Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
File: mfjXrl5OvAIjSnse4rebl2DbOq8.mft (raw, json)
Hash identifier: OX+sF6Cznn+8CX1tZs75AkoqFQZEVuIRwO8EXEBxapg=
Subject key identifier: BD:26:8C:4B:BF:34:C9:1A:B1:C9:C3:C4:38:5C:83:1B:4A:7A:2F:B2
Authority key identifier: 99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
Certificate issuer: /CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Certificate serial: 019F916D6673881306F570B6DA96DA0CFB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
Manifest number: 0182
Signing time: Fri 24 Jul 2026 00:01:33 +0000
Manifest this update: Fri 24 Jul 2026 00:01:33 +0000
Manifest next update: Sat 25 Jul 2026 00:01:33 +0000
Files and hashes: 1: iVOLeqctgDaw9Fr7tEzCrVFpTKc.roa (hash: aaSOVrkxAJe8O2mFpYgKoWep+9G/A7GJM36+XM4ZkBc=)
2: mfjXrl5OvAIjSnse4rebl2DbOq8.crl (hash: CnN5mNwC6aaX5t6zVdy6jP3QCHQrSSj6re/tr1+IcQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:66:73:88:13:06:f5:70:b6:da:96:da:0c:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Validity
Not Before: Jul 24 00:01:33 2026 GMT
Not After : Jul 25 00:01:33 2026 GMT
Subject: CN=bd268c4bbf34c91ab1c9c3c4385c831b4a7a2fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:62:74:dc:7d:da:77:d0:7b:cf:6e:e3:cf:
3c:23:08:02:52:40:25:99:4f:4c:e2:2d:05:1c:23:
fc:bf:4d:cd:ac:1c:4d:4c:ca:b2:f4:4f:1b:ef:f0:
0f:9d:c6:ac:de:7b:4c:54:c4:4a:31:62:ff:b8:0b:
49:db:78:ec:b3:04:db:dc:54:0d:5a:3a:3c:68:57:
79:0b:37:04:5b:16:01:0f:51:75:4d:6e:e3:87:c9:
3d:1f:dc:3c:55:df:58:29:c4:0c:51:58:01:38:86:
2b:0e:38:e9:de:65:b9:8f:88:7b:c2:e4:1e:0d:80:
52:8d:fb:5b:54:aa:c0:30:07:f2:e9:45:b6:a5:86:
fa:d2:d3:4b:72:87:9f:a9:3b:c6:28:ce:b8:35:fd:
3f:88:64:f2:0a:34:57:b3:f3:64:eb:d4:84:90:d7:
2a:7f:5d:67:2f:41:a6:fd:14:bb:b9:e3:92:ce:20:
18:9d:18:7d:05:cd:81:d7:24:94:c8:1a:8c:e4:14:
c2:12:74:8e:e1:86:55:39:0e:eb:5f:79:86:04:8f:
22:ef:ef:06:33:3c:a0:74:06:83:a5:37:86:be:4f:
2b:40:b5:be:38:14:3b:47:5c:d6:bf:0a:8e:e5:6b:
0f:5b:e7:ba:69:f3:ca:b2:10:7d:3f:2a:09:60:49:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:8C:4B:BF:34:C9:1A:B1:C9:C3:C4:38:5C:83:1B:4A:7A:2F:B2
X509v3 Authority Key Identifier:
keyid:99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a8:f0:8b:9d:5e:fa:6f:54:2b:0e:d0:b1:4e:84:46:42:5e:
40:91:64:48:17:b4:2d:63:d1:b8:77:c3:80:a5:6d:69:cf:72:
ac:d8:d5:c4:5c:47:96:59:f3:a9:80:84:25:36:8f:fd:75:b5:
19:ab:41:63:97:9e:3f:cc:00:cb:5e:c7:17:f5:9d:54:17:a1:
96:02:8f:4e:1d:fd:97:39:50:58:8f:38:dc:b6:1f:7a:b2:a7:
41:23:1d:aa:eb:2e:fb:d0:cc:03:d7:a7:d3:97:7f:b4:5c:1e:
01:f3:ba:cc:fe:af:83:d1:43:e8:92:a7:68:e0:fc:d4:85:bf:
1a:e2:39:93:18:c5:b2:08:04:e0:85:04:a3:58:a4:34:f7:aa:
c8:10:81:01:c1:d7:72:6e:be:1c:dd:69:c4:39:a1:3d:81:90:
92:aa:5e:bb:2d:40:3c:16:34:2a:de:e2:91:40:56:56:6f:3c:
a0:19:e4:c1:85:cb:af:99:6a:9e:2c:7e:b8:4d:2a:7e:26:58:
d7:ae:77:3d:9d:d8:9c:13:d1:dd:51:7b:6f:00:74:b6:6a:d4:
7f:9c:59:df:61:6a:83:4e:d3:b4:76:95:4a:6f:8a:bf:d6:9a:
88:16:61:fa:64:07:12:ee:4e:2b:a4:7b:77:58:3d:ed:03:34:
20:df:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:13 2026 by rpki-client