Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: cq9nVmoqEigw5x/AuCOpUYHC70kK7g0LginnfD74lGE=
Subject key identifier: C9:B6:D2:16:71:C8:80:28:AA:EA:FD:AC:18:B0:44:A2:AA:3F:66:75
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019FA8626FC3EB5C68DE85B79C302E271866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 19EF
Signing time: Tue 28 Jul 2026 11:00:51 +0000
Manifest this update: Tue 28 Jul 2026 11:00:51 +0000
Manifest next update: Wed 29 Jul 2026 11:00:51 +0000
Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
3: J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa (hash: pHPtPx9vsv712QiSLZLL9G31WWmDzgqCzXERnuz9zRg=)
4: KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa (hash: AtauxquVGMfNWT+OwoqixJIcGDXl6Ybqcwqx4c3ybJQ=)
5: Lm1nnFYkUsiu098gCvYjKS5-l4g.roa (hash: 1RaZfLGyq0c5ZD0BFswNZ5s2IFMTrcMOt76tyg+sqUg=)
6: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: YYli7gANUD8qr8noROSoUwCSk/Q68jhyHrW90DbBNsM=)
7: NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa (hash: YPxNBQxqKzSRH7VqT/pnoJq/j2DPg0mDeSU7F/W/bvs=)
8: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:6f:c3:eb:5c:68:de:85:b7:9c:30:2e:27:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jul 28 11:00:51 2026 GMT
Not After : Jul 29 11:00:51 2026 GMT
Subject: CN=c9b6d21671c88028aaeafdac18b044a2aa3f6675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:52:a7:24:2c:8a:f1:24:3b:04:0c:df:dc:
c2:d6:85:b1:09:19:ca:bb:5b:09:09:32:02:89:c2:
cd:20:f9:de:5a:49:db:2d:8d:85:d3:4c:2a:37:a9:
2d:87:bd:28:c8:f5:cf:8f:c9:23:01:c6:07:31:f0:
c7:1e:00:d8:34:5c:b9:aa:0a:b8:d3:b7:7c:57:0e:
41:91:26:e6:7a:19:f5:77:1a:64:cf:91:0a:8b:91:
22:48:de:ed:46:88:8c:8a:da:44:a0:e1:90:96:32:
c4:22:9e:bb:f5:2a:49:1a:30:8a:ad:d6:81:eb:09:
b3:ec:c1:38:be:20:65:11:c5:b5:02:59:4c:85:6d:
1d:d6:43:4c:55:5d:d3:38:0c:ed:05:bc:ef:66:cf:
ce:d2:c2:94:85:eb:7b:10:0f:dc:fe:1f:75:6e:89:
7f:a6:ab:54:31:5e:8f:52:bc:22:9a:1d:97:6c:3a:
74:61:14:6c:e6:03:a0:a2:c7:f4:be:c4:75:f0:58:
9d:bb:e1:ca:71:e0:4f:ba:17:55:b1:3e:f7:2e:be:
7f:53:50:b7:f7:d3:3a:1b:f1:5f:5b:f3:1e:f2:a9:
26:ff:9b:eb:f7:2a:42:bc:6f:88:61:62:71:55:90:
2f:55:d5:2e:2e:41:f4:17:7f:38:8b:91:6c:18:50:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:D2:16:71:C8:80:28:AA:EA:FD:AC:18:B0:44:A2:AA:3F:66:75
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8b:3f:e7:b6:64:68:a9:a1:25:9b:0d:71:fe:1a:af:18:b9:
4e:41:f7:47:2c:c7:b1:a2:2f:16:26:ce:24:c3:91:0b:f7:b1:
93:1c:f9:59:62:cd:6c:c1:5a:ec:39:8c:63:02:b3:6d:b4:33:
3d:71:a6:5a:42:1d:ae:6b:d6:67:3d:a9:1d:a1:3a:f7:2f:75:
c6:cd:f1:0c:31:b9:85:87:00:2e:a1:ae:5c:9c:8b:95:6a:10:
66:ac:b6:77:0c:f9:d3:5f:60:08:d6:ed:e4:b2:49:9b:b8:e7:
85:93:5e:a9:8e:59:8a:f9:9a:91:02:b0:73:81:cf:42:c5:5e:
f2:de:85:bc:94:65:be:ab:44:a2:48:cd:43:e3:87:36:cb:fd:
87:f8:39:22:07:5f:1d:e7:f3:5b:ee:96:f2:9b:f1:ac:3f:25:
56:78:f4:ca:e5:d8:06:02:70:f5:bf:2f:44:bc:6b:9e:62:db:
1c:ff:ae:94:85:96:bf:b5:24:78:93:a8:37:69:ef:ea:5a:39:
22:1d:43:dd:a8:95:61:a7:90:53:ae:2f:ef:99:b0:4f:02:a0:
8a:a2:38:ba:04:f4:8e:02:aa:b4:20:72:ae:1e:85:64:56:c8:
15:92:2e:9e:6e:a8:4d:9d:b5:8c:ae:a9:23:dd:ed:7d:28:65:
a7:c2:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:26 2026 by rpki-client