Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
File: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft (raw, json)
Hash identifier: ub2smrkumf31h6qm6ZoEaoUJwaR90ykSHacHs5wTG3M=
Subject key identifier: CE:6B:BB:88:B8:36:AE:9E:05:0E:7B:C3:A0:94:CB:14:E0:F9:5A:0D
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 019E1DFDF4607A8346992648A189BF2E4F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
Manifest number: BC
Signing time: Tue 12 May 2026 21:00:42 +0000
Manifest this update: Tue 12 May 2026 21:00:42 +0000
Manifest next update: Wed 13 May 2026 21:00:42 +0000
Files and hashes: 1: EqD5liyFpdPq2XLyZyti6Tv-BNE.roa (hash: 45CS/GD+FH3aynJbkHhA0cCnbCPZTt1kF44EBED09Gk=)
2: MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl (hash: VUiItgsdoiZ4djw8dhlYTakTHZNKMvDtjSpKzk+qUCA=)
3: ZUFhy3Q3TnBrOEV6oC_51srJdWY.roa (hash: 9diosIXqGs1+lYyW3HLA/DSBkni7soymXvUgQxb3AL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f4:60:7a:83:46:99:26:48:a1:89:bf:2e:4f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: May 12 21:00:42 2026 GMT
Not After : May 13 21:00:42 2026 GMT
Subject: CN=ce6bbb88b836ae9e050e7bc3a094cb14e0f95a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:46:b2:c8:8a:10:9f:65:3f:bb:85:0a:1c:
c3:e1:b2:46:d7:4b:8f:a3:c3:43:82:c4:aa:4b:6e:
67:f2:53:07:8c:2c:5b:73:27:de:1b:d4:aa:88:ee:
85:27:b1:df:79:99:58:b1:44:43:14:dc:50:00:ff:
45:85:70:6b:24:98:ba:23:ec:b2:bc:8b:cf:a9:89:
7f:a8:eb:d3:5b:2d:84:15:39:5b:5a:18:e2:7f:83:
e8:5b:ec:f9:cb:f5:81:2c:65:85:30:75:da:cf:88:
8d:4b:68:fd:d5:96:58:66:c6:81:21:f4:a2:9c:5e:
ef:4d:18:ea:30:c0:a9:bd:c2:4b:1b:06:4c:a9:2b:
91:9b:ce:5d:4f:21:a9:33:0b:f9:8e:bb:ec:2f:3c:
e1:24:bf:bf:52:43:37:0a:77:5c:8e:4e:ea:09:3d:
a3:2a:4b:bf:c4:a9:d8:35:ed:0b:87:e8:ae:96:c6:
d1:cd:35:64:d8:bb:7c:20:55:c4:12:d5:51:40:f5:
f4:05:4d:b0:c7:f8:04:f1:76:69:1a:d2:2c:c8:e1:
86:d6:be:59:f1:bf:83:38:49:21:ed:3e:3d:27:46:
55:b3:1b:0b:20:70:6b:62:2b:ee:e7:5e:ac:73:c3:
2b:14:d7:48:6f:86:d4:37:6c:7e:a7:35:2e:fe:92:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6B:BB:88:B8:36:AE:9E:05:0E:7B:C3:A0:94:CB:14:E0:F9:5A:0D
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b2:6e:57:17:b7:66:66:7b:15:9a:62:52:75:64:e2:6b:de:
1c:ac:c5:01:56:db:ea:5e:e8:df:5a:26:1d:ef:3d:ce:27:bb:
51:3d:92:64:32:f5:14:33:44:7e:94:81:7c:27:1b:21:e7:aa:
b9:74:25:35:ad:d6:b3:22:36:7a:aa:0c:2e:e2:9f:e2:dd:d7:
c4:f7:8d:f7:10:93:96:02:60:d9:33:f3:bf:37:49:0a:f3:d1:
51:70:60:d2:81:0c:ec:8f:d1:e1:46:b7:c8:fa:dd:6b:0a:b2:
d2:74:87:14:ab:08:df:44:83:d6:df:9b:1d:88:2d:3b:f2:ac:
4c:3d:57:c1:03:cd:e0:de:52:bd:b8:be:b0:59:46:ce:fe:c7:
ff:97:ab:cf:1e:b5:36:b7:cf:0f:69:d9:4c:18:36:6a:1a:e9:
27:6c:a7:f0:40:8c:78:1b:3b:d5:ac:a4:36:c2:dc:32:6f:70:
87:fc:ca:c3:14:95:f7:e8:54:6e:50:40:84:22:e8:07:40:11:
78:55:d6:70:db:94:4e:38:d7:0a:58:75:52:bf:fc:08:91:f3:
34:69:07:2f:7e:6a:1f:ee:29:be:dd:f4:4b:5d:86:c9:5a:70:
48:70:70:b8:ba:82:70:07:b7:fd:97:0b:95:cd:74:ab:81:37:
7f:6d:91:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:37 2026 by rpki-client