Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: dC9SUyx15NWGA67Zkk45uE9MEKDi/zuDZISlmYrae9s=
Subject key identifier: 29:9E:D3:29:63:20:8F:7D:B7:D9:E6:26:78:12:26:B8:8B:25:52:31
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 01A0C6A12A6D7F09FA56E40B5EE023E1CADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1A85
Signing time: Tue 22 Sep 2026 01:00:45 +0000
Manifest this update: Tue 22 Sep 2026 01:00:45 +0000
Manifest next update: Wed 23 Sep 2026 01:00:45 +0000
Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
3: J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa (hash: pHPtPx9vsv712QiSLZLL9G31WWmDzgqCzXERnuz9zRg=)
4: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: Of5nX3HW0CqrG//e/AF8DsTfljYH0OQje/DHZsnsH/o=)
5: NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa (hash: YPxNBQxqKzSRH7VqT/pnoJq/j2DPg0mDeSU7F/W/bvs=)
6: PWPcidSaQ_vJd_1GO_4YsiiMemU.roa (hash: WJQnuJgsOZgxmIpIk6Yg1ApUP7uwqsYV99jwQ6GpscU=)
7: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
8: mz1Jb3T4ZolM6uN1zf4sUfohQww.roa (hash: RoeR+WJClo/hYUuNplSTfmQx/xOVZakfbpqBs2hXjFs=)
9: zUxaIxOwjiIBb-aRvMvT9f0REEs.roa (hash: KSQvWhLXAEUdj+ycS2WjVgaRxkNXB3vrlVqd7DVfko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:2a:6d:7f:09:fa:56:e4:0b:5e:e0:23:e1:ca:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Sep 22 01:00:45 2026 GMT
Not After : Sep 23 01:00:45 2026 GMT
Subject: CN=299ed32963208f7db7d9e626781226b88b255231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:bf:c9:a8:fe:0c:49:e0:69:10:4f:50:2e:
e7:c6:02:86:7a:c0:69:e8:bf:a3:34:c9:b3:b3:5f:
24:f5:07:68:81:11:6a:57:94:82:42:fc:5b:3f:d8:
f3:2f:ad:e2:cc:f4:08:ee:88:0f:26:f4:8b:4e:c5:
28:61:ec:dd:e6:ed:dc:7c:74:e6:f9:0d:5a:3d:94:
a7:cf:22:7b:c4:21:c2:88:8b:01:6f:df:b7:58:d9:
6b:3d:23:ec:4b:04:72:6b:a6:50:23:5a:13:3d:39:
93:d8:cc:5a:f3:5b:33:d7:fc:80:50:6d:ff:c6:fc:
a0:08:51:43:8f:a5:0a:19:9c:d0:cc:c5:cb:c7:8c:
a1:ba:9d:33:93:7b:b0:d4:94:29:47:58:ce:45:db:
53:35:d9:51:1a:0b:8d:d0:f1:4b:f9:f9:15:5a:50:
b5:e0:a8:c9:d1:47:fb:20:c5:66:4b:12:14:dd:9f:
e8:37:6d:9d:e6:48:a3:04:5b:b2:02:26:cb:5e:63:
cb:6b:c3:e8:c1:9c:54:17:a8:9f:37:28:e6:2f:f3:
7f:08:5f:cb:b7:2c:cd:6a:48:18:5e:96:a0:bb:e1:
f9:f1:29:36:80:87:65:f8:0a:b3:e3:c0:93:72:a8:
fb:c7:2a:e6:e2:63:39:4f:1d:b8:a8:f2:0f:5b:95:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:D3:29:63:20:8F:7D:B7:D9:E6:26:78:12:26:B8:8B:25:52:31
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ca:57:37:d3:96:49:37:0a:ee:81:26:8e:c0:9a:24:89:3e:
f6:44:fb:a9:e2:c2:89:b8:a1:72:b6:03:aa:bb:56:03:e1:a9:
d0:ec:52:5e:b6:47:f2:65:bc:04:45:13:dc:0f:60:4e:8e:92:
d1:f4:80:ed:d7:45:eb:ed:f1:c5:dd:56:c3:74:57:10:1a:23:
67:55:96:20:11:54:0d:94:a0:59:15:3d:20:c2:f0:17:16:24:
53:32:47:58:1e:9a:d5:74:ab:78:86:8b:a2:ab:30:e1:66:bf:
48:bd:2f:34:84:39:f9:c2:6b:5c:f0:8c:d9:f6:49:9e:1b:a5:
21:fa:5e:36:3a:9f:c6:dd:46:ff:ad:63:a1:d4:44:a8:06:57:
bc:6c:23:fb:61:34:ba:38:2e:e6:ff:d1:9e:12:ef:7d:14:b0:
a2:82:67:9d:97:eb:f2:63:2b:ef:7e:67:42:ca:08:68:3b:11:
7d:8c:80:35:ea:49:05:00:1a:9c:d1:76:e2:a7:6e:1d:a7:a4:
72:88:f9:be:ff:47:6e:7a:f8:b5:3c:eb:3e:b7:be:8f:57:77:
31:ab:a1:1d:05:5c:e9:ca:ba:5f:5d:68:2d:44:1f:f8:38:8f:
fd:27:cd:e9:5f:d9:4c:4f:63:d9:25:18:b4:ae:33:50:83:32:
da:aa:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:12:39 2026 by rpki-client