Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: 1mLXjhS79MjV6u5j5X4dlkJQ8YXdg6vagf8BxqqjlI0=
Subject key identifier: 92:9D:B3:24:C3:AA:F6:0A:A5:DA:5B:8E:D6:A7:F7:D3:9E:C0:C7:E2
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 019D390A0767D0EBF8BF4C1AD1DD973A64BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 177A
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: U3Z0rEw3uANKsLfEh0VnIGCNBC4.roa (hash: BqzUHMM3J2XI6sivG1p1jahqZmQcfYHSW5P1yTOEqeY=)
2: WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa (hash: 2P6nSAZ1sPNq/s5iROpnF+sOeXvgcoADYMvtdAcO7JY=)
3: gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa (hash: gknScLT558AwNuqdvMmD/GV256E2UaSmjDtUQzxe0LE=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: cW6iCkQNpgcu6W9r+f7cBorIPftnQ3PgCjZgjfHHfww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:07:67:d0:eb:f8:bf:4c:1a:d1:dd:97:3a:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=929db324c3aaf60aa5da5b8ed6a7f7d39ec0c7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:cf:49:54:d9:53:79:af:a9:88:d2:df:ae:
86:af:9d:40:58:43:19:8b:c4:40:af:6c:e5:d0:74:
67:bf:da:98:25:a3:0d:d6:a2:95:d3:00:f1:f1:30:
74:22:4c:e9:aa:b7:ff:05:96:90:eb:f4:c2:7d:09:
3c:c5:02:c5:c6:d0:19:ec:31:ea:d6:91:b5:d2:99:
a3:67:6c:a6:36:31:ed:e8:cd:68:56:52:71:c7:77:
ea:6c:a6:94:ed:63:47:6e:c7:65:77:74:ba:80:8e:
e4:a0:47:3f:c5:96:35:8d:40:c2:3b:a4:bf:81:dc:
f9:4d:cc:86:93:d0:96:72:ed:ce:a9:69:8d:8e:2b:
16:55:4c:d9:98:e8:80:d8:2f:56:e6:32:1e:c0:70:
be:a7:03:8d:35:ac:04:ad:28:b3:29:d9:82:5c:e2:
a4:54:6e:c3:1d:da:c4:39:32:1b:5f:4c:6c:9f:00:
08:d7:c1:79:8e:be:01:bc:9c:66:82:82:93:37:4d:
d2:c3:60:12:5b:c4:5b:bb:f1:8b:a8:75:e4:6a:f8:
3e:33:d0:8f:57:94:cf:04:2c:de:b1:d0:78:da:a4:
75:32:da:18:9b:1f:7d:ce:0d:c7:1d:25:ef:01:8e:
93:32:8a:5c:e2:8d:9f:43:91:9a:ee:0b:6e:41:c6:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9D:B3:24:C3:AA:F6:0A:A5:DA:5B:8E:D6:A7:F7:D3:9E:C0:C7:E2
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:20:78:6c:bb:f8:c7:82:ad:cc:2f:db:fe:01:0d:f2:d2:d4:
04:84:30:14:e9:45:1d:f3:da:fa:97:0c:7f:df:92:84:d7:57:
19:07:32:7b:2e:88:c7:4d:ae:a8:69:a3:94:bf:8f:f6:11:2c:
2f:0b:f7:1b:25:36:3b:42:94:ea:e2:96:f0:7e:b6:ab:20:db:
95:8e:a9:a4:fe:f6:41:5b:07:78:68:23:4c:65:07:9f:c7:e4:
5f:de:c6:d5:3b:81:32:7d:05:16:54:60:18:85:ea:e2:11:bb:
fb:81:09:4f:18:2b:e3:99:c0:c8:99:ec:2b:b8:0b:6d:5c:9e:
0a:cc:a8:68:97:ec:1d:77:08:02:55:df:39:9e:c5:89:57:05:
30:1a:d7:26:38:6d:c0:f3:3c:90:f5:f1:b3:87:27:56:20:67:
af:af:3e:53:76:c6:41:a6:30:88:cc:ce:29:bf:24:59:d9:6a:
33:48:ef:2a:12:35:35:ab:3a:28:bf:3f:0f:41:f6:ec:6c:0b:
cc:5b:82:29:66:7c:03:fd:22:20:f7:7f:14:69:77:6e:6b:31:
6f:f4:72:59:f2:48:88:77:6f:ef:00:ac:f6:88:29:64:e0:ff:
a3:20:89:89:23:28:cc:d3:43:b2:0a:28:ad:05:66:da:0e:4a:
9a:bc:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:10 2026 by rpki-client