Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: 0F732a17cAb1hfXRqgp+EwjJsogmjkAt+v2F5NwVrZ8=
Subject key identifier: 92:79:98:72:43:6B:EC:31:8F:73:35:A7:97:63:98:3D:7E:14:0C:03
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 019D2695F53782DEFDE959797F38F31E2C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 13C8
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: 8YHYJKejClzJHQyWmQyoXfMGo7c.roa (hash: hjyF8It1A4EPMePr0TlEaEGlDpxI1/XUazn11vRCxOU=)
2: CXrIvb9m88q-TS49THuUPClhYR0.roa (hash: xgXK7vEW2/Cmim2d4EiMIKxK9YtLKnHTxncTpuXS9bs=)
3: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: 5xe5m8jIEgwguUimy2PwVAoF0Vky2TqYCqS/hy5imCk=)
4: cNi5P1_5kCyHjCiA1lBWda5OskI.roa (hash: QA5Z792FeAnPiQuQUOUfyrpO04ALKUWWRVfrxiWDTzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f5:37:82:de:fd:e9:59:79:7f:38:f3:1e:2c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=92799872436bec318f7335a79763983d7e140c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:3f:3a:7b:30:0a:50:88:67:a4:0b:68:ba:
3b:62:8e:89:fe:0b:89:73:2c:de:ca:e7:ae:c9:34:
fc:31:86:7e:6e:a3:0f:49:6f:5c:c2:48:de:07:6c:
a4:1a:95:6f:19:34:d4:f4:df:55:93:6b:82:b1:5d:
d6:89:5b:e5:a0:a6:e6:27:c6:73:7a:1d:ee:68:7a:
c7:ab:e2:9d:b6:66:8b:e1:24:0d:4f:f0:e0:d5:ee:
1b:0d:03:13:37:71:32:1f:fb:f1:d2:35:81:cc:80:
85:d8:49:e6:61:4a:11:8b:45:45:97:4c:fe:78:55:
72:7f:f8:20:72:9d:fa:cf:24:d6:70:83:91:42:32:
bc:99:56:70:48:13:55:43:ab:1a:d2:15:d1:a7:b5:
4a:26:30:bc:bc:39:35:98:54:c5:e5:96:61:7c:66:
04:9d:29:5c:3b:cd:3f:bf:7e:78:b3:f3:f1:c4:b9:
f8:35:30:9a:d9:94:45:ba:f6:da:4e:31:a9:2a:2c:
1b:bb:2c:a0:05:32:4a:16:4b:07:64:39:41:25:9e:
59:44:a9:5e:da:d2:74:b4:b1:1a:52:2e:c4:96:0c:
50:98:4c:94:7f:61:d4:54:f6:5e:18:8e:76:2f:bd:
2a:3e:ea:64:fa:ee:f0:80:4a:d7:8f:4a:b0:45:aa:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:79:98:72:43:6B:EC:31:8F:73:35:A7:97:63:98:3D:7E:14:0C:03
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:63:dd:bf:84:8c:52:28:f3:ca:94:62:7e:ca:dc:0d:70:ff:
c6:b4:16:76:76:e2:4a:c8:f5:5d:7d:8d:eb:f2:8e:54:4e:80:
e5:d9:60:f8:72:01:92:9b:f1:3b:6d:22:4e:84:5e:ae:da:48:
6c:66:36:85:6e:ad:bc:80:9b:bd:c3:4f:0d:84:a4:2d:59:eb:
2f:7a:88:8d:4d:ba:b3:bb:ad:69:69:a2:3b:50:3d:d8:53:b2:
33:19:2f:88:1c:7d:cc:61:aa:cf:42:96:c1:e2:70:79:c6:9c:
7d:e0:37:d3:fc:e5:36:fa:c8:73:16:44:9e:41:98:05:cd:b2:
f5:a8:3a:20:8a:94:14:23:c7:73:8b:e4:a5:82:44:9e:07:97:
32:10:c3:20:cd:6a:21:92:15:f2:24:82:20:7c:b7:21:29:d2:
4d:de:5b:f7:9c:59:d9:92:a7:6d:4a:f7:39:29:08:ee:90:6c:
b8:9d:b1:eb:34:53:bc:d2:2d:20:eb:ce:65:c7:38:d3:3d:9f:
5b:6c:ed:8e:18:96:ea:53:a2:b9:4c:4d:3a:41:ee:8c:43:75:
be:7f:60:be:db:86:20:ac:0b:bf:77:6a:d9:ce:c3:90:4b:d5:
b2:05:1a:08:e7:19:45:b2:84:13:b6:84:cd:9d:2c:6b:41:a8:
04:41:0c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:14 2026 by rpki-client