Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: LWkOQ420lZSCxoHR+dKvBt4jVVoNPbAu8xGJptvetXY=
Subject key identifier: C1:E7:D6:77:CB:C4:15:09:8E:BD:B5:F4:3E:82:1C:36:9A:08:A5:ED
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 01A13C6E56F9174BFD28FD0F165B2ACAE8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 17CF
Signing time: Wed 14 Oct 2026 22:00:26 +0000
Manifest this update: Wed 14 Oct 2026 22:00:26 +0000
Manifest next update: Thu 15 Oct 2026 22:00:26 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: tyoedP9YXVQTXUpzDI4xCwwSadvHDWFvbkSOvGYJD54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:56:f9:17:4b:fd:28:fd:0f:16:5b:2a:ca:e8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Oct 14 22:00:26 2026 GMT
Not After : Oct 15 22:00:26 2026 GMT
Subject: CN=c1e7d677cbc415098ebdb5f43e821c369a08a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:d5:91:98:85:78:20:a7:76:45:81:f8:00:
0e:2a:1c:96:95:49:00:97:fb:b1:16:4e:ac:0a:6a:
a5:fd:16:aa:ba:57:45:9a:63:22:97:43:f5:61:ba:
e7:0a:14:7c:24:8a:5a:47:58:47:1a:0b:91:de:90:
0f:11:62:be:3e:ab:0c:ea:24:81:06:ef:24:cd:28:
34:ab:38:a3:a0:e8:b9:ef:4e:f6:34:72:66:92:f5:
8c:ba:fe:a0:80:b6:4e:8f:a4:8d:3e:3e:13:5a:ab:
57:ed:4a:d1:f1:e9:f1:ad:8e:f2:ab:e6:03:e6:d1:
f2:56:c7:40:9d:59:17:a4:3c:6f:90:37:97:af:aa:
ad:54:3d:55:b9:11:7f:80:6e:a6:8b:bb:52:10:c9:
63:f1:2c:e5:9f:6e:3b:97:85:dd:62:80:d8:8a:4e:
6d:c7:b7:e2:4c:84:ba:ad:f9:0d:9a:0e:e0:ab:a4:
14:70:cb:59:6e:83:d1:2e:2f:7b:ad:0c:f7:bc:a9:
6c:e4:a0:b1:e8:27:c4:e3:c9:44:1f:2d:17:09:76:
00:16:cf:5c:d1:a9:af:d9:f6:bb:8a:7f:9b:0f:ab:
6f:46:0d:d6:a5:c6:77:a9:a9:a7:23:c4:c5:cf:e2:
10:c8:20:e5:31:67:c9:a7:e6:f8:a9:75:d0:d1:4d:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:D6:77:CB:C4:15:09:8E:BD:B5:F4:3E:82:1C:36:9A:08:A5:ED
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c9:07:30:5c:43:23:20:d6:33:93:47:ba:a6:52:3c:b7:6d:
8f:b6:d2:ec:21:2c:a2:53:83:33:df:7b:4f:9f:84:93:3d:20:
17:0b:19:7b:fd:bf:15:5d:fd:a1:13:79:ff:60:bf:39:65:2e:
ea:73:29:8d:c4:e9:a7:c7:38:0e:6c:aa:b3:df:b6:04:6e:fe:
8b:f8:9a:98:0d:9a:8b:b0:a8:48:70:ed:59:ba:17:51:69:73:
ef:5e:0c:de:91:fe:c8:c9:9c:67:e0:fc:e0:da:d4:9d:2f:9a:
59:a4:88:4c:b1:ae:c9:5a:46:4c:60:2b:37:ee:b2:cc:74:3c:
59:b8:a4:d1:ae:fe:51:f6:c5:52:dc:ef:56:6d:3a:4c:04:f2:
b6:01:b3:3e:b8:ef:89:26:3d:e3:6f:e8:74:18:9d:ab:49:ee:
a5:94:78:ca:02:bf:88:55:99:79:a7:c0:88:57:09:cd:9c:f0:
17:44:bc:a6:a1:e0:3b:89:75:76:0a:74:52:6b:f7:19:c8:73:
08:5f:53:75:1a:01:93:6e:9c:66:29:e0:c8:35:ec:29:be:05:
43:76:a5:bb:83:f3:d7:40:29:65:a0:61:50:43:e6:26:e3:2a:
34:f2:f0:69:d9:67:00:a8:00:49:9d:9e:2c:fb:37:2c:cb:9c:
5b:b1:6c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8blb5F0v9KP0PFlsqyuj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy
ZTg0NjYwHhcNMjYxMDE0MjIwMDI2WhcNMjYxMDE1MjIwMDI2WjAzMTEwLwYDVQQD
EyhjMWU3ZDY3N2NiYzQxNTA5OGViZGI1ZjQzZTgyMWMzNjlhMDhhNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom/VkZiFeCCndkWB+AAOKhyWlUkA
l/uxFk6sCmql/RaquldFmmMil0P1YbrnChR8JIpaR1hHGguR3pAPEWK+PqsM6iSB
Bu8kzSg0qzijoOi57072NHJmkvWMuv6ggLZOj6SNPj4TWqtX7UrR8enxrY7yq+YD
5tHyVsdAnVkXpDxvkDeXr6qtVD1VuRF/gG6mi7tSEMlj8Szln247l4XdYoDYik5t
x7fiTIS6rfkNmg7gq6QUcMtZboPRLi97rQz3vKls5KCx6CfE48lEHy0XCXYAFs9c
0amv2fa7in+bD6tvRg3WpcZ3qamnI8TFz+IQyCDlMWfJp+b4qXXQ0U3wNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHn1nfLxBUJjr219D6CHDaaCKXtMB8GA1UdIwQY
MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt
NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz
LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8kHMFxD
IyDWM5NHuqZSPLdtj7bS7CEsolODM997T5+Ekz0gFwsZe/2/FV39oRN5/2C/OWUu
6nMpjcTpp8c4Dmyqs9+2BG7+i/iamA2ai7CoSHDtWboXUWlz714M3pH+yMmcZ+D8
4NrUnS+aWaSITLGuyVpGTGArN+6yzHQ8Wbik0a7+UfbFUtzvVm06TATytgGzPrjv
iSY942/odBidq0nupZR4ygK/iFWZeafAiFcJzZzwF0S8pqHgO4l1dgp0Umv3Gchz
CF9TdRoBk26cZingyDXsKb4FQ3alu4Pz10ApZaBhUEPmJuMqNPLwadlnAKgASZ2e
LPs3LMucW7FsTA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:59 2026 by rpki-client