Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: H9v0/g803w09BZdv+6ZPwT/7JuyDRWt6NJI3qNWcvjg=
Subject key identifier: 17:0D:B9:29:88:0B:3F:25:8B:54:02:69:D9:E7:E3:1F:8F:D6:BB:82
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019CAAC7112417AC5A2959F66BC084102400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: 4ULYQtUd4oJTzwLazC-kDlXIDUE.roa (hash: KhGm2r25s8XUb5ohnzrZIMa245c7C+KlzncTxFjIUB4=)
2: 5Wgno04KyidaX-QDbhDJedktTA8.roa (hash: Xc3/xXxuEfrWMY1HHfepNmNKSi6o4qwYhfPj+oAmePQ=)
3: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=)
4: HvPOQZKDgwmKWi2B6Okgt-1RwTg.roa (hash: TsDVgiHQk6MTChOacVguR2X46T4ir2Plfn7OSyPlgeY=)
5: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: nsDX3vv983fboUgjBHd5tdP50bptuu+qGz/eeYcljQo=)
6: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
7: hj9uyuHnnlFd0x9G2TnG2XeZVwU.roa (hash: omuDv6cvkQ1Vxo4qn67eCuvFXOzSVc9gpTeiRSMZI1I=)
8: nF0enHZgLVZjaWa5Zj_RxQHqgcc.roa (hash: bZ8n5I2vQSOPQegllbH0nrlHZ8rv0jZPkL+haBHXJe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:11:24:17:ac:5a:29:59:f6:6b:c0:84:10:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=170db929880b3f258b540269d9e7e31f8fd6bb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:5c:2d:e1:81:24:a1:40:dd:2d:f5:33:c7:
24:26:41:f1:87:d6:0f:99:6d:53:ef:bf:cb:bf:89:
01:eb:5c:ca:c3:0a:ce:1f:ff:93:c2:1e:78:3c:2e:
b8:6e:3b:a1:5b:ae:c0:84:2b:36:99:cc:a2:4d:44:
6e:d9:c7:b8:fe:bc:b8:92:00:5d:3f:71:f5:41:98:
a0:4a:a9:be:16:9a:bf:cb:05:ce:95:1e:21:0a:f6:
7c:6a:55:09:54:fc:fa:93:fc:28:ff:76:47:97:05:
49:ea:6e:8f:47:14:ad:ff:23:c2:e4:4a:39:64:96:
8c:98:ff:20:ba:d6:09:48:ab:b7:fa:ab:7b:35:dc:
ec:2c:3a:94:8c:6a:0c:fc:e8:c0:b1:9b:b1:c1:97:
aa:e7:9f:e2:9c:ea:45:a0:1b:5d:10:79:9b:9d:cf:
34:76:40:7a:bd:9f:10:73:7a:96:51:9d:7a:5d:2a:
28:5e:e3:46:0f:28:76:62:0b:82:bd:da:ec:a4:f9:
b3:0a:b9:94:b1:74:05:51:7b:aa:b8:3d:1a:83:68:
f5:e1:5c:fe:73:bf:a6:39:01:87:c9:11:94:a0:cc:
26:cb:cb:06:be:03:77:78:4f:36:37:e2:6d:5a:40:
e3:93:b9:64:7c:58:4a:48:8b:93:57:05:66:02:d4:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0D:B9:29:88:0B:3F:25:8B:54:02:69:D9:E7:E3:1F:8F:D6:BB:82
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b5:d4:b2:bc:75:13:b9:ad:d4:2a:21:88:86:98:79:f0:39:
73:91:5c:38:e2:b3:a4:6a:fa:c0:fc:23:ac:14:69:0f:8d:c1:
ee:cf:84:c8:6f:f2:f4:75:b3:14:c6:09:20:15:74:e9:38:a4:
92:7b:ab:df:26:7f:64:71:77:e0:0b:7f:fb:81:f8:d4:52:f7:
f0:1c:5b:da:3b:5b:37:0e:38:15:4c:8d:f5:7e:17:8c:5e:59:
0c:db:e0:53:70:45:54:4a:0d:8d:e0:20:24:47:ff:4d:ae:9a:
94:ce:b3:b3:99:6e:53:67:ec:9f:86:58:4c:58:93:bc:ce:5c:
63:4b:b1:0d:48:82:63:49:31:0c:26:42:67:fd:95:75:48:31:
e5:99:cc:31:5a:b7:f8:27:11:4b:12:78:5c:70:ba:f6:b1:6a:
7f:14:75:59:1d:de:11:cd:77:42:4a:6c:1b:10:89:11:15:80:
81:d9:c1:5c:00:46:22:f4:a8:0b:4a:41:d5:b1:16:76:78:7e:
ac:20:10:79:f8:ae:89:14:14:7a:be:c3:c4:a5:4e:d5:d9:3d:
7d:dd:e8:28:e6:7d:78:b1:03:d2:07:a5:83:0c:b8:b7:f1:2d:
39:01:2d:7b:88:7a:94:3c:2c:c2:1a:7f:60:8e:6e:92:c1:9c:
cb:04:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:09 2026 by rpki-client