Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier: +PpSZu1G+S9dmdeKofleh1OSwOhgIB6GjdlJ7bWWavI=
Subject key identifier: FC:AF:71:D5:0A:2D:3A:00:97:A3:C3:08:F8:05:71:4E:5F:9C:89:FD
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial: 019F9549300B7F3661278DAD9BEA9632371F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number: 02A8
Signing time: Fri 24 Jul 2026 18:00:29 +0000
Manifest this update: Fri 24 Jul 2026 18:00:29 +0000
Manifest next update: Sat 25 Jul 2026 18:00:29 +0000
Files and hashes: 1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: hcLFGkNQ6tz8NjtCTLBJkAGaQTmqThZxcQ/hf56NKUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:30:0b:7f:36:61:27:8d:ad:9b:ea:96:32:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
Validity
Not Before: Jul 24 18:00:29 2026 GMT
Not After : Jul 25 18:00:29 2026 GMT
Subject: CN=fcaf71d50a2d3a0097a3c308f805714e5f9c89fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:73:6e:32:a1:cf:79:2d:22:1e:08:c2:dd:
d4:f8:1f:a5:38:d0:c8:5e:93:42:9c:5f:09:32:a0:
86:b0:4d:5e:fe:ce:20:d8:ad:13:a2:c7:1a:8d:bc:
62:41:04:03:aa:75:a3:12:62:47:34:e1:3b:c1:6c:
4b:a5:8d:1d:9b:c6:e4:d2:07:c8:b0:51:07:20:b6:
57:07:ae:a1:4c:c2:63:23:a1:32:7d:21:ed:bb:60:
28:bb:bd:1d:d2:9e:66:5d:da:a8:dd:ac:51:31:a5:
d5:a8:95:5c:2c:96:83:89:22:12:ed:7c:e5:fd:17:
48:95:5e:a3:5e:b7:b6:13:32:75:78:9e:79:e7:6c:
ad:fb:32:41:fd:e4:32:37:8f:d9:ab:65:e4:6c:7c:
f8:6f:43:36:76:8d:3e:8f:0a:6c:ce:6e:13:b6:33:
28:02:ad:ef:30:12:bd:26:a8:62:07:7e:7c:0f:54:
30:d1:dc:90:f4:e2:c0:1e:79:1b:b6:39:3a:dc:58:
27:a1:20:64:62:e6:1a:b7:d2:26:4e:b8:2f:f8:72:
28:38:ed:2c:ff:96:f6:e4:4a:75:04:65:b3:10:c8:
76:2e:6d:e5:fc:32:2d:b3:5e:d4:f5:52:76:78:ea:
29:5c:95:2f:c4:8e:54:06:f8:d1:07:af:c8:d0:21:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AF:71:D5:0A:2D:3A:00:97:A3:C3:08:F8:05:71:4E:5F:9C:89:FD
X509v3 Authority Key Identifier:
keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:43:64:cc:52:42:27:bc:e1:fe:ca:74:95:a5:48:a0:80:a2:
c5:c9:20:4b:55:8a:12:08:0e:78:cd:d6:34:bf:7c:b8:e7:02:
af:da:d4:95:16:b8:05:77:8b:cd:33:51:7f:59:16:29:2a:72:
84:96:ec:1e:c9:83:63:86:0b:52:e3:4d:6f:3e:71:af:1a:c9:
a3:85:f7:b5:36:11:83:47:84:1b:8b:66:c4:79:4f:03:28:2c:
44:1b:7a:af:12:23:96:08:ab:8d:b3:10:07:6e:9e:11:2e:86:
32:be:72:6a:3c:0f:88:5c:de:7e:e8:ab:5b:a3:41:21:18:9a:
32:f7:42:af:a9:16:c0:1a:4a:f3:9f:6c:d7:ba:ca:49:09:85:
87:3d:d9:ae:4f:d1:0b:73:be:be:ca:34:1a:2e:73:5f:00:66:
d9:96:42:5a:b9:4b:81:2b:af:06:ec:ea:24:83:46:01:81:73:
52:e3:8a:55:e3:aa:ea:ea:c5:ca:82:67:ae:89:62:8a:15:79:
28:39:bd:14:de:f1:d7:da:90:97:ed:9a:e6:c0:6b:52:b6:9a:
23:09:8f:08:19:14:3e:3c:40:00:66:cf:e4:70:69:f3:0d:fa:
84:b5:aa:f4:64:2c:b4:8b:16:af:02:9d:0e:ee:ec:1d:33:86:
a4:91:bb:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSTALfzZhJ42tm+qWMjcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2M4MjU4MTM0MzVmYjAxMTU0MzhlZTNmNjA3NjM3Y2Vi
ZDhlOGUwHhcNMjYwNzI0MTgwMDI5WhcNMjYwNzI1MTgwMDI5WjAzMTEwLwYDVQQD
EyhmY2FmNzFkNTBhMmQzYTAwOTdhM2MzMDhmODA1NzE0ZTVmOWM4OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgdzbjKhz3ktIh4Iwt3U+B+lONDI
XpNCnF8JMqCGsE1e/s4g2K0ToscajbxiQQQDqnWjEmJHNOE7wWxLpY0dm8bk0gfI
sFEHILZXB66hTMJjI6EyfSHtu2Aou70d0p5mXdqo3axRMaXVqJVcLJaDiSIS7Xzl
/RdIlV6jXre2EzJ1eJ5552yt+zJB/eQyN4/Zq2XkbHz4b0M2do0+jwpszm4TtjMo
Aq3vMBK9JqhiB358D1Qw0dyQ9OLAHnkbtjk63FgnoSBkYuYat9ImTrgv+HIoOO0s
/5b25Ep1BGWzEMh2Lm3l/DIts17U9VJ2eOopXJUvxI5UBvjRB6/I0CEhSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyvcdUKLToAl6PDCPgFcU5fnIn9MB8GA1UdIwQY
MBaAFJl8glgTQ1+wEVQ47j9gdjfOvY6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzIt
MjhmNzFhYmJhMDNhLzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzItMjhmNzFhYmJhMDNh
LzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0NkzFJC
J7zh/sp0laVIoICixckgS1WKEggOeM3WNL98uOcCr9rUlRa4BXeLzTNRf1kWKSpy
hJbsHsmDY4YLUuNNbz5xrxrJo4X3tTYRg0eEG4tmxHlPAygsRBt6rxIjlgirjbMQ
B26eES6GMr5yajwPiFzefuirW6NBIRiaMvdCr6kWwBpK859s17rKSQmFhz3Zrk/R
C3O+vso0Gi5zXwBm2ZZCWrlLgSuvBuzqJINGAYFzUuOKVeOq6urFyoJnroliihV5
KDm9FN7x19qQl+2a5sBrUraaIwmPCBkUPjxAAGbP5HBp8w36hLWq9GQstIsWrwKd
Du7sHTOGpJG7Eg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:40 2026 by rpki-client