Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File: mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier: iYPEgTMXGhDEYtPb+2Cy2j5+IRdMPjchbqKh9QbUV9c=
Subject key identifier: CB:C6:1E:21:FF:8F:D8:D8:27:5C:52:9A:30:4E:A5:DB:B8:F5:06:53
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer: /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial: 019D2A04C4801E70B2412CFC43464BC8A906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number: 2D
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: VXabn5ykgglR/5mYheSIPzrDGJBFw7qe8FAcx+53rNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c4:80:1e:70:b2:41:2c:fc:43:46:4b:c8:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=cbc61e21ff8fd8d8275c529a304ea5dbb8f50653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d1:a8:23:11:bd:98:d1:25:57:08:08:d9:44:
d3:f7:88:01:17:83:11:fd:20:7a:8d:5c:97:ea:da:
e3:b1:ec:33:88:b3:65:27:df:85:3d:3b:e0:5c:c6:
8a:6a:4a:08:77:8b:37:0e:3d:be:2d:04:6d:10:96:
0b:e5:74:18:70:24:52:a4:37:71:bd:bb:d8:09:9b:
fa:0b:76:51:6c:ac:ec:3b:eb:96:31:b7:81:89:41:
a6:49:99:9e:f1:02:6e:6c:bd:06:f9:47:10:42:27:
e3:4a:44:c2:e8:d0:cf:c4:02:77:fa:52:b3:f7:89:
43:05:c6:e3:54:50:10:e8:1d:46:c4:96:72:3c:0b:
86:3a:11:d8:2c:a2:9a:f9:c6:37:c8:4b:60:da:71:
32:fd:84:d0:dc:7d:8b:3c:35:2e:15:36:06:36:96:
c8:4c:54:c7:b0:6b:d1:41:88:2e:f0:5a:a7:08:b6:
18:88:83:cb:7f:b2:63:a4:01:8e:ac:2b:e9:df:0c:
df:6c:c4:64:0f:73:47:ea:c8:3e:d0:c7:aa:85:7f:
fc:70:0f:ff:f9:e4:98:11:36:fe:41:d5:fd:af:c0:
1b:a4:7f:99:08:c5:c1:f0:b8:01:71:d9:fa:7b:74:
e2:df:6f:44:bd:e3:00:38:5b:47:17:01:31:bd:04:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:1E:21:FF:8F:D8:D8:27:5C:52:9A:30:4E:A5:DB:B8:F5:06:53
X509v3 Authority Key Identifier:
keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:78:e9:02:68:aa:49:82:4d:bf:6c:b7:7f:d1:7e:9e:9b:48:
55:02:70:97:14:88:03:05:2d:13:f2:ab:16:89:4c:7f:29:3c:
95:58:bf:d1:d9:f3:51:84:46:71:38:ef:56:e1:53:28:7d:d4:
f4:55:61:89:a7:45:50:e5:03:3c:7f:5f:33:7a:4a:e8:c1:f5:
96:a6:a4:ee:a6:c4:47:36:52:e5:cc:5e:0c:13:65:3c:55:62:
25:fc:aa:eb:05:bc:22:14:da:16:2d:97:ec:15:0e:4f:fa:01:
ce:84:38:84:be:69:b6:48:a6:fb:1f:40:ad:ce:03:17:e5:80:
b1:c6:2b:a2:2f:40:d2:46:06:9b:4b:bf:25:06:53:d0:82:0f:
7f:d9:a6:70:fe:8c:5e:38:14:85:67:4f:a4:5e:90:30:cd:3d:
8a:b5:2d:be:58:33:23:c9:99:82:ce:35:8c:57:58:e6:5b:1d:
f8:76:c2:35:46:c4:c0:65:24:1a:a9:e3:d9:aa:0e:04:b3:fe:
07:64:bd:4f:5a:05:cc:d6:60:af:90:16:09:ad:92:14:18:c8:
88:30:4c:62:6a:28:ce:bc:29:11:43:4b:ad:20:74:c5:3f:6c:
05:75:db:9d:fa:f0:10:44:28:94:8b:f3:97:c9:52:85:d6:73:
52:fb:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:58 2026 by rpki-client