Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: fzGhnaE7rNWBTA5138rBlecfAoUnbRlhdbq5PenyK+w=
Subject key identifier: 0C:3C:85:AB:60:61:B0:0B:23:6E:3A:80:31:A3:1C:44:03:E8:42:8C
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019F92EDDAF2E56B026385786DB85E0EAD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0FE5
Signing time: Fri 24 Jul 2026 07:01:29 +0000
Manifest this update: Fri 24 Jul 2026 07:01:29 +0000
Manifest next update: Sat 25 Jul 2026 07:01:29 +0000
Files and hashes: 1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: r8LPd4iq9qd2fPtmkJS181FcGbwG43yDMiUZw/0p46E=)
3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
4: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (hash: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:da:f2:e5:6b:02:63:85:78:6d:b8:5e:0e:ad:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jul 24 07:01:29 2026 GMT
Not After : Jul 25 07:01:29 2026 GMT
Subject: CN=0c3c85ab6061b00b236e3a8031a31c4403e8428c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:77:fc:51:d1:74:e5:46:4f:de:02:f8:18:
20:d6:6d:99:3f:d6:82:01:8f:c4:95:85:73:19:db:
e2:1e:76:7b:26:97:b0:7f:0d:0f:16:ba:07:db:d9:
b8:f2:59:7a:8a:fd:c3:bb:1f:0d:c1:dc:cb:fd:da:
12:b6:64:2c:0f:b8:74:fe:50:c8:1b:29:4c:68:87:
25:43:2f:ad:50:7b:1d:4c:0f:1d:8c:50:60:af:13:
d3:fc:74:e7:e1:9f:0f:46:67:7e:78:75:3d:15:8b:
6a:70:3e:f2:30:98:57:97:99:83:ad:8f:1d:f6:96:
b3:35:88:6f:8f:07:14:70:af:90:5a:68:5f:48:42:
0d:91:aa:dd:7f:20:11:7c:10:03:15:21:de:bd:02:
28:aa:e5:90:54:d8:c7:b1:93:e6:0f:b0:fd:75:d3:
d9:fb:d3:43:51:68:fb:20:26:5d:da:7a:92:03:a2:
54:18:c6:ec:e8:8f:ca:65:f5:dd:bd:2a:a0:eb:c4:
d2:25:5d:5c:3e:f7:62:d8:44:b8:a9:91:37:16:38:
4f:2a:cf:3e:59:92:43:d5:b7:88:3d:fe:a1:ca:0f:
77:73:61:46:08:97:94:d7:a8:24:ac:3c:ff:b9:b2:
a3:67:40:51:68:c6:34:6f:f1:c7:18:06:6d:7a:58:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:85:AB:60:61:B0:0B:23:6E:3A:80:31:A3:1C:44:03:E8:42:8C
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:99:ac:28:3a:4c:85:86:cc:db:e5:c5:d3:66:14:f7:3e:
ec:f5:bc:21:11:3e:d0:5c:91:38:40:d5:45:e5:3e:f1:be:56:
9a:24:dd:c4:e5:93:5a:04:a2:b7:bc:19:04:c9:e8:d7:be:06:
8e:c1:a9:e1:d9:70:b5:57:2c:b0:8d:50:43:65:1b:48:59:d0:
01:5d:cc:7b:70:a7:3a:ac:25:fc:0e:51:2e:5a:34:fd:fd:15:
b7:92:f8:e8:30:ff:3d:bf:8b:95:ad:43:74:86:28:61:ad:68:
93:4b:59:3c:84:56:e0:3f:82:d2:0c:80:13:1a:c7:bd:54:eb:
37:e6:88:c0:5b:8a:df:e4:e0:b9:a9:6f:1e:2a:b9:8f:af:01:
46:e9:71:59:f9:6d:d1:e9:cc:76:ff:6e:22:35:43:3b:ec:bc:
c9:88:92:30:d0:98:51:aa:16:ef:6e:c9:91:e1:c3:db:7c:07:
61:6e:7d:ea:97:c8:fb:ab:fe:fc:d1:99:ab:54:bd:b1:57:f8:
5a:04:ca:15:be:5c:b4:d6:48:81:91:b9:eb:32:0e:fd:14:c1:
d7:96:e6:dd:e8:59:ec:8e:d8:dd:0c:29:4f:c5:f7:7b:77:cc:
f0:44:14:da:b7:aa:d4:92:db:c3:8a:db:dc:a0:9c:bb:2e:0a:
b6:77:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:12 2026 by rpki-client