Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: LmSHUYK7jqfitfNroUJTBqkbK/BEI4vnHkceOnaorBs=
Subject key identifier: 48:8D:3B:4C:7A:0A:B9:30:78:EE:1F:6C:44:AE:5F:5C:C4:08:51:99
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 01A06D94D390A843502479DB14CFF41DF2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:05 +0000
Manifest this update: Fri 04 Sep 2026 18:01:05 +0000
Manifest next update: Sat 05 Sep 2026 18:01:05 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: 71mzQoXWu2P3mtGhUXcooMAqa+PohizG/ummDuXod3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:d3:90:a8:43:50:24:79:db:14:cf:f4:1d:f2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Sep 4 18:01:05 2026 GMT
Not After : Sep 5 18:01:05 2026 GMT
Subject: CN=488d3b4c7a0ab93078ee1f6c44ae5f5cc4085199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:c1:5f:f2:b9:19:21:63:dd:64:2a:0a:57:
9d:7c:c9:12:4d:1a:a0:a4:0d:e3:ef:88:4c:98:78:
3e:06:7a:91:a4:54:60:23:61:29:d2:81:92:29:db:
0c:d4:53:59:6d:60:05:60:f9:00:62:42:29:e0:09:
31:de:53:3a:82:40:f9:59:d7:2f:70:5e:56:58:8c:
11:b2:01:e1:15:d4:1b:ff:7a:4e:33:55:ec:c4:1a:
af:07:f8:26:ec:ff:77:67:a4:bf:19:00:a1:0c:f9:
6c:13:1e:58:ba:6b:12:49:14:27:a5:b0:c8:f1:2a:
83:2b:a3:27:ec:a0:a5:70:94:df:3a:e2:2e:e1:6c:
f6:b4:40:8b:bf:f7:b2:fa:e3:26:a9:fd:5b:2b:f8:
ab:f7:68:55:0f:14:0d:f6:49:9f:45:d7:03:6e:98:
ce:3d:6b:17:04:a3:f7:97:d4:14:4c:f3:e8:73:5f:
fe:30:9d:bb:39:ab:54:d0:3c:7a:75:2c:ab:dd:ce:
8f:38:29:1e:91:8a:1e:28:ca:e3:bb:6f:36:e5:ac:
c1:20:2f:c1:1c:21:93:d2:0b:69:44:de:b1:bc:72:
69:ac:23:6d:af:54:68:53:df:b5:be:4e:44:d7:7c:
1e:02:34:97:e3:83:71:b9:99:46:d8:75:fb:35:42:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:3B:4C:7A:0A:B9:30:78:EE:1F:6C:44:AE:5F:5C:C4:08:51:99
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ea:f4:3d:fe:ff:84:5b:de:fa:00:bf:cd:5c:7c:79:58:4d:
e2:b9:1d:f1:34:25:69:f4:64:26:7e:d3:8d:d5:49:15:ba:a7:
a2:77:dd:a9:9c:47:f8:f5:11:1c:4f:7e:ef:0e:3e:44:b1:88:
57:a3:9a:2b:48:cc:ed:9c:8f:8c:ac:9c:7f:70:80:56:f2:1c:
17:10:ce:05:ae:74:70:93:81:51:02:79:52:f0:8b:86:21:4c:
19:b1:37:7d:2c:ad:e9:af:39:7d:4d:f6:14:cb:9a:21:4b:31:
e8:94:49:b1:1c:f8:33:1a:f6:c9:d1:d1:d0:be:f3:ef:b4:97:
da:38:22:61:ed:6a:b7:f9:f8:6a:5b:4c:7f:76:68:f1:0b:76:
0a:a4:28:cf:7a:d3:30:96:0a:bf:3e:6f:0c:9c:b7:cb:53:b1:
20:0d:8e:37:e1:29:ad:c0:10:bf:b8:d7:f8:aa:46:10:1c:66:
1f:63:4c:bc:81:fa:31:d8:1d:f8:7d:12:90:3f:8d:eb:11:55:
ef:ef:1e:56:d7:da:c3:4f:59:82:4f:d0:01:d9:6b:3a:ce:b6:
91:09:53:1a:81:87:e1:8f:e8:ac:2f:dd:55:4a:49:c1:fc:00:
c9:84:fd:2d:3e:a7:68:31:d6:2b:a5:97:d9:78:d1:a4:b4:3c:
b0:f2:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:34 2026 by rpki-client