Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: AExKQLYwcpFtdsRcnWDC4dJ9dQmqYggYkm1dh/5LMPA=
Subject key identifier: C5:37:0C:AC:CE:53:E2:7A:66:52:41:BB:F0:CB:55:A5:0D:5C:54:83
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019FAA50D281BFD1429157A8104A914BEAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 19F0
Signing time: Tue 28 Jul 2026 20:00:51 +0000
Manifest this update: Tue 28 Jul 2026 20:00:51 +0000
Manifest next update: Wed 29 Jul 2026 20:00:51 +0000
Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
3: J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa (hash: pHPtPx9vsv712QiSLZLL9G31WWmDzgqCzXERnuz9zRg=)
4: KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa (hash: AtauxquVGMfNWT+OwoqixJIcGDXl6Ybqcwqx4c3ybJQ=)
5: Lm1nnFYkUsiu098gCvYjKS5-l4g.roa (hash: 1RaZfLGyq0c5ZD0BFswNZ5s2IFMTrcMOt76tyg+sqUg=)
6: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: lTUiMNOj8BIbEUm5mvmhxXUwj+sc46VFU2NJSoZzKCw=)
7: NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa (hash: YPxNBQxqKzSRH7VqT/pnoJq/j2DPg0mDeSU7F/W/bvs=)
8: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d2:81:bf:d1:42:91:57:a8:10:4a:91:4b:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jul 28 20:00:51 2026 GMT
Not After : Jul 29 20:00:51 2026 GMT
Subject: CN=c5370cacce53e27a665241bbf0cb55a50d5c5483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:9c:ee:2e:dc:a8:4b:18:5d:ab:ac:96:a8:
4e:49:ca:90:d5:7e:e2:b6:92:48:9a:a2:fe:8e:2e:
39:88:c2:4c:8c:e6:87:79:46:0a:28:f3:f0:9f:c5:
86:7d:4f:d8:e0:18:0e:c9:55:70:c7:11:81:63:ee:
75:4f:cf:e0:83:ad:dd:da:33:00:49:6c:16:b1:b0:
69:94:75:43:76:8c:81:ae:38:b4:c6:3b:be:bf:30:
53:16:b2:f9:bf:76:b4:7c:42:c5:12:20:b1:ef:44:
7a:dd:90:5f:11:0c:d0:52:91:22:2a:f9:51:40:68:
e5:7a:9e:d6:58:62:c3:46:6a:b8:02:0f:28:11:8c:
f9:97:ec:f0:54:f2:7e:6b:67:81:a5:ac:32:43:61:
09:30:f3:de:32:56:40:f6:e4:0c:2b:52:68:e4:4a:
74:b2:16:01:5f:32:96:94:68:40:b7:24:d2:e2:48:
92:f5:d1:23:01:8d:61:73:06:05:6e:3f:6b:b2:de:
14:c6:e2:c6:15:b1:50:b9:14:d9:31:71:2b:d4:90:
8c:2a:cf:50:36:79:b1:61:cb:8c:31:aa:fd:3a:c1:
a6:0c:b6:01:85:ee:c1:8c:25:f7:84:73:70:11:ef:
bf:38:e6:25:f1:c9:0b:8b:37:51:d7:22:38:88:f6:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:0C:AC:CE:53:E2:7A:66:52:41:BB:F0:CB:55:A5:0D:5C:54:83
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:28:56:62:13:5b:41:13:53:53:ea:ff:ff:a0:49:10:6c:b8:
05:8c:d1:43:0b:62:69:5d:61:fa:c2:b6:34:59:31:69:1f:1a:
4e:fb:4c:03:b4:18:18:55:41:86:53:2d:e4:08:a6:71:24:05:
1e:73:45:21:c1:b2:cb:44:86:6a:bd:d0:f7:84:b1:b5:9f:5e:
6e:eb:fa:1c:aa:2a:e6:97:e9:2c:2b:c4:8b:80:cc:0c:38:1f:
85:35:45:25:a9:67:69:c0:50:8e:4b:3a:7b:e2:1c:48:e0:b5:
57:d1:6c:e8:2c:85:71:2d:2b:cd:f2:d8:d5:7b:28:86:89:9b:
b3:b5:e8:43:ee:dc:9a:e8:56:2b:91:a8:84:e6:ef:a5:1e:ac:
99:c6:31:48:88:43:08:55:18:cb:a8:16:bc:70:c7:ae:05:5a:
4c:e2:f2:1e:24:eb:a8:65:90:e3:e4:ba:d8:71:17:4f:77:c5:
d0:06:83:fd:ad:47:1b:eb:32:a4:59:f1:8e:89:ce:62:70:1f:
6c:52:c5:33:68:a7:cf:be:90:5d:1e:e1:74:52:80:87:86:35:
df:11:e1:59:c1:c5:09:13:58:cf:a8:79:76:85:a7:8e:18:68:
db:0e:e4:9d:41:5d:3c:dc:aa:6e:49:48:89:1f:ce:67:60:32:
98:1f:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:57 2026 by rpki-client