Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: SiL24vMkd0I0gxuGz14Wp4vhbKpagDuoNAqIyX63ba0=
Subject key identifier: 8F:A3:21:A4:40:F1:D9:BE:2C:D9:37:05:8C:35:CF:B4:E2:25:71:50
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 019F93FFE683BEED13F184F1094BCAADBE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 0AF8
Signing time: Fri 24 Jul 2026 12:00:49 +0000
Manifest this update: Fri 24 Jul 2026 12:00:49 +0000
Manifest next update: Sat 25 Jul 2026 12:00:49 +0000
Files and hashes: 1: FcGNPYwz5_J_IpZa2PQ-hVZxs3s.roa (hash: zBwo4xD9J4OLhTz0HKnWTIlad5vyr6fVYYxN7r1dvp8=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: ouotTyRWMRQ48YIGU8Xo+hSA24Ru3bNxsGtObuKPRrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:e6:83:be:ed:13:f1:84:f1:09:4b:ca:ad:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Jul 24 12:00:49 2026 GMT
Not After : Jul 25 12:00:49 2026 GMT
Subject: CN=8fa321a440f1d9be2cd937058c35cfb4e2257150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:4b:4c:a2:c8:6c:dd:3a:b6:d0:29:a8:fc:
49:75:8e:59:57:c1:f5:e7:2b:b9:51:d8:63:16:76:
56:7c:4e:1d:2a:ff:b7:10:56:47:26:10:14:9c:71:
72:94:7f:f6:0d:07:fd:7c:ce:c6:a9:4c:c6:05:93:
1e:8f:0b:b5:33:50:9d:1f:a6:b0:8c:07:58:de:37:
23:37:81:ad:42:12:05:15:4d:fb:6b:f3:fc:0b:85:
96:ff:b9:ea:6d:6b:1e:ef:fb:37:45:d9:bc:cc:07:
1e:80:3c:e3:33:e8:cf:27:c1:74:40:31:ac:07:fb:
5e:da:76:ad:3c:35:28:52:59:96:65:96:55:9a:cd:
16:d4:25:50:57:14:ee:36:c2:ef:3d:e6:51:13:1a:
48:97:aa:2b:f9:8a:e4:d6:0b:e9:b3:72:b3:5e:22:
70:70:82:b0:9e:ea:d7:99:1b:7e:6a:56:bc:38:31:
df:c1:f0:07:e5:c5:a2:71:25:7f:5d:26:3c:04:40:
ce:7b:4f:bf:f3:ce:3e:11:bf:b6:ee:ee:e6:7e:7a:
c0:9e:7b:e0:0a:3e:28:b2:b5:56:8f:9f:b4:ad:64:
9f:61:ea:71:c2:d7:1f:60:9c:d1:e1:f6:16:90:bf:
d5:5f:4b:d5:63:8e:f2:db:05:93:e9:a0:ea:46:c2:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A3:21:A4:40:F1:D9:BE:2C:D9:37:05:8C:35:CF:B4:E2:25:71:50
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:60:ee:7c:a6:bc:84:19:61:a9:50:6f:e9:97:bd:9e:79:c3:
3f:16:92:5d:0c:10:a7:7c:a8:be:75:f3:c2:d0:52:12:2d:f2:
3d:a7:b2:cd:5b:8d:74:7f:8f:32:db:4f:c1:c9:fb:a2:b7:b3:
5a:0a:b7:f8:b8:3d:16:7a:8c:e2:89:e2:e0:2c:72:a2:ac:a2:
bf:96:58:17:a5:ec:9e:3f:76:bd:3d:12:2d:89:7b:1b:f1:13:
29:b8:1a:0a:ff:dc:5c:62:ca:a2:1b:22:0c:08:5a:99:f2:58:
98:29:c0:6f:df:f4:35:f5:ed:db:22:68:c7:b4:ab:bc:1d:c3:
22:88:5e:1a:66:45:99:e6:2b:df:88:ba:88:80:30:bf:09:8c:
1b:b8:4c:d2:9c:43:1d:2b:7f:30:31:84:83:fc:53:55:df:46:
a3:6f:76:b9:74:f3:ea:fb:6c:a3:58:42:9c:20:2f:7d:ab:7f:
d2:20:d3:4f:d5:47:5c:d9:34:6c:5f:00:78:22:df:b2:d3:a7:
91:b8:c4:ed:4a:b9:db:db:90:2c:3a:da:e3:ba:da:7c:11:cf:
10:5c:82:4c:2b:6a:6b:43:e4:50:de:ae:10:3f:ae:0e:d5:c9:
61:3d:62:83:2d:6f:4a:1a:bb:2e:04:14:7b:b3:ff:a7:06:dc:
6b:6a:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:14 2026 by rpki-client