Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: hmFQgjsJzXOYKAn2p1kbyUNz5BMrxJsneTYYTyYLlp0=
Subject key identifier: 1C:9A:24:0C:51:29:21:32:0D:3E:F7:C5:3A:D6:3B:06:3B:DE:01:FA
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 01A09C93363E64AE82CB9CEA503D7394FBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 097D
Signing time: Sun 13 Sep 2026 21:01:28 +0000
Manifest this update: Sun 13 Sep 2026 21:01:28 +0000
Manifest next update: Mon 14 Sep 2026 21:01:28 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: AU1iGkhLe8tsi8u5roRWohsDU+Un5t6nN+432OeGNyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:93:36:3e:64:ae:82:cb:9c:ea:50:3d:73:94:fb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Sep 13 21:01:28 2026 GMT
Not After : Sep 14 21:01:28 2026 GMT
Subject: CN=1c9a240c512921320d3ef7c53ad63b063bde01fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:4b:5d:14:22:0f:33:ed:5f:02:f1:43:28:
c3:c5:51:fe:e3:ca:16:3f:b5:d5:64:1c:45:05:9e:
fe:bd:a6:5f:35:7d:4e:ab:0b:99:5b:bb:b7:0a:ec:
38:af:d6:09:4e:02:50:22:2d:74:fc:d1:e1:ea:8d:
fa:d5:db:fe:5c:e8:83:b4:13:f3:1c:f2:04:f8:81:
a7:d9:38:e8:4b:68:dc:8f:8e:27:4a:3a:27:ad:34:
ee:71:a0:7e:4d:a3:53:5a:a6:70:58:a1:c3:7d:03:
a9:b0:1b:de:ee:8a:0a:e1:9c:07:27:11:2a:ed:86:
77:ca:ff:17:df:74:00:3a:88:67:70:3a:63:cf:05:
ee:54:82:2c:84:63:ff:fb:fa:02:75:24:e5:54:08:
85:c9:d1:5c:5a:1c:14:96:88:a0:39:fb:b5:f7:e6:
3f:f7:b4:42:a5:f8:b6:14:bc:56:23:28:c6:a5:ae:
58:3b:b6:3c:01:cb:ce:87:32:f8:3c:7f:dd:42:6f:
4e:62:84:26:b7:20:6a:5b:28:c8:28:70:0c:a4:a0:
9a:ba:0c:75:ba:92:6a:78:60:33:6d:8b:dc:e0:9a:
17:26:17:1d:18:50:7e:f2:49:22:6e:4b:16:2f:57:
b2:71:77:25:9a:cd:da:a9:41:0b:6e:49:84:b5:db:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:24:0C:51:29:21:32:0D:3E:F7:C5:3A:D6:3B:06:3B:DE:01:FA
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:53:69:f5:c3:a7:f3:d8:80:f6:fd:3e:44:fd:ee:f2:ab:57:
8e:67:49:e7:5a:0b:27:ad:59:e5:f4:a7:69:c2:f9:08:09:52:
bb:46:50:89:67:f9:e1:68:b6:bd:39:8e:e4:ba:55:59:58:d5:
ab:e5:05:3b:7b:3a:a9:bc:ee:41:11:8d:8e:07:68:21:bf:4b:
be:1c:79:68:c1:bb:14:a4:7f:c5:3e:85:0e:47:b9:cd:5c:32:
fa:73:06:c3:92:26:33:b7:06:5e:54:bd:33:0e:5c:f8:a1:e4:
11:b8:b0:a3:ac:26:ce:b8:44:8c:c9:8f:91:f2:02:7b:98:d9:
40:c2:55:e4:59:7d:9d:87:37:6c:f4:d1:09:e4:43:02:20:96:
1e:85:86:40:1e:9d:84:77:88:4b:70:60:8a:55:fe:e7:dc:39:
d0:77:2a:7b:8c:99:60:64:c0:6e:31:e0:1a:8a:97:d9:b7:d9:
a7:da:4a:85:f2:26:fa:2d:1e:12:96:25:2f:ac:6a:a5:6f:69:
c3:8b:7e:64:85:90:b0:06:01:79:30:39:6d:00:88:19:85:32:
1d:6b:47:6a:bf:2a:28:d7:76:12:b4:a5:db:49:d9:39:06:67:
0f:bb:52:f6:ae:32:0b:27:dc:f7:c2:6e:bf:e1:3b:35:19:9b:
f7:dd:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 07:31:53 2026 by rpki-client