
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: F2jKkv1DrSMIjXiYNFyS1YC47cwxvdPmHZDBI2lFDXk=
Subject key identifier: 1B:4C:BE:00:88:DD:71:C4:EB:10:FD:5C:F9:6C:8D:4E:45:A1:0F:41
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019F65A6A0B2AD09F2534AB652B0A41BA8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 08DC
Signing time: Wed 15 Jul 2026 12:00:46 +0000
Manifest this update: Wed 15 Jul 2026 12:00:46 +0000
Manifest next update: Thu 16 Jul 2026 12:00:46 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: J8kxz0+Pdmt1H8B8c7y4+GO2qek1nApL3L0DLDzeQw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:a6:a0:b2:ad:09:f2:53:4a:b6:52:b0:a4:1b:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Jul 15 12:00:46 2026 GMT
Not After : Jul 16 12:00:46 2026 GMT
Subject: CN=1b4cbe0088dd71c4eb10fd5cf96c8d4e45a10f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:a3:8c:6f:5c:ad:ab:52:28:bd:7d:e4:05:
88:fc:5e:2c:3f:c0:55:fa:4b:21:fb:b7:98:a0:e6:
33:e3:c6:57:07:ba:34:04:c5:61:33:f3:68:4e:1b:
1b:55:fe:73:62:4d:3d:74:d3:c5:c3:68:e6:f3:3d:
cb:80:87:98:1e:f0:e3:15:e5:5b:cd:2d:21:17:2c:
bc:c5:90:c8:57:f4:ce:9a:8c:aa:1b:52:8a:93:e6:
8f:e5:bc:f9:eb:67:ff:11:d8:0d:74:47:00:f6:68:
c3:3f:c7:95:ee:8d:81:4f:d9:40:57:92:75:c8:ff:
f8:09:a6:9a:64:9f:4b:e4:5b:04:aa:41:00:a2:2f:
66:1e:0d:26:1e:70:ee:36:5f:63:ad:86:f4:c0:0c:
b1:82:89:6f:5f:bf:8b:7b:ab:99:3d:df:85:76:6e:
7b:01:4c:71:45:62:73:1e:9c:de:7d:47:48:ca:d8:
f9:c3:5f:62:8c:0a:f3:28:d2:e1:9c:17:19:f9:cc:
d9:7e:b1:8f:ba:e0:15:65:e8:2c:45:57:1e:73:b8:
de:36:9f:f9:f2:c6:e6:0a:96:c2:15:e6:9d:5c:c3:
da:31:c6:f5:62:d7:fb:e4:9e:96:fe:8a:41:d6:77:
35:ae:16:d9:fb:e1:60:44:6d:b4:0f:23:e8:96:f0:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:BE:00:88:DD:71:C4:EB:10:FD:5C:F9:6C:8D:4E:45:A1:0F:41
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:56:4a:6f:ce:55:1b:d5:2b:a9:f8:41:9a:e4:44:c7:e7:
11:bc:22:36:78:f1:de:06:d1:33:64:43:9c:81:aa:bb:28:ff:
54:d8:fa:e1:a0:b1:59:2b:5e:d4:0a:6b:16:a5:61:e9:f6:de:
f2:9a:2e:68:8a:61:53:02:fa:4c:08:ac:d0:55:aa:da:a0:5f:
2b:a4:ae:b4:57:3a:ed:70:58:f5:be:3e:b2:39:35:fc:1e:c9:
3c:74:a9:02:e6:c5:42:cc:0f:b8:35:58:da:9e:48:08:c8:04:
5e:bd:ba:f4:b1:c2:0d:2f:6b:a7:3f:8e:3e:dc:99:11:54:9e:
a0:62:ac:52:1d:c1:3c:e1:b0:5d:9e:43:a4:aa:76:9d:80:4d:
5e:fc:2a:81:13:5b:37:44:ee:b9:3f:d2:9a:70:2a:9e:5d:54:
fb:51:bb:03:ce:b1:1b:85:f1:ea:02:fc:79:69:84:58:45:48:
4c:03:5c:3a:c3:61:93:30:69:c9:b5:f8:1d:68:6a:85:2b:36:
30:b6:2c:98:3d:a2:65:1e:bb:d3:9b:e1:99:e7:9e:50:51:d0:
57:ba:14:73:09:64:24:c7:7a:79:5a:b8:d7:dd:35:9f:42:95:
88:8c:6d:a1:6f:a4:4c:7c:14:30:aa:65:85:42:98:ac:5e:48:
0c:59:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:38:06 2026 by rpki-client