Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: vuGTn3lGZmlvXdYHCDiEz8UXiwTeF3vt+K9+iiqgl00=
Subject key identifier: D1:74:DA:7E:C6:8B:C3:DA:D0:BF:AA:0E:EE:FA:DF:BD:86:66:EB:BD
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 019F9211A3CD0E71DA01E65748B9A9691B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 113B
Signing time: Fri 24 Jul 2026 03:00:57 +0000
Manifest this update: Fri 24 Jul 2026 03:00:57 +0000
Manifest next update: Sat 25 Jul 2026 03:00:57 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: C058tcYfaeRz2N2sf+6bPiNycrahyKUbQDHNWB+1kf8=)
2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a3:cd:0e:71:da:01:e6:57:48:b9:a9:69:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Jul 24 03:00:57 2026 GMT
Not After : Jul 25 03:00:57 2026 GMT
Subject: CN=d174da7ec68bc3dad0bfaa0eeefadfbd8666ebbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:81:7f:24:94:79:0c:a9:e7:77:50:73:f9:
27:18:2b:f2:f9:44:23:3f:51:4b:69:59:ca:51:e3:
75:ba:f5:09:59:65:4e:ae:21:97:76:ed:44:c3:2f:
c5:35:0a:76:23:f3:d2:1e:f0:f9:9d:b5:1d:12:06:
77:06:b8:6c:b3:b4:81:f1:e5:26:76:e4:6e:69:21:
7a:5a:46:56:e9:a4:2e:c2:56:a3:38:89:b9:52:81:
f0:29:a4:af:45:b5:35:da:18:cf:ff:a9:83:cd:b3:
76:17:cb:9c:a7:4d:d7:7a:da:51:c1:ea:b3:bd:0f:
d3:ef:60:2b:cd:50:42:96:e0:26:bb:e3:2c:a4:f1:
3b:cf:b8:30:33:d0:9f:28:64:1f:1f:e2:c9:7c:e5:
ee:1c:0e:bf:01:ab:e6:88:36:ba:e8:81:5f:da:3a:
50:25:3b:a4:e5:33:30:72:5c:b5:4c:ad:8d:df:43:
0a:8b:78:70:c8:ea:c0:a8:3d:5e:30:4d:21:45:d8:
5c:f9:10:c9:78:38:0b:03:47:fb:89:61:a7:77:f1:
25:e6:92:67:f6:01:7c:63:e3:ee:75:ab:88:a1:ad:
38:a4:80:3e:b5:c3:76:08:db:91:ef:48:cd:d9:5b:
4e:2b:0f:3d:61:39:8c:c0:de:d9:4b:6b:93:72:2f:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:DA:7E:C6:8B:C3:DA:D0:BF:AA:0E:EE:FA:DF:BD:86:66:EB:BD
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:a7:dd:e6:8d:31:61:21:71:0f:4e:b9:1d:56:e7:f7:b2:
fd:5d:a5:08:95:36:8a:98:a6:c1:29:f4:74:06:0b:82:b0:80:
73:d2:aa:e6:12:e1:27:17:51:82:9a:94:ba:df:43:1e:5d:a1:
48:83:ed:1c:04:65:01:ed:3b:2e:23:e2:45:11:64:d4:0b:07:
ae:69:f7:9b:e3:e0:57:94:f8:97:4a:92:17:ee:33:b6:0d:0c:
a2:f3:2b:6c:22:53:3e:47:7a:ca:76:bd:f3:b2:a1:df:8b:54:
5d:27:03:0a:74:bf:89:ea:2b:1e:eb:d5:9e:2a:2a:c2:af:2c:
79:9e:b5:33:25:5c:e5:8b:c8:97:68:d5:3a:09:2d:ae:c5:84:
3f:e4:51:08:bc:9c:65:87:af:bb:ee:7e:b0:0e:da:31:26:ed:
3f:9c:46:67:53:1f:97:ef:2b:31:ad:70:0e:99:f3:f1:00:0b:
26:9d:d1:b7:93:09:cb:0a:99:60:b8:4f:63:fa:64:eb:e2:6f:
28:d8:6b:17:ac:0c:ff:4c:4f:0d:97:66:7e:9a:e3:21:81:fc:
63:3d:b1:65:5a:60:21:90:33:d2:bb:48:02:c3:cb:9c:08:93:
0a:7e:2a:fe:2a:3f:04:8e:61:eb:1e:53:f1:cf:66:46:b4:cb:
3c:ee:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:03 2026 by rpki-client