Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier: PeWBchbk/T4sudlLFVdbiWS62/X0/Z8f+7faQQ2Hzw8=
Subject key identifier: 23:07:B6:8B:2C:20:27:5C:2A:0E:28:19:73:80:EF:83:C0:0B:B2:E6
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial: 01A0E36397CE7D9C8D2D9DFA013D1F33CEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number: 0355
Signing time: Sun 27 Sep 2026 15:02:29 +0000
Manifest this update: Sun 27 Sep 2026 15:02:29 +0000
Manifest next update: Mon 28 Sep 2026 15:02:29 +0000
Files and hashes: 1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: N/r5C/L3yHgCQgvrF1BOM3tzpxBi6oxx0yM5saCIj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:97:ce:7d:9c:8d:2d:9d:fa:01:3d:1f:33:ce:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
Validity
Not Before: Sep 27 15:02:29 2026 GMT
Not After : Sep 28 15:02:29 2026 GMT
Subject: CN=2307b68b2c20275c2a0e28197380ef83c00bb2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:e7:03:59:54:db:03:47:44:5f:6f:7b:74:
e1:00:7b:4f:0f:8d:57:cc:72:c8:39:2c:01:f9:17:
69:75:ca:9a:5a:05:fd:48:4d:0e:18:a6:de:74:bb:
3d:f4:fc:01:ea:22:bb:53:14:5a:7a:c6:44:32:fb:
ab:27:cf:7f:50:fc:27:b8:07:1c:ae:66:7f:4d:11:
96:2d:b0:bd:c5:20:09:26:bd:b3:27:8f:9a:e4:af:
e7:ae:4d:89:de:73:d6:96:1d:5a:83:0c:e5:b3:52:
ea:9c:fc:c1:03:47:0b:08:a4:d9:ab:f9:24:80:14:
3b:72:c7:1d:c3:81:90:00:6e:2f:aa:ff:78:27:ef:
81:1f:5f:0e:fb:dc:c3:16:a4:02:61:38:46:b4:e5:
d8:86:91:86:b9:c6:d4:89:2e:f1:b2:44:83:34:1d:
71:c2:4d:3a:ea:a6:3a:5a:e2:f1:a6:78:94:cc:b8:
a8:3a:38:23:f7:25:b5:2b:c4:0f:a9:f9:72:75:73:
25:22:60:93:ad:e7:17:b7:57:6c:80:3e:f1:12:a9:
bd:53:db:9b:b1:53:c5:e4:52:af:a4:9e:90:4d:8e:
3b:bb:40:3d:f1:51:96:13:01:a3:15:44:5e:ac:e5:
14:c6:d0:4e:4c:e9:a0:f6:29:f0:2d:ec:66:8d:6c:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:B6:8B:2C:20:27:5C:2A:0E:28:19:73:80:EF:83:C0:0B:B2:E6
X509v3 Authority Key Identifier:
keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2d:5b:7f:9d:ed:4a:17:27:db:9d:11:b1:d9:92:ea:59:a1:
fb:3f:b7:55:e6:d4:0f:85:d3:1c:b9:dd:bb:8e:92:23:52:e1:
38:73:fb:4b:46:f0:48:5b:c5:f6:68:ac:36:61:5b:d9:ff:23:
59:0b:e6:1e:84:a2:00:c9:6e:84:ff:e2:9e:5e:72:0b:0d:c8:
92:4e:75:77:c7:51:24:ad:d9:11:47:df:c3:2f:91:76:16:7c:
6b:71:d1:fa:e2:81:e0:05:f5:c3:3d:d3:5c:02:d7:2e:7e:59:
c5:b8:95:e9:b6:40:ad:44:9e:eb:2c:a7:c9:86:8e:76:a2:dc:
bf:b6:71:f2:a8:56:41:7f:9a:8c:a4:28:3d:c3:ce:8e:0c:35:
95:85:44:41:75:a5:60:18:55:f4:91:c6:f9:cd:29:52:a4:a9:
ff:89:91:67:c3:c9:23:17:9f:33:86:f6:52:d0:42:b2:87:04:
d4:5e:2d:e6:bf:a3:c3:a5:97:6b:46:89:4f:f0:e3:f9:73:d8:
89:44:d2:99:0d:a5:0d:af:bf:54:4b:1d:8e:76:47:24:90:46:
62:d5:34:f0:9c:d1:a1:c1:46:5b:2d:38:60:49:42:39:da:f6:
c0:89:38:f7:bd:9f:dd:e7:4e:b5:20:dd:91:3a:65:21:8c:e2:
aa:72:be:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjY5fOfZyNLZ36AT0fM870MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2M4MjU4MTM0MzVmYjAxMTU0MzhlZTNmNjA3NjM3Y2Vi
ZDhlOGUwHhcNMjYwOTI3MTUwMjI5WhcNMjYwOTI4MTUwMjI5WjAzMTEwLwYDVQQD
EygyMzA3YjY4YjJjMjAyNzVjMmEwZTI4MTk3MzgwZWY4M2MwMGJiMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHPnA1lU2wNHRF9ve3ThAHtPD41X
zHLIOSwB+RdpdcqaWgX9SE0OGKbedLs99PwB6iK7UxRaesZEMvurJ89/UPwnuAcc
rmZ/TRGWLbC9xSAJJr2zJ4+a5K/nrk2J3nPWlh1agwzls1LqnPzBA0cLCKTZq/kk
gBQ7cscdw4GQAG4vqv94J++BH18O+9zDFqQCYThGtOXYhpGGucbUiS7xskSDNB1x
wk066qY6WuLxpniUzLioOjgj9yW1K8QPqflydXMlImCTrecXt1dsgD7xEqm9U9ub
sVPF5FKvpJ6QTY47u0A98VGWEwGjFURerOUUxtBOTOmg9inwLexmjWygBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMHtossICdcKg4oGXOA74PAC7LmMB8GA1UdIwQY
MBaAFJl8glgTQ1+wEVQ47j9gdjfOvY6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzIt
MjhmNzFhYmJhMDNhLzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzItMjhmNzFhYmJhMDNh
LzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy1bf53t
Shcn250RsdmS6lmh+z+3VebUD4XTHLndu46SI1LhOHP7S0bwSFvF9misNmFb2f8j
WQvmHoSiAMluhP/inl5yCw3Ikk51d8dRJK3ZEUffwy+RdhZ8a3HR+uKB4AX1wz3T
XALXLn5ZxbiV6bZArUSe6yynyYaOdqLcv7Zx8qhWQX+ajKQoPcPOjgw1lYVEQXWl
YBhV9JHG+c0pUqSp/4mRZ8PJIxefM4b2UtBCsocE1F4t5r+jw6WXa0aJT/Dj+XPY
iUTSmQ2lDa+/VEsdjnZHJJBGYtU08JzRocFGWy04YElCOdr2wIk4972f3edOtSDd
kTplIYziqnK+Zw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:54:38 2026 by rpki-client