Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: EUS0U1Uf28ELm/BAeaA2Xh50uWNezb33JpduYj5B9IE=
Subject key identifier: CD:14:6A:35:8D:C0:F8:FC:F5:07:ED:B8:8A:BA:E8:19:BB:18:84:1A
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 019F916CE96E99D08A36D644B5BCFE9183F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:01 +0000
Manifest this update: Fri 24 Jul 2026 00:01:01 +0000
Manifest next update: Sat 25 Jul 2026 00:01:01 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: cvBHmSjq4zyLMP/GtbMfnLA7tOA6AIbmxBhYfnE0qQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:e9:6e:99:d0:8a:36:d6:44:b5:bc:fe:91:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Jul 24 00:01:01 2026 GMT
Not After : Jul 25 00:01:01 2026 GMT
Subject: CN=cd146a358dc0f8fcf507edb88abae819bb18841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:ef:c6:4f:36:eb:d4:b0:3c:27:b7:8f:6e:
74:de:55:e3:36:56:72:d0:61:a5:2d:0a:fc:80:07:
5a:b2:d6:10:81:bb:7f:a6:f6:d7:c4:77:0f:aa:67:
2c:36:f3:89:1c:f3:86:cf:20:1e:6a:f0:03:e7:20:
9a:78:67:74:72:c0:39:fb:c4:32:5e:b9:52:30:f6:
90:94:2b:d8:c7:17:a2:36:d6:84:25:ce:79:f6:1e:
fb:d1:4e:3e:83:a3:96:c7:1d:87:07:cb:32:da:3e:
1e:3b:3b:b6:46:fe:ff:8f:2d:91:e6:00:fa:a3:8d:
ef:54:65:06:72:68:02:9b:d9:e9:c8:d5:eb:fa:1a:
e5:c4:15:74:f2:44:3e:79:d6:cd:3b:f5:3c:47:e0:
83:c7:a8:9d:89:c2:f2:af:7d:b4:c0:05:20:69:24:
eb:8f:24:e3:e5:1a:15:5f:76:b2:c8:b1:4b:58:24:
ce:fc:39:2e:36:f3:4f:7b:6b:4e:c2:ec:dd:7d:92:
08:dd:ce:c4:7a:9c:d8:d6:61:a6:2e:52:12:f2:41:
c4:0a:b0:6b:a6:9c:58:37:96:3b:d8:6a:74:c8:6f:
7a:73:dd:de:a4:ec:cc:80:93:60:da:fc:ec:d4:9c:
9f:87:fc:6d:31:00:66:9b:3a:8e:3a:cf:29:8d:c8:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:6A:35:8D:C0:F8:FC:F5:07:ED:B8:8A:BA:E8:19:BB:18:84:1A
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a8:aa:7f:53:5d:56:df:64:3e:87:bc:d4:c8:17:38:b4:d3:
b4:b4:73:a9:40:29:fe:1f:70:b8:18:51:45:a7:b1:9a:aa:16:
a4:1d:35:3c:ba:99:95:db:f1:ce:5c:bf:53:00:ad:1d:35:ed:
05:3a:87:76:90:73:15:81:e5:7f:7e:0e:85:5c:b0:dc:94:a4:
e8:69:b0:d5:a1:aa:d2:61:47:33:84:14:91:ba:63:50:ce:ee:
bf:36:f0:2e:e3:ea:2a:04:51:a7:ef:27:3f:a0:52:c4:b6:18:
cc:03:de:51:5e:e5:7b:8a:51:94:b7:a6:41:22:1e:64:85:67:
ac:cd:55:13:a2:48:1a:b8:f0:09:be:60:e7:67:f5:4f:ff:d2:
18:eb:ed:57:e1:dd:d8:7a:1d:02:23:ba:81:86:1b:95:54:09:
d9:a5:94:ea:36:f5:31:6b:e8:a9:dd:0d:f7:b8:16:71:3e:9b:
75:9f:ef:c8:06:f1:0a:da:1e:07:a3:ef:b4:b6:91:79:31:62:
95:b9:d0:f0:3e:a3:a7:25:25:6f:90:b5:a1:20:bd:e9:50:58:
a5:c8:4d:22:fd:f7:e1:fd:a8:8c:0f:d5:a3:2d:92:bd:d2:0c:
bc:cf:6e:15:a3:91:87:59:b2:8f:b7:b8:42:40:ae:89:ad:7f:
8c:f0:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:50 2026 by rpki-client