Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: C4IrdIyoepvNIP2ut8qbJ7Obr661zOxBN2YLpF4fbDo=
Subject key identifier: 50:22:CF:9E:E5:E2:A0:39:4C:68:41:BD:86:41:FA:03:12:51:3A:EF
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019D27E0517AF0A58B0C2F7D0504A5CB418D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:45 +0000
Manifest this update: Thu 26 Mar 2026 02:01:45 +0000
Manifest next update: Fri 27 Mar 2026 02:01:45 +0000
Files and hashes: 1: MuK0yO2EDiETMioDuWGpSy4DPrM.roa (hash: 9Q7+RkAvvoGZfwpOAVIRZoNvbHTT/lKkQt6ZodDPSB0=)
2: af2JbsFaiF65db9s1Px-v45Smq8.roa (hash: SgjbbnkwbwDgclTeMfNjxj2r3waXIVgmYqV+oR+91Xc=)
3: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: TU2Y93Q0z49jFJVSOySQYX3FYCvR001+xpBnZDP6irg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:51:7a:f0:a5:8b:0c:2f:7d:05:04:a5:cb:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Mar 26 02:01:45 2026 GMT
Not After : Mar 27 02:01:45 2026 GMT
Subject: CN=5022cf9ee5e2a0394c6841bd8641fa0312513aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:f5:08:ed:40:6d:0c:a8:7a:ed:6a:b1:71:
8f:e2:2f:bf:15:12:eb:66:d6:56:db:ea:c6:0b:d8:
c3:8a:eb:af:25:be:c9:32:b0:22:ca:1f:d9:8c:d9:
bc:86:a7:3f:05:69:39:f0:3a:de:b1:da:2e:89:61:
d3:9b:14:d8:1e:62:28:bf:d1:04:d3:c7:f2:55:07:
3f:5a:2d:23:63:f3:e3:46:63:58:8c:0a:cb:ad:9d:
33:87:85:dd:86:c4:82:bf:1a:ce:35:64:0d:eb:5e:
ac:ec:87:d7:3e:53:31:56:b0:5d:a4:6f:b4:40:3d:
76:18:df:a0:3a:ab:f3:00:d2:e8:3f:89:9d:32:64:
8c:2a:45:d0:9a:6d:33:25:67:7f:7d:9d:a0:6e:e6:
6e:a7:6a:14:02:87:b8:fd:de:f9:41:2e:b5:9d:93:
d4:b6:8a:bb:57:50:36:cf:5f:87:7e:98:d3:28:7d:
2b:09:fe:e8:9c:47:a4:91:1e:d2:00:25:5b:e3:58:
5e:2e:8b:13:78:3b:3a:34:fe:ff:ce:04:b6:a6:19:
ca:78:87:43:a1:c9:2a:21:88:67:7d:a8:5a:c2:bb:
6b:cb:b6:7f:9e:0b:be:51:6e:b4:6b:ec:2f:0b:1d:
7e:53:cb:8f:7a:38:29:4c:71:2f:56:a7:59:29:41:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:CF:9E:E5:E2:A0:39:4C:68:41:BD:86:41:FA:03:12:51:3A:EF
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4d:73:d1:d0:00:04:ca:83:d2:30:cf:5c:ec:90:f3:3a:89:
8a:dd:37:b2:58:19:ac:ca:c5:59:2c:2f:45:d3:c6:58:0f:5e:
0a:15:cb:10:18:29:d5:4e:fd:c5:c9:56:e3:10:0e:c0:54:33:
f7:7f:ab:27:9b:1a:20:e0:97:87:02:50:43:e9:12:e2:52:1a:
fe:b5:fa:8a:be:92:63:db:74:ac:93:94:d7:0e:dc:50:30:9e:
b1:47:2f:78:67:26:ec:96:b7:b0:21:10:fe:19:4a:c6:7f:79:
a9:4b:41:e4:bc:ca:98:e3:50:51:72:db:d0:bb:11:49:14:8c:
e5:b2:b7:c7:b5:a2:02:b1:b8:25:aa:bb:5a:23:15:72:dc:5e:
a7:ba:d9:06:89:d9:f3:ed:13:cc:87:b9:24:cf:cd:f2:c8:20:
f1:62:d6:0c:e2:90:23:23:e9:1f:f1:bd:28:b1:a2:3d:71:50:
87:94:45:fd:a3:7d:09:5e:d5:0d:41:64:b2:04:5e:65:3f:1d:
fa:d4:a6:0d:2f:93:2d:3b:51:c8:cb:77:28:51:90:73:89:5d:
19:e3:c2:be:2f:e0:fb:52:31:dd:25:e5:36:82:e8:54:a8:73:
92:39:cb:57:12:21:33:81:60:56:a8:6b:d1:1a:2e:67:95:74:
55:9c:32:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:01 2026 by rpki-client