Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier: v5HzqhjaOQ98nZQ+qt0GUxDp9+b7ipKpMbpQAPtTCH8=
Subject key identifier: 7E:A9:68:14:C6:D3:F4:EE:A4:D5:19:52:09:F4:40:58:89:01:38:16
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial: 019F8BA14AFFDC3024881C031292757F169B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number: 02A3
Signing time: Wed 22 Jul 2026 21:00:31 +0000
Manifest this update: Wed 22 Jul 2026 21:00:31 +0000
Manifest next update: Thu 23 Jul 2026 21:00:31 +0000
Files and hashes: 1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: x9frpb56aZQ4d5rW4sq6KxuuaK3d2x4uNnNClt48TQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 20:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:a1:4a:ff:dc:30:24:88:1c:03:12:92:75:7f:16:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
Validity
Not Before: Jul 22 21:00:31 2026 GMT
Not After : Jul 23 21:00:31 2026 GMT
Subject: CN=7ea96814c6d3f4eea4d5195209f4405889013816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:26:3b:8d:fc:af:02:a6:fa:26:b6:ce:ca:
72:01:c5:8d:de:06:63:25:d6:01:98:5f:af:76:f2:
f7:cf:d0:ce:64:a2:7a:30:4e:90:3e:f2:a6:c4:1d:
66:f1:cb:24:33:f0:02:17:08:dc:a5:bb:76:55:e6:
d9:92:16:e0:c6:61:1f:aa:ae:a1:4b:84:ec:8c:af:
98:9d:92:20:b6:b4:71:10:82:ed:74:99:cc:37:c6:
d5:7e:87:a3:96:44:1e:3b:1a:7a:09:27:2c:c5:84:
51:b4:59:60:64:92:9d:04:0a:d0:43:2b:8d:9a:8f:
84:4b:c8:27:22:fc:32:60:6f:e4:e3:0b:4b:fc:29:
67:ba:c6:41:ee:48:dd:fc:a5:76:3f:f3:92:af:b5:
8e:22:6d:30:ce:66:d7:47:f0:d2:f3:e4:f2:2f:d3:
66:98:1a:cf:ac:80:b7:93:b9:13:86:ad:31:54:5f:
75:24:0c:73:ed:e3:fd:b6:f8:81:04:5c:ed:dd:b2:
8a:b2:0e:7a:33:e1:f1:40:8c:06:0d:e5:4c:3e:38:
62:b7:99:a7:de:dc:e5:df:4a:ee:1c:f9:8e:5d:e1:
28:21:fb:be:3c:ad:c9:f9:d7:14:d6:43:ae:4e:4a:
dd:39:3f:59:67:5f:dc:91:d7:ff:5b:f7:0e:e7:f8:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:68:14:C6:D3:F4:EE:A4:D5:19:52:09:F4:40:58:89:01:38:16
X509v3 Authority Key Identifier:
keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:33:e8:76:39:8b:29:4e:69:0a:11:3e:a6:34:3d:3b:f8:f6:
f9:5c:ee:32:72:f8:a4:49:40:b1:a5:ba:72:5f:2a:1f:9b:c2:
21:12:c3:f6:14:44:e2:25:e0:99:76:ec:c0:92:21:04:c4:96:
a8:2d:52:e1:5e:17:48:0a:44:74:fe:94:23:a4:5f:c7:0d:0d:
dc:11:f7:af:87:8b:10:28:0e:02:b8:27:23:b0:35:48:93:30:
43:34:b2:c9:dc:f6:d0:ea:3b:63:36:f5:a8:ea:24:b1:4c:f0:
2c:7d:27:8a:38:af:f0:f5:99:f6:cf:33:9f:68:25:69:3c:4c:
e7:d6:24:59:c3:13:aa:7c:c9:a7:8c:12:34:c1:02:f0:cd:ae:
80:90:7c:00:8e:b1:72:8e:56:d8:53:6a:d7:9f:c0:5a:03:17:
80:26:9a:14:37:b1:70:37:d7:9b:e8:e8:1a:0d:70:7c:c6:5c:
d9:cd:f8:e5:f4:64:26:72:f3:4c:c7:83:c6:2c:22:fc:f7:8e:
41:87:3a:57:a9:4c:36:11:26:fc:7b:52:61:3f:94:8b:bb:66:
75:4f:13:4c:52:72:20:6e:f5:11:f0:a1:78:06:cb:4d:73:45:
72:95:1e:1b:ec:5c:8f:9d:f1:72:84:58:18:03:4a:7b:1a:b6:
2f:a9:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 02:01:19 2026 by rpki-client