Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: 4qd3A8umxnUdBd6ZiC4w18XcdZfaYZ6Lb304T0Me1nA=
Subject key identifier: C1:D1:9D:D3:42:7A:0F:5B:21:3B:3F:8D:6F:4E:A7:90:79:A9:73:F1
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 01A0EA4091B6ACE1C3B2779AE50638A70280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 23:01:35 +0000
Manifest this update: Mon 28 Sep 2026 23:01:35 +0000
Manifest next update: Tue 29 Sep 2026 23:01:35 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: SMeV87Lpphn+thLX2O9RK7jqNmo2sL15CVKAec1gNis=)
2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:91:b6:ac:e1:c3:b2:77:9a:e5:06:38:a7:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Sep 28 23:01:35 2026 GMT
Not After : Sep 29 23:01:35 2026 GMT
Subject: CN=c1d19dd3427a0f5b213b3f8d6f4ea79079a973f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:80:ed:7d:c9:39:f5:26:50:84:08:92:52:
d3:9a:9c:0e:3f:cc:ce:b1:23:a8:1d:9b:6b:d3:d1:
ba:f8:ba:47:41:4c:29:96:a2:b5:12:e9:f9:eb:46:
be:09:97:ee:66:e0:9f:d8:fa:47:68:c6:a3:66:98:
de:16:e0:f3:e2:cc:f7:e6:c3:40:66:4d:ad:8a:f8:
ca:ec:26:a2:8d:91:c5:a5:de:7e:11:32:de:cf:15:
b9:ac:77:d2:c3:d1:0f:81:0a:d5:55:69:12:79:23:
3d:fa:31:83:af:5d:cd:de:d2:20:3f:c0:21:2b:0e:
53:a2:c0:42:b0:17:dd:27:dc:bb:c2:42:3c:f7:ef:
40:a5:f1:6a:6f:59:fe:d5:3f:1f:84:a1:c0:92:a3:
a6:9a:dc:03:9a:a8:f7:cb:24:1c:34:63:58:8e:cb:
6b:2a:1a:01:a6:62:30:3b:e9:27:79:be:c0:6b:0e:
c8:51:e1:8c:86:67:10:15:7c:c6:7e:4f:2c:e1:35:
9d:57:ce:fc:b2:1c:b8:99:85:6b:b1:14:51:bf:8c:
57:38:30:fd:08:f8:b1:1f:82:c6:3d:55:2d:94:fb:
95:68:2c:0f:aa:71:05:14:8a:5b:f4:1f:d5:4d:a5:
89:74:b3:26:ac:a3:bc:82:81:54:68:0f:a4:18:36:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D1:9D:D3:42:7A:0F:5B:21:3B:3F:8D:6F:4E:A7:90:79:A9:73:F1
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:14:e0:62:9f:5c:53:22:fc:85:f3:b6:96:43:74:62:88:14:
6a:2d:39:e6:02:5c:77:28:8a:f6:49:1b:c2:b1:92:07:e7:46:
c6:69:0a:34:8f:4f:58:72:1b:e6:36:83:da:6c:6c:05:ef:8b:
d0:23:ea:2c:8d:c1:9d:36:c4:be:c0:22:3f:2f:c2:2b:86:de:
66:64:b5:17:19:bf:a8:ad:c0:32:09:62:c0:a4:5e:cd:c7:58:
ff:e0:a2:fa:dc:6f:3c:93:e5:94:6d:0c:2d:1e:c9:ef:ee:4c:
d7:1a:07:f4:0d:10:20:4e:0b:83:9e:c5:f9:a6:cc:13:19:99:
68:cf:8e:4b:38:54:5a:c5:53:6a:57:1e:a9:61:e8:a3:c7:ad:
b6:db:6e:f3:85:da:88:c7:69:f6:cc:f4:ef:fd:5c:c3:70:5d:
57:8a:d5:be:86:3e:b3:a9:30:4c:82:b8:74:e4:0d:d2:7b:40:
10:a9:86:e4:35:02:1f:28:8a:be:38:99:dd:d7:9f:78:25:08:
92:5b:f0:17:b6:1d:76:30:e9:72:93:d9:9e:89:cc:a9:5c:fe:
94:3d:2a:91:80:0d:48:07:ac:bd:16:3b:17:17:31:69:c0:94:
aa:c5:8f:69:54:bf:ed:53:bc:ec:da:6f:d8:22:7a:7c:9c:73:
ec:06:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:21:51 2026 by rpki-client