Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: U/6snMlf375m1cj4XKZe/a05mKct+11ASAC//Lxp+HY=
Subject key identifier: 3E:22:B6:B4:AA:5C:8C:8B:37:0A:4C:C1:90:61:11:D4:49:76:81:4C
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019E7BF9F83047A8190E81DB6A34626201EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 0863
Signing time: Sun 31 May 2026 03:00:40 +0000
Manifest this update: Sun 31 May 2026 03:00:40 +0000
Manifest next update: Mon 01 Jun 2026 03:00:40 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: d9ScevRJcCnzdxR0HSVgr3Buo7/nGlR39GH39SLwrf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:f9:f8:30:47:a8:19:0e:81:db:6a:34:62:62:01:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: May 31 03:00:40 2026 GMT
Not After : Jun 1 03:00:40 2026 GMT
Subject: CN=3e22b6b4aa5c8c8b370a4cc1906111d44976814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:f0:6d:6a:4c:72:0f:a3:1b:28:9b:13:28:
be:66:bc:1b:09:d2:9b:e7:41:5d:15:0b:ee:06:e4:
37:fd:3c:c0:2d:16:2c:12:f9:d4:9e:82:2e:86:d6:
8b:2a:1b:21:b1:3e:9d:24:ea:50:06:ee:fc:92:7f:
f6:3b:51:45:74:ab:08:08:84:ff:58:8b:56:7d:09:
18:9b:05:42:2e:d1:35:a3:06:09:be:8c:7f:a4:07:
5f:fb:b9:8f:8a:3e:1a:8a:eb:a4:b9:5a:d5:27:80:
03:6e:32:4e:7f:f7:9a:9d:59:b0:58:82:93:d5:6e:
47:af:95:53:91:2d:d5:ea:f9:2b:23:5f:1d:d1:fa:
7b:dc:c3:78:4d:d3:61:a1:57:65:ff:5f:a4:91:f2:
37:d4:d1:a8:3a:1b:66:ed:ea:06:12:61:12:bf:f3:
bd:f8:f5:91:db:8c:04:c2:fc:92:da:b9:3b:0d:41:
ea:0f:86:00:eb:8d:bb:5a:54:f3:cf:fd:44:c9:f7:
fd:a9:08:58:bb:70:73:44:4d:cf:2c:42:dd:30:65:
89:0b:f2:d7:30:28:a0:96:01:49:77:d3:93:63:0b:
e9:6b:ac:c3:22:db:12:7c:73:8c:06:b2:59:b0:a4:
fd:13:da:ef:95:23:ff:7e:d9:6d:07:fc:2c:e8:a4:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:B6:B4:AA:5C:8C:8B:37:0A:4C:C1:90:61:11:D4:49:76:81:4C
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:28:12:85:e1:f6:e9:04:64:19:5b:86:67:6a:79:90:b2:
74:c2:45:cb:ac:60:c0:af:f9:f9:05:2b:40:9d:e0:ef:4a:28:
92:d0:2d:1a:e0:8e:fb:b8:01:a5:d4:6b:a7:96:78:2e:08:c7:
bb:37:d4:03:4d:eb:f1:36:cf:51:8a:14:b3:7b:28:76:37:5e:
53:4e:43:74:19:12:b2:4b:51:a9:6b:26:c3:66:3a:ac:d6:a3:
d8:89:13:7a:df:27:66:5a:65:8f:bc:1d:56:25:34:00:b0:b6:
25:98:fc:55:c6:0a:bc:c2:89:0e:12:21:ee:8e:6c:17:50:2b:
e0:d2:36:ec:d4:65:57:8e:21:8d:a8:c6:1d:47:cf:2c:75:7e:
f3:43:a9:a0:00:9b:8b:f1:83:8c:a7:70:5a:db:2d:cd:e3:3e:
3c:74:5e:50:f1:4f:7f:53:7a:5d:52:59:8f:92:a7:75:a0:ac:
86:74:66:1c:63:1f:51:d0:3f:47:2c:5c:77:92:82:5f:02:93:
d8:b4:91:71:57:32:d4:66:fc:77:b6:47:fe:36:d9:66:11:d5:
e1:a9:b6:99:2e:2d:2f:48:08:fb:7b:49:e7:a3:e6:b9:c4:8d:
92:dd:a8:3f:a8:b6:c5:aa:b7:dd:e7:10:71:0a:fc:02:7b:e3:
be:85:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:20 2026 by rpki-client