Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: XcVGV33LYrsUz0WQhZDFSVE78WXOZbAiNRAy81vUm9E=
Subject key identifier: 0E:F8:01:4F:43:8C:25:09:31:C8:23:C4:7B:25:B3:21:A0:2E:46:3C
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019D371BEE499AB51C7E665E870B0AFE6F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 15BA
Signing time: Sun 29 Mar 2026 01:01:10 +0000
Manifest this update: Sun 29 Mar 2026 01:01:10 +0000
Manifest next update: Mon 30 Mar 2026 01:01:10 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: IFLeFqCH+ZwSw3wJmlrpTmTgE2Rxsf6d/gW4pmb/XSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ee:49:9a:b5:1c:7e:66:5e:87:0b:0a:fe:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Mar 29 01:01:10 2026 GMT
Not After : Mar 30 01:01:10 2026 GMT
Subject: CN=0ef8014f438c250931c823c47b25b321a02e463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:0a:72:b0:54:cc:41:65:ab:2a:01:b6:6f:
df:3a:96:b0:21:a3:e3:e4:95:97:37:62:4b:35:09:
d7:29:93:64:13:eb:36:b7:9a:03:3b:df:12:e6:a3:
38:86:f3:0c:59:d2:3b:01:f4:1b:11:20:37:d7:dd:
7e:b8:d9:a8:32:ac:22:42:dc:e7:a1:39:db:dc:a7:
d9:4e:81:83:97:e0:f7:07:a3:d5:9d:7a:dc:99:9c:
d4:85:2a:7f:e5:4f:b5:95:35:76:81:cf:a4:db:a1:
bb:94:b5:37:c2:2e:cd:64:a7:57:cc:88:c8:b6:58:
97:35:37:34:5e:54:67:7f:6b:5e:48:ea:7f:11:cf:
1f:84:87:e4:60:1a:b0:58:e3:36:79:c7:37:b1:0a:
a5:b6:58:c5:cd:3b:2d:4f:62:e1:35:82:f9:8c:b2:
e7:d0:ed:6e:f3:b9:11:8a:8e:89:4d:d4:18:3e:91:
41:fd:ba:de:14:49:28:15:ad:be:ab:92:c2:d8:9a:
28:96:24:57:b4:37:29:79:07:51:24:d6:5c:39:16:
00:a4:34:92:0f:46:df:f9:fe:8d:db:18:fe:a4:4a:
e7:16:26:4b:db:68:54:84:43:d2:cb:2f:e3:18:20:
fb:b2:f8:88:86:f9:8e:c0:38:45:1e:84:3f:7a:d4:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:01:4F:43:8C:25:09:31:C8:23:C4:7B:25:B3:21:A0:2E:46:3C
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:77:d9:66:a3:75:b9:75:01:30:e8:80:b1:35:d3:38:52:18:
56:3d:ea:bb:1f:f8:62:8f:08:6f:ee:a6:88:fc:e0:30:b3:b3:
f7:95:08:9a:32:6d:ab:f1:de:86:62:b0:86:a6:5e:52:91:86:
49:e5:76:9f:f8:04:38:45:47:16:af:36:b2:d0:0b:f5:7b:99:
35:39:8f:37:dc:f3:fe:65:58:1d:7e:bf:b7:06:07:0a:fb:46:
cf:7a:0d:36:a3:dc:f4:e5:d8:33:61:e5:f8:d3:36:39:da:a9:
44:5d:2e:51:82:e7:45:f3:89:a8:bc:e0:dd:a7:eb:cf:9c:90:
83:c0:36:20:82:27:08:a0:b9:a8:35:11:34:23:5f:28:bc:43:
aa:16:ed:2d:26:c9:d9:b5:89:ed:5f:b7:29:12:7e:f1:72:12:
a7:7c:a1:ac:55:9d:9f:6b:1d:02:ec:79:e6:80:3d:65:9a:34:
88:66:b3:96:8b:f5:37:a9:8a:bb:7e:a3:ff:d6:24:b5:6e:24:
6d:b6:76:a4:89:1e:26:e3:7d:36:db:d8:67:ed:8f:4c:f9:89:
30:de:4d:5a:14:cb:4c:6c:f0:6e:f1:d8:8e:8c:96:95:45:58:
07:90:a9:03:8a:1e:94:a6:2d:ac:74:11:33:90:3b:7a:19:0a:
a2:b2:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client