Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier: kvLM+ixVJ2TXPpVm5I4jaI2s1bUGBDtYdOyHV5ufn1A=
Subject key identifier: 22:87:68:97:66:6A:20:4E:5A:B6:B1:40:08:1C:96:58:0B:56:1C:88
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial: 01A08C7BF14C870D1C814BF5F82E1F61D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number: 0328
Signing time: Thu 10 Sep 2026 18:02:07 +0000
Manifest this update: Thu 10 Sep 2026 18:02:07 +0000
Manifest next update: Fri 11 Sep 2026 18:02:07 +0000
Files and hashes: 1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: ysziOyxLw2ZqakrdZVyewfAnSMTWDwfCqcUH0md/2Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:f1:4c:87:0d:1c:81:4b:f5:f8:2e:1f:61:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
Validity
Not Before: Sep 10 18:02:07 2026 GMT
Not After : Sep 11 18:02:07 2026 GMT
Subject: CN=22876897666a204e5ab6b140081c96580b561c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:89:56:bb:29:76:f8:d9:96:e4:93:da:da:65:
ac:15:9d:a0:6b:e3:22:3a:87:d8:ab:46:1c:ac:6a:
b9:25:f7:5d:29:e4:11:f2:7c:5f:03:12:aa:d1:af:
32:5a:e8:5f:4e:3e:f1:6c:db:73:c3:fa:fa:f0:5c:
42:9e:66:8b:dc:3f:ac:00:95:a7:2d:d1:12:b7:1f:
68:60:53:a4:19:5b:6f:c7:0b:4c:02:fa:69:82:50:
81:09:05:b1:9e:49:1d:35:83:67:90:23:05:7c:e6:
8a:be:8b:3a:ea:68:e7:6f:51:70:25:d7:a9:d1:c1:
d4:eb:73:9c:7f:1e:a9:94:88:f1:0f:f2:a9:59:27:
d4:04:8f:83:05:82:dd:34:50:c5:94:f8:d7:c4:95:
47:0e:f4:ac:8f:c3:76:d5:77:be:27:db:83:45:aa:
9e:76:b4:f0:e1:11:98:3e:35:d9:8f:57:75:de:4e:
fb:ba:79:4d:53:ae:8c:b4:31:46:03:3c:89:30:32:
59:8d:c5:44:e5:1a:b2:a7:db:54:c1:90:14:e0:42:
cb:00:b1:b5:1f:12:1d:54:39:71:92:17:3a:5d:a5:
44:f3:72:ed:48:1e:fc:9a:32:91:8f:7c:eb:00:d2:
88:09:5d:88:06:f2:e2:83:7a:45:fe:0d:54:0b:73:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:87:68:97:66:6A:20:4E:5A:B6:B1:40:08:1C:96:58:0B:56:1C:88
X509v3 Authority Key Identifier:
keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0c:0b:64:34:3e:1d:2a:55:01:59:df:d0:27:27:be:78:34:
7b:06:db:db:f2:a8:31:12:44:e6:66:89:f7:6b:52:8f:05:91:
96:bf:2f:5f:ba:2b:f6:5c:52:91:20:22:2e:5a:52:1b:7a:0b:
24:d6:e6:6a:0f:6f:21:96:e2:69:c5:c6:e1:a5:af:62:0a:ea:
55:a4:a9:a8:34:cf:b8:5f:e7:8e:5d:d3:9e:5d:60:00:0c:cb:
50:0a:8b:b6:43:06:3f:8e:d3:47:64:0e:df:48:15:30:54:3a:
22:68:84:91:90:38:cb:23:ef:a5:10:21:cf:4b:0e:5a:a6:a6:
1a:20:80:38:d5:c5:bd:ae:97:76:4c:96:c5:f6:1b:35:99:83:
42:78:50:28:a6:a8:7a:50:8e:d0:03:41:a4:db:d4:99:2d:8b:
9c:54:df:75:30:72:fe:78:66:29:bf:78:95:68:a0:54:ee:06:
65:c5:80:f0:29:5d:60:c2:a1:7c:e7:6b:a4:8f:ce:44:fd:4c:
5f:ea:05:4e:19:c9:c0:bd:a3:88:ce:6a:cc:cb:d0:c8:ed:eb:
c3:2e:25:71:34:5f:3a:76:ac:2c:d0:cc:d3:f4:db:89:8b:80:
62:fa:03:6f:d8:b5:26:90:ce:02:18:4b:55:09:c5:65:88:95:
c1:d1:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:36 2026 by rpki-client