Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: SYDV3ZVouYB8My4fp1pJXG7vFRV7AphnlKeV7jEiXFg=
Subject key identifier: 20:57:6A:AD:70:41:37:25:2A:DE:2C:FE:E0:43:43:48:D3:89:71:C9
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019F9211D4A9ECC83A4723E593B32D70F5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 08F3
Signing time: Fri 24 Jul 2026 03:01:09 +0000
Manifest this update: Fri 24 Jul 2026 03:01:09 +0000
Manifest next update: Sat 25 Jul 2026 03:01:09 +0000
Files and hashes: 1: 6bYFArU-m22v_2LMnKGfPfQ5d_U.roa (hash: T50wLh+t9t04GFvV8DA2eC2Fd5ixjDyLVmolPRcQuvk=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: +JiyhkBSX15O16UdakzTbhJP2+kJDqEYRMreyUv8qDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:d4:a9:ec:c8:3a:47:23:e5:93:b3:2d:70:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Jul 24 03:01:09 2026 GMT
Not After : Jul 25 03:01:09 2026 GMT
Subject: CN=20576aad704137252ade2cfee0434348d38971c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:88:cb:f6:47:ac:cd:06:e1:41:23:ad:9c:
04:2e:b5:e2:9d:b4:49:7b:2d:dc:37:ba:2e:b4:ef:
7f:a9:8f:1c:9c:72:b6:a5:63:b4:a8:13:7c:04:76:
7c:56:6e:03:f0:6b:0b:3d:0b:15:8d:da:34:15:0d:
3e:aa:6e:ac:0b:5f:7e:52:16:70:72:78:69:ec:c6:
2a:a4:f0:ba:f1:c6:5b:5b:f5:23:af:63:53:52:cf:
8d:65:9e:54:0c:59:c4:2d:8d:67:00:66:33:c4:53:
7a:9e:b3:e1:f7:8c:05:59:4b:d3:85:07:70:69:a0:
87:88:cf:1d:a7:5b:73:7e:21:93:70:e5:51:f9:42:
38:d7:79:c3:e6:5b:5b:23:56:d3:92:97:96:89:e7:
74:cb:d7:f7:e5:75:f3:97:29:ce:03:52:c2:ca:cb:
bb:0b:12:b6:c0:cb:57:72:f0:27:3c:eb:7f:7e:fe:
2d:4c:f4:f4:d9:e6:95:7a:92:02:22:bd:d7:94:78:
21:52:df:ad:68:a8:a3:98:8e:31:05:ca:b4:73:bd:
ab:7e:db:73:fb:06:21:3c:f0:fe:d9:87:f2:e8:9d:
a9:f2:d3:e3:48:10:83:79:42:09:c6:7b:8b:2a:c6:
07:79:70:0e:db:23:25:f0:31:0d:93:aa:da:b5:e2:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:6A:AD:70:41:37:25:2A:DE:2C:FE:E0:43:43:48:D3:89:71:C9
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:00:36:ee:69:ff:da:48:33:be:f1:16:27:a9:81:8b:86:2e:
3b:56:0c:7f:82:85:c0:99:57:11:d4:c9:f6:5a:7e:74:11:83:
11:4a:6b:32:b5:d8:c0:13:d3:cc:7b:a4:74:b2:70:ac:52:8b:
09:5a:cc:ad:79:a5:d8:6f:41:98:8b:a0:51:43:dc:2e:9e:ab:
d6:63:12:85:83:66:a8:4c:12:d0:05:e9:3c:9b:2a:15:9f:8f:
62:2d:25:8f:11:81:15:73:c7:1a:1c:ca:91:e4:75:05:02:0d:
46:31:6c:ea:97:87:64:92:21:43:a2:c6:91:eb:4b:6f:8c:ac:
c5:3f:b7:e4:43:26:b7:2a:b7:60:21:45:8c:74:bf:a8:f5:05:
3d:cd:d4:39:85:7f:47:4f:a5:f3:59:e5:66:e5:22:ca:9d:00:
bb:f2:2a:18:f5:0a:67:d4:9a:37:7b:61:92:63:76:d7:d8:a3:
a5:b7:0b:fb:d6:97:a8:eb:08:22:99:20:25:4e:7f:f9:a9:78:
63:ff:76:e5:b5:7e:7c:9f:51:6b:c8:4e:a6:40:6d:ff:7e:d0:
f0:8c:d3:61:3b:0c:d7:f4:0a:6e:16:d7:05:56:ae:98:ed:3c:
0d:a5:ee:c0:36:00:fa:3a:11:f3:19:e8:1d:05:1a:37:cb:ce:
c2:1e:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:22 2026 by rpki-client