Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier: HJ4WbALfd7ftXfJ/4fiNDQJUtO6AaLu/Q6h3zA0uDe0=
Subject key identifier: 7F:A4:22:44:AB:81:49:2D:45:83:F1:F5:DD:4D:B3:F8:8F:CC:A1:0C
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 019D28846B371C9335F54B43CF5DD8AB4674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 05:00:59 +0000
Manifest this update: Thu 26 Mar 2026 05:00:59 +0000
Manifest next update: Fri 27 Mar 2026 05:00:59 +0000
Files and hashes: 1: 6I-XOJQCbqzINKRTA5FkbiUtVKk.roa (hash: 8IJ1FF4HTyQEaH/mehBRIc6TzRQtROpPJ0AvFUYLeqE=)
2: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: gQxiGLjb0ETrzO4iCmzp9544n3sFvwErX+antGkLmn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6b:37:1c:93:35:f5:4b:43:cf:5d:d8:ab:46:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Mar 26 05:00:59 2026 GMT
Not After : Mar 27 05:00:59 2026 GMT
Subject: CN=7fa42244ab81492d4583f1f5dd4db3f88fcca10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:ea:6f:c9:df:f3:3e:90:bd:9e:52:a8:92:
e8:a9:f7:27:7a:4b:82:3d:60:85:a1:fa:4a:be:3c:
d7:91:cb:58:2b:93:28:80:56:fa:79:d2:7f:42:93:
39:86:8e:5e:10:7d:b4:17:73:72:7a:cc:38:39:79:
72:d0:2a:80:ba:77:49:e2:d0:77:ee:b5:82:6d:ce:
f3:9a:bd:04:26:2e:f7:84:b5:89:fc:ca:bd:52:76:
60:c5:20:38:41:bf:c3:e4:08:d9:a7:c3:31:85:cf:
7a:1e:a6:8e:79:7c:2e:df:28:3f:dc:1f:29:88:57:
08:d6:84:a1:38:d6:07:b0:92:68:0e:7f:00:50:64:
92:fe:b1:f0:b7:83:d5:21:2a:53:96:0b:c9:7d:4e:
92:f7:ea:36:57:f6:b4:ae:88:c4:6a:7f:35:1a:22:
c8:fa:75:8d:ab:34:2d:00:7c:8d:98:b5:b0:b5:cf:
88:f9:3a:a6:94:d1:f1:3b:78:e0:8c:8e:0f:f2:61:
e7:97:92:2f:e5:d7:0b:3b:69:00:4f:fc:66:6e:d3:
f9:99:84:28:fd:23:83:fd:f7:38:11:bd:85:07:d4:
9e:b1:a2:cb:b8:66:4a:e2:1a:a3:3f:cb:b0:07:c5:
c7:86:4d:de:d1:ae:d9:8a:a8:57:ea:c6:b9:09:5b:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:22:44:AB:81:49:2D:45:83:F1:F5:DD:4D:B3:F8:8F:CC:A1:0C
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:bc:c1:26:c5:61:0f:66:92:66:c1:4e:0c:f1:55:ac:c6:
88:ad:bf:e4:a5:93:f0:61:74:50:9c:ed:eb:2f:32:6c:9e:5d:
96:b1:2d:69:48:b1:01:ae:a0:95:1c:0d:86:6f:9c:a5:f9:8b:
b2:38:2b:da:50:c9:fc:45:4e:91:03:14:42:b5:01:8a:42:59:
0e:2b:95:26:9e:8a:1b:b9:55:0d:16:e4:5e:83:25:3e:e9:eb:
1b:18:2d:70:24:6c:50:6e:76:4a:7c:3d:40:48:4b:97:a4:04:
07:a4:3c:49:08:3a:cc:72:c8:c4:9f:2f:4b:ba:61:a5:e5:9a:
f2:30:a9:35:85:0c:73:23:e2:55:d6:59:68:fa:cf:da:c0:aa:
57:43:90:2b:0b:17:dc:18:68:8c:87:0f:63:55:06:77:0e:09:
16:8a:17:94:f6:73:f0:12:d7:1f:75:a8:95:75:d7:d1:24:ec:
95:ab:19:53:47:10:b3:52:e9:c8:52:00:93:8f:fb:96:ce:b2:
bb:a8:71:89:88:a8:d1:ef:51:73:d5:a9:db:44:ff:51:82:58:
00:17:e7:4c:80:86:f4:09:2b:0d:e6:b6:f1:f8:ff:8d:97:fb:
a2:73:e4:cd:a5:6a:c9:56:f1:97:15:ec:9b:a2:c7:3c:10:68:
d6:ce:53:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGs3HJM19UtDz13Yq0Z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwOTZkN2FmYmI4YTVlMzE1YTVjNDg5YWNlYTdkY2I3NWFh
NjVkMDQwHhcNMjYwMzI2MDUwMDU5WhcNMjYwMzI3MDUwMDU5WjAzMTEwLwYDVQQD
Eyg3ZmE0MjI0NGFiODE0OTJkNDU4M2YxZjVkZDRkYjNmODhmY2NhMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxrqb8nf8z6QvZ5SqJLoqfcnekuC
PWCFofpKvjzXkctYK5MogFb6edJ/QpM5ho5eEH20F3Nyesw4OXly0CqAundJ4tB3
7rWCbc7zmr0EJi73hLWJ/Mq9UnZgxSA4Qb/D5AjZp8Mxhc96HqaOeXwu3yg/3B8p
iFcI1oShONYHsJJoDn8AUGSS/rHwt4PVISpTlgvJfU6S9+o2V/a0rojEan81GiLI
+nWNqzQtAHyNmLWwtc+I+TqmlNHxO3jgjI4P8mHnl5Iv5dcLO2kAT/xmbtP5mYQo
/SOD/fc4Eb2FB9SesaLLuGZK4hqjP8uwB8XHhk3e0a7ZiqhX6sa5CVvvfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+kIkSrgUktRYPx9d1Ns/iPzKEMMB8GA1UdIwQY
MBaAFDCW16+7il4xWlxIms6n3Ldapl0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYt
ZGY0ZThjNzM2NGZlLzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jZjhmOTktZTU4MS00ZjVmLTg3NWYtZGY0ZThjNzM2NGZl
LzEvTUpiWHI3dUtYakZhWEVpYXpxZmN0MXFtWFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz28wSbF
YQ9mkmbBTgzxVazGiK2/5KWT8GF0UJzt6y8ybJ5dlrEtaUixAa6glRwNhm+cpfmL
sjgr2lDJ/EVOkQMUQrUBikJZDiuVJp6KG7lVDRbkXoMlPunrGxgtcCRsUG52Snw9
QEhLl6QEB6Q8SQg6zHLIxJ8vS7phpeWa8jCpNYUMcyPiVdZZaPrP2sCqV0OQKwsX
3BhojIcPY1UGdw4JFooXlPZz8BLXH3WolXXX0STslasZU0cQs1LpyFIAk4/7ls6y
u6hxiYio0e9Rc9Wp20T/UYJYABfnTICG9AkrDea28fj/jZf7onPkzaVqyVbxlxXs
m6LHPBBo1s5Tsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:47 2026 by rpki-client