Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: EvHW+nBzdZzv5hgcfxp1v2U2WMwHN3RcJReYZfSdUwM=
Subject key identifier: 3F:4B:0C:30:E9:2C:3F:03:87:EE:99:1B:6D:98:EE:50:06:F5:2B:02
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 019F92118DFBDF325F51B08C9D5A81EE996E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 03:00:51 +0000
Manifest this update: Fri 24 Jul 2026 03:00:51 +0000
Manifest next update: Sat 25 Jul 2026 03:00:51 +0000
Files and hashes: 1: JOBZiyk3WSexjylGrFqWtpIvVNI.roa (hash: pYC05xXD+D4uXeUnMdxT9uc+YVOaCRlDkwK83r1kNWw=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: ue0g7+C2hzbv0gIUCaxPpqdIhCVakNZIvnLhHEiSJaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:8d:fb:df:32:5f:51:b0:8c:9d:5a:81:ee:99:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Jul 24 03:00:51 2026 GMT
Not After : Jul 25 03:00:51 2026 GMT
Subject: CN=3f4b0c30e92c3f0387ee991b6d98ee5006f52b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:33:e8:9d:85:8a:69:02:c6:76:01:61:d7:
92:18:95:49:3a:39:1a:f0:8a:61:b3:58:04:55:21:
7a:16:fa:1b:6a:6b:7b:ac:42:aa:d8:74:31:ac:a8:
af:28:61:fd:f1:be:4d:39:97:73:01:0a:0d:cc:32:
1d:ff:a1:45:50:5f:62:4f:c1:9f:10:47:ce:83:96:
82:46:6d:84:61:ba:62:f3:65:ca:bb:e6:e0:88:f0:
c2:f0:cb:d1:1b:22:b0:ef:6e:5d:52:f8:e1:6a:ff:
f9:54:85:cc:34:ae:77:d7:73:a3:8d:8a:8b:96:77:
34:0a:c2:ae:f4:d9:48:25:10:96:0a:8d:a3:72:91:
79:b3:29:28:3e:ea:d2:b3:5f:02:d0:61:69:c5:85:
2c:48:c4:3d:49:36:16:c5:23:e4:ec:2a:f9:67:6f:
f7:ec:8f:1e:86:ca:c0:6c:ab:07:0a:2b:e9:a5:21:
95:16:22:90:e6:aa:76:25:5e:c2:48:2e:75:66:cd:
2d:e9:57:24:52:5c:bf:ee:97:f1:ec:3e:91:85:c9:
58:61:ec:af:e5:c1:6d:71:57:34:4b:7d:b2:2f:a2:
25:b1:12:72:58:f8:96:2e:db:24:96:b0:49:b2:fe:
d8:82:3a:23:d4:96:be:fc:9e:4f:b0:87:b6:ec:0e:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:0C:30:E9:2C:3F:03:87:EE:99:1B:6D:98:EE:50:06:F5:2B:02
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:24:76:e8:52:32:2c:a3:f6:33:4c:5d:56:f0:05:57:44:6b:
4b:98:95:cf:07:48:12:c2:9c:4f:22:8f:b0:de:2c:9d:64:79:
e3:68:e2:d3:6d:a4:26:ef:cd:ab:07:c2:be:00:60:fa:3f:c9:
1f:24:cd:72:8d:f9:2e:df:98:00:43:78:a1:69:80:61:5f:af:
13:0e:3e:82:ce:98:e0:d5:72:0d:c0:b5:b7:49:70:f9:bd:3e:
08:69:a7:0e:45:c9:78:d4:79:18:1c:4a:aa:ad:b0:96:ba:ad:
96:9b:cd:0f:78:f1:be:5f:17:84:87:c9:43:77:65:bd:f7:7c:
d5:de:ae:d1:04:46:04:2e:29:4c:96:30:39:21:1e:6f:8f:43:
8c:0b:ab:ad:27:41:5d:3c:98:78:37:2a:fa:c3:87:ad:7f:f3:
37:cb:ab:ab:5a:ac:d1:07:0f:93:ba:db:fc:9a:2d:04:76:d9:
1c:b3:e9:05:b2:9c:54:5a:78:d3:e4:77:4c:56:90:29:e3:79:
3b:63:0b:16:80:85:7c:1a:60:85:5d:74:3d:0b:43:0a:0c:1d:
c0:6f:fd:a9:3b:46:61:5e:2b:9c:46:b5:d6:8e:57:14:37:d9:
28:4d:77:f3:62:ff:de:a4:2e:c5:82:a4:c9:14:fe:7f:57:6b:
be:d7:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:25:24 2026 by rpki-client