Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File: mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier: ufC4zru/W7yTSRf6bGhZYq7hbbvWEH7xzt52SkdXwC4=
Subject key identifier: 80:77:EE:99:81:B9:10:77:44:50:DD:C0:19:A9:FF:D6:EB:CC:C4:2B
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer: /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial: 019EB5E9C85A22CB0D1D68BE92D4C1BC0819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number: FA
Signing time: Thu 11 Jun 2026 09:00:57 +0000
Manifest this update: Thu 11 Jun 2026 09:00:57 +0000
Manifest next update: Fri 12 Jun 2026 09:00:57 +0000
Files and hashes: 1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: P/DPiEYlNhHind/wtSxbBWXD/13NXkv986N7MPSYnqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:c8:5a:22:cb:0d:1d:68:be:92:d4:c1:bc:08:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Validity
Not Before: Jun 11 09:00:57 2026 GMT
Not After : Jun 12 09:00:57 2026 GMT
Subject: CN=8077ee9981b910774450ddc019a9ffd6ebccc42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:70:2b:43:5a:51:17:ae:e9:2a:a6:71:55:
9a:a9:5a:5f:5c:78:24:9b:af:f7:4e:57:44:6e:ba:
f9:c3:7b:e2:1b:c1:12:cf:99:d8:3b:e3:98:85:f5:
aa:9b:57:d7:3d:75:f2:bf:24:41:f4:4a:f6:c3:c2:
74:c0:8d:37:19:60:4f:8b:e0:80:b7:8f:43:7d:47:
b6:71:04:fc:2d:c5:b7:7b:a0:51:73:42:13:2d:c1:
61:7d:f2:aa:47:66:ee:e2:f6:07:29:10:9c:fa:89:
61:be:e5:c8:d5:d9:8b:5b:00:fa:54:d1:a1:f9:4f:
52:d6:62:07:31:9a:53:1f:d6:29:5e:25:2c:d8:6c:
20:8f:be:56:d2:cd:51:7e:5c:43:55:3b:28:7b:e7:
bf:d1:8f:78:b9:09:4b:24:ca:ba:c9:3a:87:2c:68:
49:73:c3:1e:34:fe:f9:9c:a2:4b:17:23:ef:66:96:
9a:48:1c:dc:d6:4d:6d:0f:10:56:65:59:da:dc:07:
4a:5b:df:1a:b3:72:8b:be:31:42:8d:fd:57:0d:84:
7f:e0:cd:9e:62:70:59:36:0e:50:53:90:0a:ba:35:
9c:54:88:ff:83:ff:2a:5d:0a:d6:73:27:86:7c:13:
6a:2e:c5:74:2a:0e:6c:2b:20:26:bc:ae:e5:95:87:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:EE:99:81:B9:10:77:44:50:DD:C0:19:A9:FF:D6:EB:CC:C4:2B
X509v3 Authority Key Identifier:
keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:9f:ec:46:0e:8f:e7:07:b4:f5:42:20:dc:18:1e:a6:cf:
56:c2:db:fd:c0:bd:e5:8c:2a:1c:bd:6c:74:d5:34:7d:68:b3:
9b:04:4b:fb:ba:5b:d9:3b:04:26:9d:be:64:72:1e:1e:98:ab:
5b:e6:82:45:59:b2:9f:d7:a1:b3:50:8e:db:bc:56:7e:46:46:
3d:ed:6b:7a:6d:16:4d:bd:4c:e6:67:1f:7e:ec:01:bd:ed:49:
2a:c2:6d:e7:40:eb:ac:09:94:71:d1:da:03:75:8b:6c:ef:16:
13:62:f8:e7:93:fc:7a:14:f2:1c:92:76:59:ce:3d:95:5f:aa:
ff:a3:48:36:58:23:11:65:75:aa:c5:88:ed:30:fe:ab:02:63:
b8:32:31:e5:dc:b3:c3:f1:0c:88:80:84:2d:d9:87:77:be:a4:
f5:8f:6d:de:3f:fb:f1:9f:bd:53:60:c8:b4:58:c1:0a:92:12:
41:e0:da:25:38:d2:35:0d:d7:f5:b3:f1:2c:a0:54:e5:c0:5f:
df:3e:ad:e0:61:e6:41:b0:28:4f:4e:80:fe:fd:05:cb:3c:53:
8b:e2:76:34:35:f5:a5:a5:d9:82:31:fe:89:1f:f7:07:89:3c:
45:3c:80:58:b1:c9:13:60:c7:49:66:11:f1:ee:02:b9:24:f0:
91:c5:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:59:46 2026 by rpki-client