Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File: mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier: 6u5XjEUVm/XLM7JOg3VrF9/ZeF9hDB90Xc2p32igPbc=
Subject key identifier: 8A:89:06:30:E2:A9:26:14:56:2B:66:B4:EC:39:05:05:E3:0A:47:96
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer: /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial: 01A08B310AEC718C370FFDA4C5FE0E0C0BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number: 01ED
Signing time: Thu 10 Sep 2026 12:00:42 +0000
Manifest this update: Thu 10 Sep 2026 12:00:42 +0000
Manifest next update: Fri 11 Sep 2026 12:00:42 +0000
Files and hashes: 1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: ZuBVyn7dkA5JoowVEjsyVUpYX5pCC5b+NFjfcIasDr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:0a:ec:71:8c:37:0f:fd:a4:c5:fe:0e:0c:0b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Validity
Not Before: Sep 10 12:00:42 2026 GMT
Not After : Sep 11 12:00:42 2026 GMT
Subject: CN=8a890630e2a92614562b66b4ec390505e30a4796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:03:8d:42:3f:dd:11:be:81:0b:a2:c4:65:
e0:b6:a8:50:3e:7e:54:85:df:7b:a7:4d:13:34:05:
3c:3d:ea:5f:4b:21:9f:f7:7e:3b:8a:db:15:3e:96:
2b:e9:89:84:78:49:cb:ad:c0:1a:1d:f6:fd:40:5d:
9d:c1:4f:0f:a1:90:48:32:09:e2:63:f9:e2:f6:a5:
34:43:d4:b7:34:94:f5:ec:fe:f1:5d:ad:88:9a:f4:
24:89:27:38:37:3c:42:ad:05:b4:64:c5:a0:1d:27:
84:e9:9b:4e:24:80:21:e1:a1:c1:70:2c:f7:13:40:
46:31:5e:87:06:3d:9e:42:2c:84:8d:58:8f:8b:96:
3d:54:70:27:75:7a:3c:2a:d7:d7:73:d9:a4:cb:21:
7e:ab:60:8c:5c:b4:fb:0c:28:68:c3:af:5c:b7:fd:
00:f0:eb:5e:6e:02:fb:5c:dc:5a:c4:66:a4:0e:f8:
36:90:08:31:a9:5a:84:30:62:02:d8:5c:7a:a4:26:
ec:18:1e:d0:80:c8:57:31:65:e1:73:0d:27:70:8f:
f2:5f:a5:16:b1:04:59:ae:45:2d:52:63:99:71:f2:
7d:85:79:92:d9:b4:7e:9c:02:f7:37:89:76:84:ed:
5b:64:b3:8c:9e:1d:3d:67:64:4d:7a:4d:e0:22:61:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:89:06:30:E2:A9:26:14:56:2B:66:B4:EC:39:05:05:E3:0A:47:96
X509v3 Authority Key Identifier:
keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:92:89:e5:1c:5a:24:f5:72:2a:b5:b2:d2:83:aa:4f:e5:92:
f5:09:63:b8:89:de:bf:79:c5:cd:12:6d:cb:d2:9b:9e:a1:98:
d2:67:cc:44:ce:28:62:44:62:6e:cf:c4:c3:99:96:a5:48:36:
35:cc:a2:6b:e3:c5:c6:d6:5a:1d:5f:e5:67:0e:1c:be:62:f7:
7b:36:8d:17:9b:d1:f5:17:db:e9:61:e7:95:5c:59:50:4c:45:
0e:f0:95:67:93:af:db:34:6a:c2:e3:af:81:02:ce:d2:8b:64:
65:67:60:60:63:13:24:5c:f1:88:70:88:b7:39:64:fd:63:44:
d4:ba:a5:bf:1e:c8:46:74:df:79:53:60:f2:ac:e9:76:ec:fc:
e8:c9:66:6b:c8:30:7e:94:56:12:5a:49:3a:55:79:3b:3c:38:
b1:b0:32:f4:d4:af:05:62:d7:1c:2e:91:0a:0c:93:4e:ac:f1:
89:30:0d:e3:e7:99:38:da:a7:1f:8c:b6:b3:2b:f2:fa:26:2f:
c9:55:80:a8:0a:de:2b:62:4b:8d:20:ad:87:e5:a0:6b:c4:09:
ab:9b:c1:30:47:1e:19:bd:52:04:13:5d:8a:ed:da:e6:72:b2:
d5:73:39:b1:1d:f9:47:0c:f1:84:54:2e:06:ad:89:1b:f0:cb:
4e:75:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:34 2026 by rpki-client