Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: /MCdV4gMM9sUIprc5JP2VIXX+WBJR5X4QQhcPa1+1I8=
Subject key identifier: B4:E0:85:9A:BF:76:F2:BD:99:0D:C3:1B:3F:01:E6:21:EA:D6:EC:1F
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 01A13CDCB74976D2EB15B936E3B10472341E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 1218
Signing time: Thu 15 Oct 2026 00:00:59 +0000
Manifest this update: Thu 15 Oct 2026 00:00:59 +0000
Manifest next update: Fri 16 Oct 2026 00:00:59 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: JI1P78s2L0RlcGT388wHsk8JV38qjWtxCvRPCdOqZDs=)
2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:b7:49:76:d2:eb:15:b9:36:e3:b1:04:72:34:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Oct 15 00:00:59 2026 GMT
Not After : Oct 16 00:00:59 2026 GMT
Subject: CN=b4e0859abf76f2bd990dc31b3f01e621ead6ec1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:d7:50:a6:e3:24:8a:c6:60:4a:69:23:2f:
83:3e:9f:1a:8b:78:fd:a1:76:54:14:da:f4:63:ef:
b5:75:21:70:6b:81:76:a0:31:81:51:75:55:0a:46:
12:d8:dc:a8:fc:1c:cf:d1:89:c0:e7:2a:28:c0:71:
d1:18:1a:8b:5e:90:ab:2e:b9:d3:0d:5a:90:bc:74:
b0:18:ca:0a:59:3d:96:1b:80:9c:c5:36:34:a0:7b:
79:b4:6b:71:11:e3:03:41:26:f4:f7:94:7a:b2:e5:
17:2c:6e:21:44:7a:81:44:17:33:fe:37:e8:bd:19:
45:56:54:1d:f6:e1:62:c7:c9:ef:7e:5d:20:af:29:
36:9b:86:a2:87:cf:62:df:94:24:73:a5:67:ab:e2:
05:4b:e8:41:c9:3d:12:15:94:df:b8:67:b8:02:2e:
04:d2:97:ff:8d:88:ff:ac:81:05:db:69:05:14:c4:
ef:b5:1b:86:b2:b1:02:6e:72:32:6d:cb:8a:62:50:
e3:de:5b:de:c8:08:28:0e:1c:1f:c9:5c:fd:a4:2b:
8d:d8:71:d3:0f:31:67:fb:5a:cf:86:02:02:e9:d5:
ec:29:fe:2d:77:ff:a3:57:0c:92:c6:71:27:e4:99:
ae:00:5b:e8:49:a5:01:10:4b:7e:e6:b8:6f:1f:5a:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:85:9A:BF:76:F2:BD:99:0D:C3:1B:3F:01:E6:21:EA:D6:EC:1F
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:a4:3e:35:d2:56:39:a1:d8:ee:af:a9:69:1a:54:2d:d5:
17:81:45:9d:3b:23:4c:d5:50:71:00:b0:b4:09:d7:ed:17:c0:
46:84:1c:ec:90:1d:3c:fe:6c:f8:c3:71:fd:f2:50:15:9c:81:
31:b2:57:02:ee:ce:27:5f:ba:ba:c5:ce:a2:c2:a5:e6:6d:ed:
10:e1:eb:7a:4b:ab:da:8f:cb:c4:3f:e3:8a:ea:af:e3:4c:68:
8a:61:38:b4:d2:12:69:12:ab:6c:99:fc:be:f1:1d:db:90:dd:
32:e1:ed:f3:65:ff:5a:b2:39:5f:7e:be:68:89:3a:86:fe:3b:
da:08:55:7f:24:08:bc:9f:40:2c:76:d7:13:46:d7:27:e6:65:
c6:19:2d:1d:3b:20:b1:08:9b:3d:70:af:13:4a:c3:90:5d:c0:
56:69:f4:84:dd:2c:c6:fa:38:d6:9b:fc:68:6d:ea:18:fc:a8:
00:9b:0c:11:e1:e7:cb:43:7f:7e:32:74:74:0c:a7:87:76:98:
8d:96:5e:c8:ff:4d:01:f1:e2:41:1e:41:f7:8c:98:98:8f:e0:
ff:85:3f:73:14:74:a3:56:35:c2:a4:c9:a7:81:9d:40:e8:8c:
fd:44:7b:fb:85:87:37:b2:ce:29:98:c0:98:bf:69:8f:df:f2:
ce:f1:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:02:15 2026 by rpki-client