Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: YNB+9hlJlsUkwp/9wsjfr7HA5pJy+KUn1sWOPV9grWg=
Subject key identifier: B4:35:FE:61:B8:95:70:C1:1C:22:63:0D:02:2B:52:7A:B1:C4:4A:33
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 019F8EA286ED750CA8998FD2DE2B30BEE30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 18C5
Signing time: Thu 23 Jul 2026 11:00:43 +0000
Manifest this update: Thu 23 Jul 2026 11:00:43 +0000
Manifest next update: Fri 24 Jul 2026 11:00:43 +0000
Files and hashes: 1: 6RH4Xhf3454zmP7SfNkGXBdyqVs.asa (hash: aTVDJZG9k3QRu4E3b31eQbxAuvRrjFaFwYD4QvfkoTc=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: 35729LaTsogaMhh3/67TG7ldefvQaiDzaQm6wtQqKjM=)
3: bxJSZ4QkpRqkCuO8un8htf7K_EA.roa (hash: aY6Tszvn+tw4UURnCsUt8otQUMfjQJy4b3YJ7wRT6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:86:ed:75:0c:a8:99:8f:d2:de:2b:30:be:e3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Jul 23 11:00:43 2026 GMT
Not After : Jul 24 11:00:43 2026 GMT
Subject: CN=b435fe61b89570c11c22630d022b527ab1c44a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:a0:bb:50:b7:e0:e7:d6:dd:d7:7e:d4:29:
8d:70:11:fc:fa:3c:8c:d5:34:78:5f:63:14:a4:b2:
d4:39:03:8c:7c:24:42:08:ea:be:70:36:ed:d0:d3:
7d:ed:33:83:f9:34:2d:32:de:cc:40:8f:ed:0e:4c:
17:47:d4:ea:0c:91:cf:80:a1:3d:b5:fa:a1:ec:cf:
76:25:5c:b8:25:22:08:c4:7f:48:f7:17:31:ae:b4:
52:06:28:f5:aa:49:0e:63:4e:80:06:35:34:b4:2b:
b3:27:66:37:76:ad:8b:92:81:f8:16:20:b5:3c:cf:
b0:cb:3e:c2:35:ff:c5:51:ce:9e:65:9a:f9:ff:49:
34:dc:5e:24:26:3f:04:29:88:8e:db:ee:cc:91:ed:
db:b3:21:bd:37:6c:f5:97:9f:34:e2:ab:72:a1:d1:
fa:9f:23:fa:44:37:0b:3c:5a:61:1c:40:52:76:80:
97:a2:25:03:da:48:22:68:07:f1:4d:b3:8f:e6:88:
7b:c0:f0:45:7d:26:ea:72:77:ce:24:4b:e4:a7:8b:
5e:2d:08:a7:de:33:f0:f0:63:90:7d:46:be:bd:54:
53:09:62:3b:b3:fc:f2:e2:08:5b:16:7a:d8:2f:ee:
c3:18:01:f1:21:63:3a:b2:d9:d7:3f:01:02:bf:00:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:FE:61:B8:95:70:C1:1C:22:63:0D:02:2B:52:7A:B1:C4:4A:33
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2f:21:5d:4b:b3:ed:3c:b4:da:87:e2:d5:70:0c:46:8a:a5:
6c:ce:e5:c3:e2:35:44:a9:ee:63:67:72:bb:04:74:e6:28:46:
8e:68:bd:42:72:9a:9c:0e:d5:b3:07:49:a6:c4:a9:a2:03:7b:
23:6c:d1:4f:b6:45:59:03:46:01:14:b1:7e:be:0d:3c:2a:4d:
21:50:78:f7:af:b8:92:56:9e:93:f7:15:e2:1e:01:dd:fd:38:
12:c4:c4:23:e7:06:07:87:15:fe:60:e1:65:89:6b:0b:b3:40:
01:9c:24:dd:4c:55:11:ba:b3:db:09:36:82:52:e6:d2:b6:b7:
45:be:f3:e7:45:f6:59:e2:b5:7e:fd:ed:b0:ad:81:eb:5b:b2:
ce:58:5a:18:2c:0e:5c:a7:3c:97:f1:d3:fc:ab:2d:24:53:71:
e9:c0:48:88:40:53:a0:a0:8a:23:21:fb:b2:6e:d4:ed:98:96:
e2:e6:63:bd:e9:83:be:f3:21:0d:6b:53:12:5a:55:5b:36:a4:
f4:02:00:a1:2f:0e:58:1e:71:9d:0f:89:62:ef:f1:6a:db:64:
f3:e2:a2:af:3b:4f:0c:31:52:7b:ea:5e:8e:59:a0:d7:88:58:
83:8a:9b:09:0e:3f:46:c1:5e:3d:52:4f:93:cd:eb:7e:ba:cb:
cd:f5:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:38 2026 by rpki-client