Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: UPao9xS9eGYivpt1/kIpRVlpBUNXmfqLT2nAQ5a5cxU=
Subject key identifier: D8:04:78:5C:E0:E6:03:F9:9B:AD:17:1F:FB:71:5E:7C:C3:E1:90:CA
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 01A0E1AB6B8E83C259AED6E937C16D450B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 17A0
Signing time: Sun 27 Sep 2026 07:01:42 +0000
Manifest this update: Sun 27 Sep 2026 07:01:42 +0000
Manifest next update: Mon 28 Sep 2026 07:01:42 +0000
Files and hashes: 1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: fKW1zqfjb+kAWTg8+upnbQuIGKap1JGHDldAcfsTZOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:6b:8e:83:c2:59:ae:d6:e9:37:c1:6d:45:0b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Sep 27 07:01:42 2026 GMT
Not After : Sep 28 07:01:42 2026 GMT
Subject: CN=d804785ce0e603f99bad171ffb715e7cc3e190ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c2:14:05:a6:17:64:46:bd:19:b4:af:7a:c2:
ea:3d:44:ab:5d:53:0b:11:76:ad:5b:d2:2d:5e:62:
b2:b8:39:9f:9e:f8:f3:a6:44:b4:c3:70:63:97:06:
69:d4:1f:01:4f:72:1a:79:8b:7e:a4:16:9b:06:2c:
77:04:ca:ca:90:b6:f4:e9:66:11:e2:e0:7b:99:0e:
9e:7f:1f:a7:f6:ad:ec:b0:ad:74:85:0e:db:6b:1a:
0f:7b:38:1e:b5:0f:4e:c4:b8:2b:4f:64:bd:1f:c5:
bc:35:bb:e6:9c:cd:89:aa:e2:57:58:d3:c3:0f:9c:
7a:2f:59:40:1c:bd:05:33:6c:69:b9:f1:46:9d:e5:
53:06:4d:89:4b:74:b0:a5:5e:86:68:94:60:5c:2d:
6d:52:73:54:2a:62:1a:e6:19:fe:43:f7:3b:30:14:
73:44:30:93:83:8c:95:3e:ec:29:2b:a3:47:44:16:
65:33:83:0f:f3:70:d7:44:1b:20:73:3b:da:a2:8e:
67:1a:62:be:13:99:f4:75:65:b1:a7:80:d0:b3:d3:
36:29:4e:1d:7a:c4:05:ed:7d:15:84:c6:fd:c2:4a:
7f:f5:a2:99:27:72:44:46:6b:28:cf:4b:ea:4a:50:
27:33:c9:9a:48:e3:85:0a:b4:d3:2f:2c:4c:e2:58:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:78:5C:E0:E6:03:F9:9B:AD:17:1F:FB:71:5E:7C:C3:E1:90:CA
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9b:9e:97:10:9b:84:fb:1a:1e:48:3a:7a:a4:5f:89:ec:63:
40:99:d3:33:f7:13:25:16:89:c8:c2:f9:08:5f:0d:2a:cc:9b:
d5:52:dd:02:ed:67:0a:bd:f8:ff:3f:cc:00:31:b5:43:6a:33:
86:78:ef:ba:ff:aa:93:f7:71:c0:a0:db:71:a5:6e:b6:e8:7e:
30:71:eb:51:b7:fc:51:16:4d:8c:48:44:67:9f:1f:59:c3:18:
98:f6:6a:b7:fd:f9:a7:71:65:44:f4:70:9c:f1:23:6a:5a:c4:
87:30:65:95:00:9a:c2:f5:12:f2:01:b7:62:04:bf:d9:a3:da:
fe:05:58:49:e1:92:42:bc:63:81:a5:d5:e7:1e:3b:27:aa:6d:
a2:2c:88:72:f8:20:57:f0:87:7e:eb:3e:2b:11:59:7c:2e:5c:
a3:5b:25:8a:6c:f7:5a:96:96:fe:45:92:51:38:31:19:f4:bb:
68:67:3d:7f:79:9f:2d:7b:a8:42:a5:6c:16:fe:34:cd:73:cb:
17:f5:53:24:e1:51:24:76:19:87:1e:6b:7c:89:8f:3c:64:d5:
f2:02:7d:fd:b1:f1:b7:39:0d:18:0a:e3:10:6b:d9:94:9c:1d:
d3:4e:76:97:9c:d4:c2:27:10:36:b9:7c:f2:09:3b:02:af:1e:
ae:73:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:13:07 2026 by rpki-client