Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: 7QDRg2tFGu1Rbz+suw9TvLFn/gaUzt00MTNgUocRms8=
Subject key identifier: A7:FD:3B:3B:DD:2A:E6:68:EC:E2:14:8F:35:8F:6B:E2:89:32:66:5D
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 01A1705C2B5130CB4B97304A4DF662D5B175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: 0138
Signing time: Sun 25 Oct 2026 00:00:50 +0000
Manifest this update: Sun 25 Oct 2026 00:00:50 +0000
Manifest next update: Mon 26 Oct 2026 00:00:50 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: wIlhOcy3895F4/WzopSGWkAQ/JCBCKAutUmqBVSrTuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:2b:51:30:cb:4b:97:30:4a:4d:f6:62:d5:b1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Oct 25 00:00:50 2026 GMT
Not After : Oct 26 00:00:50 2026 GMT
Subject: CN=a7fd3b3bdd2ae668ece2148f358f6be28932665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:06:d0:ff:8a:6f:2f:4e:ee:61:4b:88:1f:
a2:9c:7e:4a:7e:bf:6d:e4:62:c9:6b:a4:5a:c1:8a:
eb:fa:b2:3e:c1:75:60:09:30:0e:e9:cd:62:2a:84:
6b:66:ee:4b:28:a0:61:61:bb:5e:b2:9f:a1:57:d1:
f4:9f:b3:44:56:dd:9b:f6:54:a0:c7:72:d8:3e:d9:
cb:08:1e:7b:13:7b:12:96:c1:88:bc:ee:89:62:4c:
d1:b0:d5:bc:7a:09:ee:9e:26:12:0b:82:89:f4:2f:
81:6a:16:38:e4:fe:92:0d:19:01:15:15:eb:b7:97:
36:56:ca:40:67:8d:bd:04:6c:0b:d2:b7:a4:af:98:
9c:ad:e6:23:8d:dc:3f:71:96:93:a3:66:38:78:c4:
f8:e0:c3:97:d5:a7:ed:70:ec:ae:0f:7c:43:6d:c4:
91:64:ee:7b:34:fa:68:ca:7f:f5:fe:c1:ad:78:94:
e0:4d:dc:3d:18:9c:ab:4a:0d:31:87:74:dc:97:4a:
7c:9f:22:62:bf:d7:b0:a9:46:d5:b5:c9:e2:c0:df:
d9:8b:d1:d5:93:4e:15:1d:9e:66:b7:7e:6e:b4:3e:
7e:8c:2f:1f:36:ce:42:28:dc:35:d7:7b:88:77:27:
8f:de:d1:06:bc:20:79:6b:bb:6f:ed:11:e3:f6:65:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:3B:3B:DD:2A:E6:68:EC:E2:14:8F:35:8F:6B:E2:89:32:66:5D
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b4:f0:10:e7:e5:13:b1:e3:42:b1:09:6b:60:5b:fc:98:d9:
03:10:53:fe:90:54:74:14:3f:51:92:d3:33:55:15:42:0a:bf:
cd:ad:44:47:ad:61:e8:23:40:92:da:1e:9b:ec:4b:63:bb:6b:
06:1e:73:66:e9:0d:9c:f8:ec:9b:e1:03:c5:98:1b:61:6c:72:
14:78:7d:c4:c3:e3:45:fa:38:d6:df:af:57:1f:c3:db:a1:37:
7b:6a:f5:80:18:94:56:c0:f4:95:6e:82:9d:c6:09:14:73:7c:
1c:ea:75:c7:54:86:12:e8:cf:ea:44:9a:7a:33:0d:23:4f:47:
d1:b5:92:6e:66:40:10:21:2e:67:87:4b:20:37:1f:e6:5b:11:
fa:25:ad:6f:d8:2f:7f:c9:30:e1:6d:7b:36:12:f2:54:f2:e9:
17:35:a3:36:c4:2d:0b:fa:1a:4d:fd:52:77:13:56:76:31:f0:
f3:67:9b:31:a9:74:ea:12:77:fc:b2:47:97:6f:20:2d:24:7d:
38:6b:72:f1:22:c5:31:5f:11:fb:c9:3b:c5:c7:d2:6e:c8:1c:
a4:b7:f0:38:80:5f:35:40:d9:0a:a4:70:02:1e:d0:bb:90:15:
f8:cb:a5:7f:54:8d:a8:3f:68:8f:9b:ba:75:60:54:fc:fc:20:
4e:58:3f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:41:45 2026 by rpki-client