Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
File: mfjXrl5OvAIjSnse4rebl2DbOq8.mft (raw, json)
Hash identifier: zERxX4lTme44C42mBABNAK9/UHPmsxOXKpvQ+mZmL+o=
Subject key identifier: CE:4B:4D:5F:2B:C6:17:8F:F3:EA:84:7A:14:B4:4C:B5:59:77:54:37
Authority key identifier: 99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
Certificate issuer: /CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Certificate serial: 019D3307CF0209A2366434265F71FDAA4109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
Manifest number: 48
Signing time: Sat 28 Mar 2026 06:00:42 +0000
Manifest this update: Sat 28 Mar 2026 06:00:42 +0000
Manifest next update: Sun 29 Mar 2026 06:00:42 +0000
Files and hashes: 1: iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa (hash: aaSOVrkxAJe8O2mFpYgKoWep+9G/A7GJM36+XM4ZkBc=)
2: mfjXrl5OvAIjSnse4rebl2DbOq8.crl (hash: fxQDNbUNrKYiHS15JPm5+PyjmcI+iNe/zL0HuRNKBtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:cf:02:09:a2:36:64:34:26:5f:71:fd:aa:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Validity
Not Before: Mar 28 06:00:42 2026 GMT
Not After : Mar 29 06:00:42 2026 GMT
Subject: CN=ce4b4d5f2bc6178ff3ea847a14b44cb559775437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:8c:90:d2:41:45:63:b9:94:71:2e:3a:0e:
e5:34:0b:87:92:9a:1c:56:24:38:3f:c0:17:4c:12:
0c:de:26:8d:fb:a3:d1:2f:97:ee:be:78:21:20:41:
e6:13:d9:24:d0:ae:cc:94:1a:18:1f:f3:83:9f:11:
1d:1c:84:28:f1:9f:d6:f8:e4:4a:46:e1:11:ac:35:
dd:e8:15:da:9c:c0:cc:64:c5:b0:b6:7c:f7:ba:ea:
30:b1:50:57:55:6a:d7:06:6a:dc:60:ca:ef:8d:50:
ac:c6:6a:f9:43:e1:37:2f:68:a1:82:bf:9a:bf:3d:
45:fa:48:c4:6e:ac:55:1f:60:65:54:c2:53:67:79:
0e:82:7b:7c:ea:3b:a5:25:a1:c8:93:d0:65:0d:41:
b3:e6:40:09:f7:56:55:68:8c:77:bb:a2:fa:70:69:
6a:19:d1:a1:f3:54:12:1c:8a:b9:71:a3:ea:51:23:
0a:db:56:c5:96:8b:02:8c:85:0d:62:96:10:6c:e6:
89:3c:2a:1c:f5:42:12:23:78:bf:eb:06:47:c7:18:
c0:ed:01:56:9c:e9:d7:10:47:a5:c4:d1:f4:36:1c:
f0:c9:99:f9:90:d8:2c:8b:d4:be:1c:50:19:82:14:
8b:7d:53:ef:49:e3:45:26:53:f4:39:fb:51:f3:9c:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:4D:5F:2B:C6:17:8F:F3:EA:84:7A:14:B4:4C:B5:59:77:54:37
X509v3 Authority Key Identifier:
keyid:99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4c:81:8e:21:23:17:37:95:20:6d:61:3e:f4:7c:ef:b0:42:
27:dc:f3:cd:70:48:f2:92:e1:ea:39:fb:25:e2:4f:ba:2f:51:
bd:f5:e8:f6:ce:1a:cd:69:75:56:54:3e:49:93:a5:65:eb:76:
76:ac:16:45:ff:04:56:db:fe:47:2b:f3:29:50:0b:f9:3c:4a:
7a:50:2b:0f:02:e9:b4:0c:13:bc:4d:49:62:d5:fe:61:87:fc:
de:9c:55:77:fb:50:fd:c5:67:01:1a:84:2d:77:14:6c:34:64:
99:56:e2:69:1a:69:ea:a0:ae:98:c4:13:b6:c5:51:e0:03:53:
88:d3:11:45:46:22:58:f8:c6:d7:e2:63:e5:ab:2f:3c:4a:5c:
ba:a2:e8:e2:93:5a:9a:cb:14:22:bd:5b:7a:51:d5:c8:a0:cb:
f3:48:d1:39:59:03:ca:2c:e4:f2:da:1e:20:50:47:1e:c9:6e:
9b:d9:19:b3:15:d9:a0:48:85:82:4c:2c:24:bf:80:24:2b:cc:
dd:c2:1d:27:87:bc:e9:11:21:db:9f:0e:65:9f:29:28:f4:24:
8e:75:bc:be:fa:2e:a0:e5:83:a4:c9:f8:e0:60:51:48:9b:d7:
98:ed:07:28:c4:d9:78:c6:8d:a6:9e:8f:a1:8f:4a:da:12:5f:
35:10:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:06 2026 by rpki-client