Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: 5h5Ks9lambItW8hviAC7fUece5bkkqJ5yRqmK/Sbj0M=
Subject key identifier: 76:DE:D1:60:4E:EA:DA:D9:E3:BB:80:7A:1A:3C:BC:76:17:41:A6:3B
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019D3752F14782B5D06909A5DD1E5C4C9CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:15 +0000
Manifest this update: Sun 29 Mar 2026 02:01:15 +0000
Manifest next update: Mon 30 Mar 2026 02:01:15 +0000
Files and hashes: 1: MuK0yO2EDiETMioDuWGpSy4DPrM.roa (hash: 9Q7+RkAvvoGZfwpOAVIRZoNvbHTT/lKkQt6ZodDPSB0=)
2: af2JbsFaiF65db9s1Px-v45Smq8.roa (hash: SgjbbnkwbwDgclTeMfNjxj2r3waXIVgmYqV+oR+91Xc=)
3: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: 2mPcT0Dzev1dMYQnqepJh42rDB0Px7lTMX138bi31I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f1:47:82:b5:d0:69:09:a5:dd:1e:5c:4c:9c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Mar 29 02:01:15 2026 GMT
Not After : Mar 30 02:01:15 2026 GMT
Subject: CN=76ded1604eeadad9e3bb807a1a3cbc761741a63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:f1:fe:fd:17:c8:2d:2f:7e:4b:c4:ef:98:
03:14:5d:d1:8a:32:5e:75:e2:a6:3d:6e:e3:5b:a6:
6b:ae:a6:d3:18:a6:ab:1c:ca:e2:ce:30:f1:34:39:
4e:dd:29:0c:c9:d1:2b:49:d8:29:0e:14:71:f2:f5:
76:54:59:35:63:3b:7c:87:af:24:7c:bb:65:2d:13:
b3:e8:3f:b7:b4:67:ca:3a:3c:76:1a:e2:a7:8f:bf:
3f:38:2f:2e:31:ac:bf:98:31:8c:df:0f:2d:89:0c:
e7:c0:da:e4:2b:93:b2:05:c0:7c:c3:b4:98:9a:48:
3b:d0:26:24:63:79:7e:26:34:6e:6d:ee:65:98:c7:
cb:49:f3:91:87:3a:15:55:d0:ba:5f:c6:30:56:d1:
43:58:21:71:10:e2:6f:4e:67:84:d1:db:d6:15:06:
2c:2c:c2:c9:9e:dc:bb:ff:e7:c4:ab:89:31:1b:ef:
ec:3b:f0:88:cf:c6:59:3e:bc:e2:bd:4c:a5:dc:27:
57:01:98:4f:c7:e8:a5:5a:01:ed:ac:0b:d2:0d:f4:
63:d2:95:8d:a0:b9:aa:9a:0b:f6:31:42:11:a6:e1:
4f:38:d0:33:3e:a9:d1:44:89:ee:86:b9:2c:c7:91:
87:35:1a:05:c4:5b:e1:1d:dc:9e:2e:ae:27:6d:9a:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:D1:60:4E:EA:DA:D9:E3:BB:80:7A:1A:3C:BC:76:17:41:A6:3B
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e5:dd:82:fa:42:41:ca:60:8d:b5:77:22:53:9d:29:df:62:
df:74:e0:29:84:b8:c6:63:3c:75:7c:dd:a2:6b:f1:36:71:a1:
a4:69:d4:de:dd:60:0c:94:8c:df:d9:67:d7:0f:5d:07:2b:01:
1d:b9:25:e6:7b:5b:81:47:0b:ea:01:72:ed:b2:a9:21:19:47:
c9:5e:76:27:f7:27:da:13:d1:a2:70:59:1f:d7:48:a9:87:13:
8b:2d:7d:0e:b1:d8:79:8f:2c:1b:47:5c:2b:3e:59:5b:88:77:
3a:89:ae:57:95:3f:c6:8f:69:51:6b:4f:77:3d:3d:4e:10:44:
f3:91:c8:c9:8f:e2:46:41:ff:91:40:20:50:25:11:bf:96:42:
14:00:fa:12:f4:ef:77:36:9a:7b:76:72:32:7d:aa:c3:9e:c9:
fd:b1:0c:48:2e:49:09:4e:70:b4:26:73:7a:8d:77:62:73:09:
bf:73:1d:1c:bd:5c:cf:00:0e:d3:6b:92:5d:e3:e3:f1:01:9a:
2e:fa:ed:8a:92:cd:3a:11:c7:64:4e:f4:75:95:07:3a:dd:3f:
ef:dd:51:26:d1:fc:89:cd:b8:78:6a:76:8f:43:cd:9f:60:2e:
0d:a1:b9:a2:31:a8:89:15:42:8d:fa:2e:77:3f:1e:a9:50:7c:
94:50:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:58 2026 by rpki-client