Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File: mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier: evszXwb1LKUH9/0upSYrscO8A4XKcGySPKK0zYUTdn8=
Subject key identifier: DC:9C:ED:03:F9:75:C0:96:3F:2E:E2:67:3D:81:06:0E:41:EE:64:39
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer: /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial: 019E1D59DA08B5C5BD7E8E0D4702AA685912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number: AB
Signing time: Tue 12 May 2026 18:01:28 +0000
Manifest this update: Tue 12 May 2026 18:01:28 +0000
Manifest next update: Wed 13 May 2026 18:01:28 +0000
Files and hashes: 1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: G0/5aZa9mwr0Gj4sfzZ2eYPDPn+tdzHYzkjzl7BbpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:da:08:b5:c5:bd:7e:8e:0d:47:02:aa:68:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Validity
Not Before: May 12 18:01:28 2026 GMT
Not After : May 13 18:01:28 2026 GMT
Subject: CN=dc9ced03f975c0963f2ee2673d81060e41ee6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:10:85:ff:42:93:09:e7:dc:63:71:0d:a2:
a6:03:54:d6:90:c0:34:20:b2:b9:49:21:a4:9b:3e:
a8:c3:3b:9f:aa:a2:71:5a:3c:a0:ab:8f:8a:80:ef:
6d:57:9f:69:b8:61:e8:ab:38:e4:af:80:e0:2d:f5:
82:d5:60:0e:87:d2:88:c5:ea:d9:48:01:35:01:2f:
02:d4:90:5f:ce:71:8b:66:44:0e:fe:96:50:e0:b7:
04:92:30:a2:d7:83:0d:f4:72:b1:bb:7a:07:5d:4e:
8c:60:24:89:f6:bb:9b:b0:10:e3:bd:03:44:dc:00:
35:ac:5e:52:8f:62:15:de:cd:cf:8a:e5:20:67:1c:
50:83:d2:7a:8b:1f:4a:aa:e9:75:11:65:db:7f:3e:
5a:0f:fc:10:06:a2:96:d3:66:0f:b2:cb:b4:8c:70:
d6:f1:02:04:dc:30:78:fd:4a:98:30:d2:bf:c7:cd:
33:04:2b:99:31:c0:f1:af:db:d7:22:8e:f1:cf:15:
49:18:99:66:bd:43:33:29:d7:ee:a7:9a:1a:87:74:
ad:5a:2b:f7:19:da:c1:62:75:3f:36:8b:ba:de:a5:
c1:29:b0:88:71:18:83:08:ea:3a:cd:f6:55:ad:e5:
4d:26:04:dd:ed:26:fd:af:c5:88:4c:83:60:b5:18:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:ED:03:F9:75:C0:96:3F:2E:E2:67:3D:81:06:0E:41:EE:64:39
X509v3 Authority Key Identifier:
keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:ad:ce:f4:f1:9a:25:66:1a:b8:54:fb:b5:51:ea:dc:33:
08:80:90:a0:ef:de:87:70:8d:b0:03:57:96:12:4a:88:e0:18:
8f:69:9e:75:ef:ae:1e:bb:23:c8:1a:b1:49:50:1f:35:36:8d:
8f:ed:c3:dd:4c:96:f4:7b:e4:f2:09:63:d2:80:45:19:dc:3e:
c3:20:30:a7:5a:c8:31:f9:fe:d4:83:c9:5b:fe:56:f1:20:4a:
44:55:0b:33:27:fc:1e:ea:6b:71:fa:4c:2a:16:d4:57:17:f2:
fd:0f:fc:d3:e8:2f:8c:07:1e:59:9a:5b:4f:d8:a9:35:58:4d:
cd:47:05:c4:11:5c:e4:57:62:c2:6d:e4:0e:6e:a6:1f:f8:cc:
8d:a7:35:4f:a9:81:22:b7:26:cd:75:84:92:7f:b3:57:56:e1:
fd:b2:1c:a4:21:0c:cd:c9:6f:60:d4:5e:f9:af:92:2d:08:e7:
6a:74:e7:3c:4b:fa:80:bb:a1:ee:d7:44:aa:21:38:06:19:d6:
1f:5a:dd:af:f8:43:71:eb:95:bb:61:6f:96:15:a3:55:96:d3:
2d:a0:96:9c:1c:3f:5b:1c:ce:22:70:16:38:d3:a7:b0:9b:2f:
e3:13:a2:84:d9:a3:dc:60:62:18:5e:6e:58:53:6e:98:1b:98:
1b:a0:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:56 2026 by rpki-client