Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
File: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft (raw, json)
Hash identifier: qNxlU/dwAdik4wb2VOdtSJQ49x5MYzdvSazsGvzPMP8=
Subject key identifier: C4:43:51:39:C7:2C:81:BE:BC:C3:19:A9:20:17:FC:D3:71:BA:EC:1C
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 01A0D682FFC2B26FA5E660DC028D23809F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
Manifest number: 0227
Signing time: Fri 25 Sep 2026 03:01:44 +0000
Manifest this update: Fri 25 Sep 2026 03:01:44 +0000
Manifest next update: Sat 26 Sep 2026 03:01:44 +0000
Files and hashes: 1: 7Nec0zgnRC0mgd2UCiQb57qGoQo.roa (hash: QAq0HQWlQiRt1izpzv0A0gRL3ce2Gd+6X/bnw4KM3nA=)
2: EqD5liyFpdPq2XLyZyti6Tv-BNE.roa (hash: 45CS/GD+FH3aynJbkHhA0cCnbCPZTt1kF44EBED09Gk=)
3: IIzd337ndqahUTUYLMzPo6Cdln0.roa (hash: UWEgCoa1LHV7YeRQ9V+WSXpDfY1u+biM1IYHbQp0DpI=)
4: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl (hash: Ntown68FnDfOUpstbQiVfm4G48zyfbOaAm/t2IWIyl0=)
5: ZUFhy3Q3TnBrOEV6oC_51srJdWY.roa (hash: 9diosIXqGs1+lYyW3HLA/DSBkni7soymXvUgQxb3AL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:ff:c2:b2:6f:a5:e6:60:dc:02:8d:23:80:9f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: Sep 25 03:01:44 2026 GMT
Not After : Sep 26 03:01:44 2026 GMT
Subject: CN=c4435139c72c81bebcc319a92017fcd371baec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:d9:b8:e5:f2:14:22:1e:90:29:24:0d:ca:
aa:52:7b:bc:e4:41:08:1e:45:09:90:cd:c6:ee:24:
b4:92:fe:6a:dd:44:c2:f7:95:ed:5d:4b:79:21:d9:
bb:44:c1:eb:87:d2:fa:29:0e:4b:90:b5:ea:f5:97:
01:77:dc:c0:09:84:5c:07:89:40:27:99:0b:ef:51:
2c:e9:0d:f0:3c:52:df:36:f2:80:b4:a5:d5:87:8d:
48:7e:00:72:a4:da:cb:3c:ca:d9:0f:fa:74:c9:bb:
5a:89:b0:36:cf:0c:7c:4a:17:32:3d:33:23:75:a1:
8a:31:9f:5e:37:53:ef:46:d0:79:55:fc:d4:83:ab:
dc:42:2a:f7:70:0b:c5:11:1b:4f:a0:06:4e:08:f4:
fc:f1:be:d0:6f:ea:39:fc:2a:0b:8c:74:06:26:9c:
38:ed:d8:24:bc:cb:54:d5:13:68:d1:3e:8a:95:ee:
be:09:9a:85:fb:b7:8b:4b:a1:58:2b:96:34:54:c3:
40:b5:97:4e:ab:38:d2:59:a4:ed:cd:11:ab:90:43:
b9:33:02:e8:63:e5:97:23:7b:08:c7:be:a8:46:96:
b3:7e:4b:4b:c5:c2:db:79:fa:29:1e:29:8f:dc:2d:
1e:e5:d7:49:57:61:08:68:21:9a:7d:6a:d4:1c:85:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:51:39:C7:2C:81:BE:BC:C3:19:A9:20:17:FC:D3:71:BA:EC:1C
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2e:ba:f9:62:1e:8e:e4:c4:5b:fb:5f:2d:9e:c5:e8:1d:5d:
ee:17:05:4e:3d:d1:8c:a7:f4:1a:b0:21:a2:47:d3:b9:96:12:
d1:ec:90:c6:7f:63:73:7e:73:85:55:3e:3d:eb:28:a1:58:98:
fb:de:26:c2:53:3b:79:26:81:42:d6:4a:62:6f:73:87:f1:34:
24:e9:a5:f0:2b:f6:b7:b0:90:53:69:6b:cf:3d:92:76:4f:10:
08:9e:ef:ab:8f:38:7d:5d:32:1b:2c:00:e9:36:c6:91:13:30:
42:2c:93:51:0a:e0:0c:09:6a:90:1f:83:19:13:ea:a4:c0:df:
51:18:ac:c7:d4:fc:fe:d1:7e:c1:9c:3f:b1:98:fb:23:ab:c5:
f4:0e:64:ba:d8:f0:a9:03:0e:b5:34:1b:c9:83:eb:46:54:54:
e1:28:c1:38:c8:5f:71:f2:85:68:c6:b1:08:09:5d:9e:2c:c8:
31:42:9f:77:ff:0e:cb:9d:92:78:e1:86:e8:73:85:fb:2a:8a:
0f:2f:1c:1d:c2:5c:af:da:48:32:ca:8b:4a:a5:2b:e0:ac:4e:
f8:87:95:ad:f6:1f:cf:9a:3c:fd:73:30:1a:94:9b:1a:b8:30:
37:07:45:e4:47:03:13:06:8e:90:b1:a4:e3:36:cf:f5:b7:8c:
2a:b8:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:45:26 2026 by rpki-client