Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: n0+KO7LdBc3v9Sf6D000SUx9U2ag0fZn25XAP3qIGck=
Subject key identifier: 27:7C:CD:B2:05:80:91:88:70:35:E0:72:F2:38:88:94:43:EE:09:1B
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 01A13A7FDFEEA438C148FECBA2794D273E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 17CE
Signing time: Wed 14 Oct 2026 13:00:21 +0000
Manifest this update: Wed 14 Oct 2026 13:00:21 +0000
Manifest next update: Thu 15 Oct 2026 13:00:21 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: DgJ0EPd5G7esTmVzGNjnpTriy0vVMCf5NH5yaFdSq5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:7f:df:ee:a4:38:c1:48:fe:cb:a2:79:4d:27:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Oct 14 13:00:21 2026 GMT
Not After : Oct 15 13:00:21 2026 GMT
Subject: CN=277ccdb2058091887035e072f238889443ee091b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:14:7a:fa:50:52:b4:64:62:f4:94:9c:f8:
b6:87:0e:54:e9:5d:9e:7f:92:f0:72:25:ea:ff:b5:
92:04:db:c3:b2:93:d8:f1:84:6c:26:1d:2e:ff:60:
d0:aa:f4:a4:51:9f:cf:f1:4b:97:3c:44:75:22:25:
e9:8e:fa:d5:7a:04:ee:1c:8b:e7:43:90:cc:25:24:
88:1d:4e:ca:53:ec:b4:78:6d:78:83:99:8e:33:14:
29:85:9b:31:e6:d7:24:43:58:4a:5d:13:c7:a1:5b:
b5:50:d1:c9:90:6e:1c:c1:9b:ca:88:9c:e9:cf:cd:
9e:57:4b:b7:97:e5:9f:06:b3:e0:f1:f7:92:55:7d:
26:be:80:97:fb:41:9c:2f:d1:5c:97:7e:19:7c:91:
73:c2:f1:b5:be:17:b6:25:24:2b:ab:cd:91:56:39:
00:b2:a0:f8:d3:b2:d0:38:ed:25:49:0f:f6:6c:b9:
fb:8f:e5:3c:0f:89:a7:ea:02:a7:d6:10:6b:0f:86:
fd:b6:62:93:ad:bd:21:d5:02:c3:f7:b8:cc:7a:4d:
12:c1:54:c5:1b:81:b5:5f:1b:dd:10:8b:db:a6:8d:
1d:d6:fa:66:41:46:f0:57:7d:ed:6b:48:7c:d8:6c:
fd:d3:81:e6:30:5b:2b:db:a7:d0:34:5b:67:f3:bd:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:CD:B2:05:80:91:88:70:35:E0:72:F2:38:88:94:43:EE:09:1B
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:c6:32:ec:54:ed:5b:62:06:9f:02:62:1b:fc:47:1b:ba:
4b:a5:e2:4b:34:f1:3f:64:7f:46:54:22:91:31:c2:ae:0b:4b:
61:48:b0:5b:97:97:4e:6c:19:f9:5c:6b:b4:36:21:91:d4:7b:
02:3a:8e:5b:32:4a:0a:cd:ee:91:24:7c:64:bd:54:2d:75:4f:
50:c8:aa:ad:3e:33:3d:b5:93:a0:65:11:4c:b8:37:38:63:39:
79:a1:83:a9:3b:bd:06:7e:05:2c:3c:66:fe:5a:b3:ea:83:03:
57:01:20:b1:3a:0d:7f:5f:7e:ad:f8:03:6c:68:80:ad:7b:9d:
40:28:85:fd:71:8a:6a:7a:95:a5:6f:06:4a:53:ef:63:bd:04:
dd:00:cd:31:9c:9e:28:fe:58:48:e6:ba:a2:cd:e2:e9:07:fd:
d6:79:51:95:8d:3b:4d:a2:27:ce:11:11:fd:a8:70:bf:26:f8:
e7:69:c6:e0:4b:7d:70:8e:b8:2f:0b:dc:46:5d:1a:7b:b0:21:
48:75:ef:d8:6a:da:66:ea:cd:7a:1d:bd:7f:b0:b2:f0:e6:57:
f1:e0:a5:e8:c4:1e:48:52:d9:98:ab:b0:51:c3:78:01:fc:28:
10:09:2a:8d:91:c7:61:bc:f7:0d:cb:aa:a4:34:e0:d5:9e:1b:
84:37:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:30:29 2026 by rpki-client