Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
File: MfjBRCMhduXgzajdb1Eg8FWPF1k.mft (raw, json)
Hash identifier: TjJM+47BHpr3LidyfNI3P4y2cVAjDsRO2WTaGnZmd5U=
Subject key identifier: 5C:94:42:6B:3D:BA:EB:1E:81:02:0A:8D:1C:EF:C9:E5:00:99:4E:75
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 01A0D5DDE835765EF4B1C6F11E01F369B495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:24 +0000
Manifest this update: Fri 25 Sep 2026 00:01:24 +0000
Manifest next update: Sat 26 Sep 2026 00:01:24 +0000
Files and hashes: 1: Ii-lH8LPJgYrERXDcJCWWlGtZYw.roa (hash: E9aoQ37FohqqgY+oDXMnmGLDfSW2HOKK6Ce9s5VYiSY=)
2: MYloTAx1JaNDWbfwmJSau7IVR20.roa (hash: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=)
3: MfjBRCMhduXgzajdb1Eg8FWPF1k.crl (hash: Yft5uLthegj+yJQdqxTtK0/6P9wiUIjHgfF3gPvZZ3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:e8:35:76:5e:f4:b1:c6:f1:1e:01:f3:69:b4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Sep 25 00:01:24 2026 GMT
Not After : Sep 26 00:01:24 2026 GMT
Subject: CN=5c94426b3dbaeb1e81020a8d1cefc9e500994e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:df:0c:08:34:94:4c:42:3b:5c:df:1c:bf:
ef:b3:e5:2b:7b:41:26:ca:6e:5f:48:34:0a:be:a5:
c7:22:73:7a:64:b4:6f:67:00:26:1b:57:7b:23:66:
89:8d:6a:c3:e2:d1:cc:c1:8c:7f:64:53:07:58:78:
ab:4b:51:c5:23:97:41:e2:ad:6b:df:fa:91:be:4e:
2f:48:6f:a9:fb:b6:46:92:7a:28:49:77:46:4b:8f:
f9:a0:c8:d5:0f:8c:0c:54:9e:26:2b:c7:17:bb:4f:
3f:1b:6b:f6:28:8c:15:4d:1a:12:4e:56:d4:17:75:
ee:42:ad:e8:7b:7b:93:70:ac:ce:14:b9:88:40:8e:
18:89:78:ce:1a:1c:95:3e:d4:6f:84:8e:a3:bb:f5:
7f:f7:1d:a3:a0:b8:70:32:08:a8:8b:6b:2f:b4:0f:
35:b9:27:65:79:8e:b0:5d:06:58:f1:66:ed:9c:5f:
08:19:33:a0:35:7d:97:06:12:e5:32:67:12:33:1b:
91:e2:7c:a0:0e:ce:cb:d2:78:ed:12:f8:16:a3:0a:
c0:6a:5a:bd:2b:3e:07:f3:70:93:92:be:30:a4:22:
d6:d6:0e:44:e6:c7:49:83:62:81:89:cc:48:59:e8:
82:04:4e:51:b4:d6:b6:8e:e9:4e:ce:bf:fd:30:f1:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:42:6B:3D:BA:EB:1E:81:02:0A:8D:1C:EF:C9:E5:00:99:4E:75
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:68:57:98:e6:33:61:d9:19:3b:f0:2e:17:88:9e:07:32:55:
ca:65:e0:4a:a7:53:f0:8c:a9:66:19:c2:31:38:f3:6d:29:3d:
c7:d6:b8:60:b4:ee:73:38:fb:75:98:23:40:6d:b4:6b:c9:94:
4b:a7:c1:f9:50:85:34:bc:a3:75:26:83:7e:13:9e:c2:1a:b0:
05:41:7c:52:5f:e1:5e:88:5b:b5:51:b2:30:21:c0:af:74:9d:
25:e1:6e:89:f9:e3:8f:f6:9a:fd:bb:ff:77:eb:89:f5:3e:92:
c8:c6:5b:5a:ff:9c:3e:55:f8:41:91:da:bb:b2:08:f6:a2:0c:
72:bd:99:50:9c:67:91:66:fe:b5:04:41:3a:4e:7d:41:42:e6:
94:f3:70:b2:09:c1:32:94:89:9c:05:b7:d2:67:58:ed:43:e0:
3d:1b:f1:67:4a:78:ae:74:01:9f:45:22:37:58:ab:b8:51:33:
de:71:de:b8:ef:4a:ed:c1:46:73:f0:04:2a:6b:bb:5f:c3:24:
93:87:fc:73:32:a1:18:aa:6e:26:3a:e2:0f:d2:fc:67:bf:81:
76:e4:92:32:0a:0d:c5:8f:cb:3f:29:fa:8d:45:33:c8:63:1d:
6c:15:24:eb:88:5b:a0:42:da:c8:92:91:f0:c2:1e:89:20:ea:
90:82:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:23 2026 by rpki-client