Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier: 2eX8t7E1K88qrYVqlYRkTh+nRbWjpnIFHRzmwibA3bI=
Subject key identifier: 16:E7:59:3D:DA:8B:D1:61:E4:96:1B:CE:C9:E2:A0:AD:5D:FD:CD:37
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial: 01A08A8D8AFA2DC6357BE395156A07B6A423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number: 0327
Signing time: Thu 10 Sep 2026 09:02:07 +0000
Manifest this update: Thu 10 Sep 2026 09:02:07 +0000
Manifest next update: Fri 11 Sep 2026 09:02:07 +0000
Files and hashes: 1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: PsNqcXpOTmrwZwALR0RXl0eP0DGVzvyJNF61nHSnP4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:8a:fa:2d:c6:35:7b:e3:95:15:6a:07:b6:a4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
Validity
Not Before: Sep 10 09:02:07 2026 GMT
Not After : Sep 11 09:02:07 2026 GMT
Subject: CN=16e7593dda8bd161e4961bcec9e2a0ad5dfdcd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:ec:17:dd:6e:7f:39:44:d1:96:82:bd:fb:
43:2a:1c:ef:a1:61:ce:30:60:ca:01:4e:9b:2a:f9:
3b:e0:03:e5:2e:a4:9b:86:84:8c:c1:b8:6a:33:42:
8a:a3:0c:65:b4:90:80:23:e4:73:e6:4a:a0:88:97:
da:52:9b:41:d9:36:18:1a:1b:26:b6:28:bd:db:d5:
b2:88:91:3a:e2:5a:45:51:f3:4e:de:d0:b1:e8:ff:
8c:d4:0c:3f:0f:4b:d3:a7:92:7b:03:32:f7:5f:68:
63:f8:98:9f:ff:ec:e8:f4:4c:2c:70:1c:76:be:28:
59:86:f0:5d:46:3b:4a:87:28:66:12:60:ef:75:66:
e7:46:4c:6f:ca:87:b7:2f:85:68:af:c8:f1:f5:79:
ec:39:3d:3b:5d:56:e6:58:f0:05:1d:d4:76:04:8c:
4c:a1:4a:32:b4:db:f9:38:39:50:bf:65:5b:20:5a:
89:06:13:d7:cc:f9:19:54:cc:3b:f9:78:38:1c:02:
3f:1e:2d:f0:2b:6c:1d:9e:1b:88:e6:0b:c5:5a:88:
50:bb:76:82:80:e5:dd:cc:be:cb:f9:10:58:68:68:
4c:4f:81:96:1e:cf:91:a9:54:f5:fc:98:ca:c5:b4:
e7:82:14:ba:92:7e:c7:d4:e2:59:98:c7:a5:0e:59:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:59:3D:DA:8B:D1:61:E4:96:1B:CE:C9:E2:A0:AD:5D:FD:CD:37
X509v3 Authority Key Identifier:
keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:89:f3:3c:af:cc:07:28:8d:1a:15:43:ca:80:2c:b5:59:4b:
86:57:12:93:37:01:60:71:68:7a:19:cd:ae:51:9d:36:5f:6e:
49:20:28:41:be:36:94:37:a2:1e:ff:22:15:39:a8:ba:3a:e3:
8b:7d:ac:d1:df:62:5c:f7:6b:96:f4:3a:f2:23:7c:84:ed:57:
ea:d6:ee:e2:3f:8d:ae:9c:03:24:b9:18:12:c2:cc:41:51:cc:
25:06:a7:5a:85:b7:0d:87:3d:57:6e:e6:3c:ba:c5:42:30:2e:
a1:3e:a6:8b:a0:af:45:a2:a2:e1:81:a7:e3:0c:31:50:d7:0c:
d2:49:fc:3e:60:58:5a:f0:b6:d2:c3:03:cd:18:20:6d:a3:60:
a5:98:69:c2:96:b0:e8:09:2c:4e:d6:0d:7e:d9:52:3f:7e:6b:
4e:49:f1:b4:fb:f8:7e:d1:11:af:e1:f1:04:40:e0:81:74:8a:
37:4e:89:17:ec:70:92:05:88:15:bf:60:dc:e4:4e:cd:a5:70:
36:87:36:6e:2b:86:39:70:0e:83:a7:15:16:05:93:fa:c5:d5:
d2:3d:6e:e9:5d:b0:f6:8c:4a:36:5a:6d:f7:c9:c5:81:9b:b4:
7e:37:5c:43:f8:5b:0e:b9:41:5d:cd:3e:49:8d:00:7c:c7:76:
ce:c4:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:13 2026 by rpki-client