Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier: yR2NwhUC5t2yXrhz8tuVfxSUCgrLyUgxb39q+SLnL7c=
Subject key identifier: 78:4A:A3:A9:B5:EE:6E:10:A9:3F:BB:27:F5:AE:6B:7E:AC:40:D4:4E
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 01A105B81C8E98BE227E711CEDE025A95BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number: 1029
Signing time: Sun 04 Oct 2026 07:01:53 +0000
Manifest this update: Sun 04 Oct 2026 07:01:53 +0000
Manifest next update: Mon 05 Oct 2026 07:01:53 +0000
Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: CJ6tqQAnsn8zld25AXWeWi5bKCwyKx9RU5N673QgR6w=)
2: xTiLnHWcIQBHKnAP3nk781_h0ew.roa (hash: mpbRYgyuoRfIkLm2Fm4iWJpaOkfkeiX8G2PJJeVWGQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b8:1c:8e:98:be:22:7e:71:1c:ed:e0:25:a9:5b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Oct 4 07:01:53 2026 GMT
Not After : Oct 5 07:01:53 2026 GMT
Subject: CN=784aa3a9b5ee6e10a93fbb27f5ae6b7eac40d44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:28:ee:9b:95:1b:31:f6:a1:8a:d3:d2:cf:96:
8b:a5:dc:75:c7:74:65:73:18:b5:6d:d4:43:57:fe:
61:9f:1b:83:3c:69:b9:67:24:76:a7:36:f1:68:35:
28:1a:fa:2e:5d:c1:8a:e9:1f:09:fd:60:58:fd:37:
4a:35:00:86:fd:ea:e1:94:e3:57:3e:ec:bc:46:fc:
50:1c:f8:65:da:ed:04:be:86:f4:82:29:de:7e:de:
3a:81:58:fa:a4:9f:b6:b9:6f:3f:21:46:3e:45:b4:
27:26:46:bf:68:b1:75:24:8d:81:f3:ab:c3:9f:3c:
ef:1f:a7:75:21:52:cf:f0:1d:37:1c:3e:f9:48:31:
77:ef:59:63:cd:e6:26:03:bb:c0:87:6f:a2:1a:84:
05:9c:15:70:8a:3a:46:c1:a1:93:ff:af:ef:fc:a2:
12:23:f0:b6:b5:7e:1c:4f:9a:d0:c5:44:ec:23:4e:
1d:e9:f3:33:8f:d2:69:75:55:29:90:cd:08:ae:f9:
70:64:c6:26:45:1c:e7:ab:77:2d:24:15:2a:b2:91:
c8:7a:f3:5b:bf:30:95:04:74:f4:3e:ef:9b:6b:2e:
6f:90:bc:cc:c6:74:4a:fa:9c:7a:c4:88:de:ef:8a:
d2:02:e0:ab:e5:9e:c0:03:ee:d0:0c:23:02:26:f8:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4A:A3:A9:B5:EE:6E:10:A9:3F:BB:27:F5:AE:6B:7E:AC:40:D4:4E
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:30:08:6c:e7:58:ac:5d:8d:21:d1:3c:24:05:3c:84:e1:0e:
ea:e7:3e:b7:9b:dd:99:84:e6:5e:f4:ae:3d:2a:5d:fa:68:48:
80:80:6a:25:21:85:56:02:7f:39:d7:39:ab:e0:63:c8:67:ee:
b3:ba:17:70:3e:0d:75:9d:9c:f0:19:27:4b:a2:cd:be:c0:bf:
e3:99:ee:ca:df:89:68:e5:30:06:d2:9a:de:fa:1d:d9:33:e5:
be:16:74:43:b4:17:4c:f2:3d:d8:9f:33:29:3b:2f:b8:82:f4:
0f:73:b4:0a:a5:ca:dc:4e:6f:6f:c0:a5:16:3f:bc:3e:72:80:
b7:4d:cc:08:70:71:5e:1f:49:ed:09:1c:e5:c0:cb:be:1e:ab:
7a:fb:cc:ef:b6:de:57:5b:1f:a8:e7:77:60:36:96:cf:a4:8d:
79:ed:e2:95:28:70:f8:c0:77:10:cf:06:81:9b:0a:26:19:e6:
13:b3:b2:aa:33:2b:54:e0:d8:9a:f7:3e:ed:8c:65:f3:76:71:
83:ab:61:e9:ef:81:b5:15:83:c5:cb:24:29:78:36:7c:fe:ea:
d9:d3:26:e0:47:f7:e0:0f:3a:a7:ca:aa:c7:5b:34:79:ff:7a:
3a:73:4e:b7:ba:75:c3:a5:1b:c0:89:f8:80:0e:24:6e:64:c2:
45:e7:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:20:51 2026 by rpki-client