d81abf18e564e21d2a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:5e:c4:69:cb:20:7d:bc:f7:3f:8d:c4:3f:
f6:4f:45:a0:af:7e:59:6d:d5:eb:5f:b2:d7:f3:8f:
55:37:48:47:e0:9f:5a:12:09:aa:2d:1d:e4:80:5a:
5e:c3:ac:60:bc:f6:60:a7:1b:f3:c9:ab:d3:11:e3:
fb:4c:17:72:c1:ec:46:1e:d4:c7:ec:ea:37:e1:b7:
87:30:7c:cd:ee:2f:54:b7:b8:bd:97:4a:ca:9e:d8:
13:82:ca:ae:f5:bb:77:b1:fe:15:52:60:90:96:54:
61:98:df:5b:56:8d:c9:22:92:f3:9e:ba:10:e0:20:
81:2f:b7:d3:30:e8:ab:b4:96:7d:39:24:b5:41:a8:
bb:66:8a:53:dd:98:04:94:de:70:2c:28:bd:96:7e:
54:87:08:5a:6f:e9:19:b4:f3:a2:31:36:de:9a:43:
6c:c3:73:77:8d:cc:7a:61:6d:2e:95:9f:be:3c:5d:
94:e3:c1:44:5f:84:0b:7f:45:ed:66:4b:1a:c4:60:
e6:6a:fe:49:77:6a:bf:4d:2c:fd:cd:8c:07:c1:03:
7e:de:fc:57:a6:8d:8c:93:34:25:5c:94:e0:b5:f9:
fb:6d:e1:6d:52:60:5a:3f:0b:9e:60:6a:da:40:83:
b5:c6:69:63:e7:7e:11:9c:e7:ce:47:be:fb:dc:78:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:E0:9D:59:5D:DA:D8:57:8D:81:AB:F1:8E:56:4E:21:D2:A5:1F
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a1:b9:c4:10:67:62:57:64:58:37:f0:e9:70:85:35:3e:89:
d7:e7:bc:75:9a:ab:7c:bb:e2:1f:1b:6b:e4:2c:83:bc:5a:32:
0f:93:d0:89:08:3e:e8:60:84:fe:02:21:59:00:ea:02:2f:55:
30:46:4a:78:6a:2b:3c:bb:0f:7a:f1:80:0b:eb:56:f8:d1:4f:
ca:a4:c8:4c:49:14:c7:c3:d9:a8:52:a5:8e:db:33:86:5c:59:
63:15:5d:02:ea:55:24:49:d2:95:56:78:85:aa:1f:72:1b:da:
9e:d3:a7:f5:e2:8e:6a:a2:16:64:37:d1:98:95:b5:96:0f:8d:
7c:c5:db:6a:aa:4d:47:51:a4:71:45:24:10:9b:68:e8:7f:b7:
66:54:1b:3b:b4:91:93:d7:3b:83:32:31:c3:e9:e7:32:c9:84:
e0:7a:09:e5:49:3e:81:27:8b:2b:d2:9b:48:59:27:e8:68:fd:
f5:d7:3d:2d:73:52:fb:03:0a:c0:3e:1e:9b:83:ce:41:56:55:
64:02:fc:84:b5:3b:7e:34:75:d4:65:98:e3:e6:03:c5:87:03:
63:02:3d:26:42:23:a1:19:bf:cf:e8:25:20:9d:de:c1:6c:40:
5f:19:1a:9d:2d:4c:6c:70:80:80:fb:82:bc:e1:2f:d5:f3:d4:
02:de:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:32:11 2026 by rpki-client