Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: Kuw6MdsxQ5gCWP+fFfdqfkvmkMNcDRL9SulqPqkapSE=
Subject key identifier: 12:3A:38:BD:57:D1:76:7B:E9:F1:65:64:BD:27:AA:50:D7:D4:0B:A8
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 019F93C957DF85F455C0BCAF8654ECE40370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 0398
Signing time: Fri 24 Jul 2026 11:01:13 +0000
Manifest this update: Fri 24 Jul 2026 11:01:13 +0000
Manifest next update: Sat 25 Jul 2026 11:01:13 +0000
Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: EiVNgMyniTmA0VmhIYNp/Q/y6MgFgPReiq5vho8cYQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:57:df:85:f4:55:c0:bc:af:86:54:ec:e4:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Jul 24 11:01:13 2026 GMT
Not After : Jul 25 11:01:13 2026 GMT
Subject: CN=123a38bd57d1767be9f16564bd27aa50d7d40ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:db:2a:be:64:01:59:87:53:22:d6:11:40:
f2:39:6d:ec:75:48:fb:51:f7:da:b6:6e:17:c1:c3:
34:ef:90:0a:3e:c3:70:2e:f9:20:19:67:60:90:76:
ef:c8:2c:14:91:ab:f7:56:da:84:de:bc:bc:ca:82:
5a:fa:1b:79:c5:a8:72:ae:a0:b1:e3:7d:fe:45:54:
66:c7:35:a3:88:78:70:bc:7a:3e:56:2b:63:93:76:
64:73:07:ac:d8:88:91:57:a7:95:67:f3:ad:dd:a9:
2e:a4:0c:d9:7a:c2:16:f1:65:a5:6b:5a:2e:39:1f:
9d:f9:b5:70:63:21:d0:68:57:fb:d9:ef:ef:c3:bc:
5e:76:4e:cf:fe:53:17:cf:1f:2b:22:26:d6:c5:42:
26:39:76:5b:8b:f3:46:10:0b:86:9d:4c:56:29:a0:
1c:d9:6c:79:6d:88:9b:88:78:c6:db:98:32:ee:b9:
94:88:e8:b7:59:bd:29:62:32:c1:3d:51:e6:7e:66:
70:73:4b:a7:4e:45:71:0d:f0:5a:bc:1b:81:c8:2c:
3d:69:fe:d7:d8:f9:2e:b9:41:e6:d6:09:f2:fe:1e:
77:60:b2:a3:d5:2e:c0:3b:59:f2:17:26:0d:d5:82:
d3:7c:68:88:82:cb:23:da:64:56:3c:d1:26:c5:fd:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3A:38:BD:57:D1:76:7B:E9:F1:65:64:BD:27:AA:50:D7:D4:0B:A8
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c9:10:fb:c8:f1:10:8e:ea:00:6e:90:d4:2a:1a:19:c2:60:
f2:63:13:14:23:9d:ef:25:97:78:25:da:c9:90:95:26:1f:93:
24:94:62:39:05:18:cf:26:61:ff:a8:1a:7f:a4:0a:e8:7a:ac:
81:24:e1:fa:25:45:e0:ce:d0:e5:51:7e:60:78:0b:65:ef:7c:
b4:92:81:07:ff:ba:ed:da:95:05:e9:fa:52:26:04:3a:65:0a:
88:b1:a4:7b:c8:9b:67:99:ec:de:54:74:f4:e2:73:1b:23:68:
b5:13:63:49:be:aa:3d:c5:8f:0c:87:76:d4:6c:69:32:75:40:
03:b2:30:78:ac:ca:44:87:f0:80:cf:56:ac:f8:57:c9:13:ac:
ed:26:7f:33:9e:f9:e1:90:0f:33:bd:8d:e2:3b:29:89:c4:00:
43:ad:42:aa:b1:28:87:f7:cb:83:0b:39:09:67:c0:c9:0a:51:
fd:14:41:ef:64:32:85:c7:34:b5:fb:f3:57:d3:1d:dd:b4:40:
ef:f0:71:9d:7a:c9:36:2a:47:f9:56:e3:f9:a7:f2:d2:e2:b8:
e9:37:27:90:70:94:30:83:c6:e5:fd:dc:8e:49:f0:30:4d:8f:
21:d0:1e:16:11:19:e0:00:d8:bf:58:3f:c4:7f:94:9c:3b:39:
c2:de:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:26 2026 by rpki-client