Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
File: mfjXrl5OvAIjSnse4rebl2DbOq8.mft (raw, json)
Hash identifier: ynEGUIIo6YI3XrHjDDx5CO7KXqJ+r/UNknmlCT5aD8A=
Subject key identifier: CD:2C:94:E6:CD:95:BD:32:9D:77:2E:56:3C:DD:35:F5:C2:DF:D5:E1
Authority key identifier: 99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
Certificate issuer: /CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Certificate serial: 019D38D2E550E2B1499E24CF91550526045D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
Manifest number: 4B
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa (hash: aaSOVrkxAJe8O2mFpYgKoWep+9G/A7GJM36+XM4ZkBc=)
2: mfjXrl5OvAIjSnse4rebl2DbOq8.crl (hash: /xm6QD5K1kua9BfLh1Ks6VljqUiGG+qhaYqGT342dYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e5:50:e2:b1:49:9e:24:cf:91:55:05:26:04:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=cd2c94e6cd95bd329d772e563cdd35f5c2dfd5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:60:17:72:ed:d6:22:98:1c:00:3a:25:7f:
f8:79:d9:95:f8:ba:a6:22:77:15:71:5e:fb:f7:e9:
96:12:70:98:63:54:1c:09:0c:6a:c0:49:08:6c:97:
97:5a:af:c1:2f:08:00:4b:76:f8:14:6e:32:27:a0:
e5:1f:a0:0c:af:5c:62:b6:1a:50:1b:97:62:d8:1c:
53:40:ae:b5:0a:65:b8:e6:3a:1b:73:de:5a:50:5e:
3b:4e:19:1c:92:5a:c8:9c:56:1d:20:52:56:1f:6b:
bc:00:75:2a:46:df:91:fd:62:ce:12:05:37:e5:c7:
94:ed:be:0e:10:d2:93:27:b0:81:f5:92:95:ee:2b:
68:a7:0d:29:a8:ea:5e:35:ae:03:15:ab:ce:91:4e:
40:2e:8b:a2:d5:2c:72:6d:67:17:0f:31:d9:8e:1b:
a2:0f:a6:43:d2:20:59:a4:f3:64:f7:03:e3:ac:98:
44:bd:d4:10:eb:54:e4:c0:33:b6:0f:e3:3f:c5:33:
93:4f:6f:76:6c:b7:6f:a6:fc:21:e1:54:a6:5d:55:
36:24:54:65:a9:b2:04:eb:57:f9:de:fe:d1:12:7b:
d2:fe:59:d4:cf:81:21:b6:76:5e:a5:45:50:2d:a3:
20:07:d3:a5:2a:e1:64:b9:ae:47:e4:0e:c5:15:f4:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:94:E6:CD:95:BD:32:9D:77:2E:56:3C:DD:35:F5:C2:DF:D5:E1
X509v3 Authority Key Identifier:
keyid:99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fc:a8:45:78:07:fa:77:23:93:c7:97:d1:81:13:d5:29:6e:
b1:c7:5e:61:5f:3d:fa:50:bf:4d:fd:26:0f:f9:8e:32:64:cc:
54:69:a6:54:d8:bd:a4:10:44:84:30:cc:e3:12:ad:b8:4b:c5:
82:d2:01:a4:52:18:95:b0:dd:c9:a6:29:8b:43:34:1a:41:ea:
06:a0:bb:a8:85:fa:6d:46:89:3d:6b:b9:96:34:9b:90:8f:2b:
65:2a:3c:0a:62:2c:10:b7:65:04:29:91:b4:30:c6:a5:05:a3:
23:fc:f8:3b:15:e3:73:0f:bc:f6:5e:bd:72:11:82:bb:c0:bc:
68:09:fe:0f:0a:46:e7:b7:a1:60:1e:ae:a4:a7:c6:27:e6:15:
c2:b7:dc:1d:79:c6:1a:3d:9c:9a:08:44:38:b2:b9:95:22:b4:
94:15:6f:20:17:0d:d0:b4:9f:9f:22:74:e0:6c:f9:ff:3c:c5:
19:ed:0e:27:6a:a1:df:c0:7e:8e:cf:bc:e6:7c:f7:70:ea:ab:
1c:7e:86:12:43:aa:13:06:11:fa:f4:80:3d:0a:42:5d:c4:65:
21:62:72:70:09:33:a8:5f:71:f1:5a:8e:14:4f:44:c8:ad:a9:
40:a1:b6:1f:9d:3d:5d:ac:d3:14:2e:59:aa:06:a8:79:fb:06:
c8:9a:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:42 2026 by rpki-client