Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File: mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier: j2fNtGfHVYEGILnV4CfFJ+XN1aArb035tgFyBvPrO9I=
Subject key identifier: DA:E0:47:75:2C:B2:C0:D5:A3:A4:18:FD:84:32:05:E5:00:6F:2B:1F
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer: /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial: 019DCC3D48CE675667B5FF952172ED76EA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number: 81
Signing time: Mon 27 Apr 2026 00:01:01 +0000
Manifest this update: Mon 27 Apr 2026 00:01:01 +0000
Manifest next update: Tue 28 Apr 2026 00:01:01 +0000
Files and hashes: 1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: lBme2laJiZ5EyDQDfokPtYyKZM8kqphg7Q0jliUhkaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:48:ce:67:56:67:b5:ff:95:21:72:ed:76:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Validity
Not Before: Apr 27 00:01:01 2026 GMT
Not After : Apr 28 00:01:01 2026 GMT
Subject: CN=dae047752cb2c0d5a3a418fd843205e5006f2b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:6f:ef:66:a4:04:8b:05:6b:35:57:9c:ce:
57:6c:b3:1d:04:74:0f:c8:8b:6d:c9:20:9c:d2:97:
82:0c:55:01:f5:2c:01:27:f5:d9:a1:5d:eb:c8:71:
39:06:de:1b:c8:98:65:63:6b:fb:f2:a1:26:e4:86:
fb:75:ba:48:56:72:76:a5:06:6f:76:7b:74:f4:b7:
5a:96:bd:d3:23:26:5b:7b:ab:07:33:20:0c:54:73:
7e:87:44:9e:64:b3:c8:d1:5f:55:16:2e:b2:52:89:
53:9d:bc:c4:b8:74:06:51:d6:24:36:50:2f:73:92:
77:fa:c9:f9:b5:b9:9f:b9:a5:ea:a9:0a:16:ec:40:
5b:21:57:7b:e9:bf:61:3a:71:3a:74:05:9e:b7:4a:
9a:64:16:57:01:51:39:cb:4f:e4:b9:6e:42:27:a7:
fc:95:38:6f:62:1c:d8:8c:ad:3c:81:81:b0:1f:81:
70:47:40:05:17:86:fb:a3:78:de:fa:7e:41:d1:18:
44:f3:dd:da:ce:91:8c:55:11:94:32:24:41:f5:7e:
c4:44:21:6c:68:af:58:8a:21:13:cd:09:17:54:af:
fb:44:df:18:2a:04:ef:0b:0c:1a:57:54:e0:8f:fa:
75:5c:8c:af:5d:51:46:5a:eb:86:c1:dd:5c:29:4f:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:47:75:2C:B2:C0:D5:A3:A4:18:FD:84:32:05:E5:00:6F:2B:1F
X509v3 Authority Key Identifier:
keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:6c:57:67:b3:9f:8b:30:2f:4f:89:8c:1d:27:34:20:03:ab:
dc:da:34:81:33:3e:a3:4f:25:09:47:7d:15:37:db:4c:2e:fe:
19:8f:d2:bf:86:bf:fd:fc:df:6f:e3:07:32:f6:75:4c:b3:ec:
09:f0:ba:ba:ec:7f:ff:e4:fb:ed:d2:23:7e:47:12:f4:36:e8:
81:df:67:37:7b:99:d6:e2:9c:db:3f:2f:bf:b4:36:40:62:5b:
e5:ac:f8:59:ee:3e:a6:51:5d:87:3e:d7:50:2a:8c:97:e1:5e:
71:18:08:34:10:eb:73:b2:2f:2c:77:4b:68:a1:b0:50:0b:21:
84:eb:df:4d:cf:6b:a6:c0:6f:62:fd:fc:8a:fc:7e:00:c2:1d:
22:90:e8:34:0d:a4:68:30:dd:a9:8e:be:65:b1:14:a7:ec:90:
6b:41:67:f0:1e:88:7e:2f:4e:e2:75:46:3c:4d:97:e3:a0:47:
68:7c:19:34:f5:43:97:64:30:d2:0d:7b:df:48:5d:cf:35:8b:
ba:de:28:2a:5f:e9:a6:fe:30:a8:88:e9:c7:49:5e:5c:43:00:
79:fe:0e:e6:ef:a8:70:03:59:97:a6:70:7b:b8:4e:fe:06:90:
06:8e:be:9a:cc:dd:2e:c6:63:91:00:50:45:42:ef:2d:80:3e:
30:f5:a0:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPUjOZ1Zntf+VIXLtduo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMTlhMzNlNmVjMWJmNzdlZDU3NDcwMGFlNDY4ZGNjMjM1
MzAxNjEwHhcNMjYwNDI3MDAwMTAxWhcNMjYwNDI4MDAwMTAxWjAzMTEwLwYDVQQD
EyhkYWUwNDc3NTJjYjJjMGQ1YTNhNDE4ZmQ4NDMyMDVlNTAwNmYyYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGxv72akBIsFazVXnM5XbLMdBHQP
yIttySCc0peCDFUB9SwBJ/XZoV3ryHE5Bt4byJhlY2v78qEm5Ib7dbpIVnJ2pQZv
dnt09Ldalr3TIyZbe6sHMyAMVHN+h0SeZLPI0V9VFi6yUolTnbzEuHQGUdYkNlAv
c5J3+sn5tbmfuaXqqQoW7EBbIVd76b9hOnE6dAWet0qaZBZXAVE5y0/kuW5CJ6f8
lThvYhzYjK08gYGwH4FwR0AFF4b7o3je+n5B0RhE893azpGMVRGUMiRB9X7ERCFs
aK9YiiETzQkXVK/7RN8YKgTvCwwaV1Tgj/p1XIyvXVFGWuuGwd1cKU99wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrgR3UsssDVo6QY/YQyBeUAbysfMB8GA1UdIwQY
MBaAFJsZoz5uwb937VdHAK5GjcwjUwFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXhtalBtN0J2M2Z0VjBjQXJrYU56Q05UQVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83YzMyZjYtNmRlNy00ODMxLWJmZDIt
MmQzZDEzMzNiZGFiLzEvbXhtalBtN0J2M2Z0VjBjQXJrYU56Q05UQVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83YzMyZjYtNmRlNy00ODMxLWJmZDItMmQzZDEzMzNiZGFi
LzEvbXhtalBtN0J2M2Z0VjBjQXJrYU56Q05UQVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWxXZ7Of
izAvT4mMHSc0IAOr3No0gTM+o08lCUd9FTfbTC7+GY/Sv4a//fzfb+MHMvZ1TLPs
CfC6uux//+T77dIjfkcS9Dbogd9nN3uZ1uKc2z8vv7Q2QGJb5az4We4+plFdhz7X
UCqMl+FecRgINBDrc7IvLHdLaKGwUAshhOvfTc9rpsBvYv38ivx+AMIdIpDoNA2k
aDDdqY6+ZbEUp+yQa0Fn8B6Ifi9O4nVGPE2X46BHaHwZNPVDl2Qw0g1730hdzzWL
ut4oKl/ppv4wqIjpx0leXEMAef4O5u+ocANZl6Zwe7hO/gaQBo6+mszdLsZjkQBQ
RULvLYA+MPWgkw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 04:15:42 2026 by rpki-client