Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier: RLGTvt7c9OAmOUm6MVA0nOqNzRud6Fxzcb5RYB40vag=
Subject key identifier: B4:58:96:71:56:1E:BE:53:AD:9A:61:6E:90:DD:AF:DF:A7:E8:35:31
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 019EB657B9ED22DD246154A40A80EC0D29E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number: 1961
Signing time: Thu 11 Jun 2026 11:01:02 +0000
Manifest this update: Thu 11 Jun 2026 11:01:02 +0000
Manifest next update: Fri 12 Jun 2026 11:01:02 +0000
Files and hashes: 1: 6I-XOJQCbqzINKRTA5FkbiUtVKk.roa (hash: 8IJ1FF4HTyQEaH/mehBRIc6TzRQtROpPJ0AvFUYLeqE=)
2: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: aTsj6oBvKFJWt9MpFFhsVXO4WqN/TeOFf/RFjiKnzYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:b9:ed:22:dd:24:61:54:a4:0a:80:ec:0d:29:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Jun 11 11:01:02 2026 GMT
Not After : Jun 12 11:01:02 2026 GMT
Subject: CN=b4589671561ebe53ad9a616e90ddafdfa7e83531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:ed:4c:80:c0:8e:d9:76:b1:73:eb:63:ac:
3f:2d:24:b2:5f:03:27:96:8a:b9:0a:4a:0b:31:ea:
ab:50:65:a7:34:47:07:e2:b3:88:b0:d8:dd:54:06:
f5:9e:54:65:97:b0:a6:9f:9d:f2:69:c7:d9:5b:ac:
6b:f6:53:af:40:af:c4:ba:e7:5e:c0:e3:41:88:32:
a3:53:ce:c7:03:cf:b4:ed:97:00:dd:62:94:79:f8:
cc:cd:a0:c6:f5:f6:a7:12:51:6c:a9:71:11:cd:56:
2f:ad:5f:66:3f:9e:47:be:b4:47:0e:a7:8b:33:6d:
a8:4d:bf:1d:81:38:69:25:c4:58:3b:4f:93:5a:20:
06:0c:f8:70:09:bc:38:aa:01:19:9c:7c:fc:9b:d2:
2d:27:f9:91:b9:8e:cb:9d:83:79:31:cb:0c:14:df:
ab:97:1a:c5:6c:46:89:22:0d:73:28:0f:48:95:92:
8e:20:9b:8e:0f:6d:bb:ef:90:0f:14:89:f3:22:05:
ae:47:db:1b:c0:83:81:48:29:08:3b:4c:b1:dd:12:
10:c0:ab:ac:1c:bd:37:ad:8b:39:7c:eb:70:11:d9:
b0:e3:7f:ff:1a:41:0f:35:38:3f:14:97:16:9c:5c:
41:5e:21:4f:8b:7f:1f:df:10:48:14:05:39:51:2a:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:96:71:56:1E:BE:53:AD:9A:61:6E:90:DD:AF:DF:A7:E8:35:31
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9b:55:49:91:0a:89:aa:54:66:97:d4:4d:7f:83:f0:c5:4c:
74:70:75:23:18:45:a8:d1:2d:88:40:8e:29:39:cd:2f:c6:be:
b5:e8:57:63:7e:88:5b:3c:48:e9:a3:ae:68:58:b1:64:de:41:
5c:45:95:a1:d2:ef:5a:df:ef:7a:3a:e5:42:fd:d9:fc:c2:18:
b1:94:cc:a9:08:04:fb:b4:1b:c3:a0:46:2f:eb:08:13:99:94:
61:a9:0e:62:cb:cf:05:7f:62:1d:5f:ef:7b:40:9d:20:30:d1:
88:74:3b:a5:3f:1a:83:e0:da:ea:18:6e:dd:c2:51:a6:ab:2d:
83:02:59:8d:6e:ee:ba:51:da:99:ae:c7:1b:30:ba:c4:16:0f:
ee:52:d6:09:ce:58:81:c7:28:25:05:5b:06:de:71:0b:9b:c4:
85:bf:4e:d9:c3:b8:1f:4b:fd:cc:14:3f:9a:e5:ee:b5:62:f2:
17:34:bb:66:9a:f5:dc:7e:0a:0e:2f:c5:49:43:68:61:52:81:
c4:65:d6:bc:1d:99:79:ef:6c:bf:c6:06:9c:ac:0a:37:21:9d:
6b:00:df:c1:b5:7f:93:0a:c8:06:07:68:e0:b2:5c:09:4b:7d:
98:57:19:cd:4d:7d:25:ff:e0:51:fc:59:c5:fa:8f:5b:3d:4b:
fa:21:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:34 2026 by rpki-client