Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: oYMYQizm0ujA8MENuodZuLjFPNKAKX5i39ii8FoDHiM=
Subject key identifier: 0D:D3:27:5D:78:C2:79:8A:FE:38:79:CD:49:A4:E3:1B:0F:D6:5E:0D
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 019EC29242F002A5BEB627BF616BB5316E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 0159
Signing time: Sat 13 Jun 2026 20:00:25 +0000
Manifest this update: Sat 13 Jun 2026 20:00:25 +0000
Manifest next update: Sun 14 Jun 2026 20:00:25 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: SNTSo5DiiPeou0tSe5I07Z2AHjUPrlCBRZWO5SOxE4o=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:42:f0:02:a5:be:b6:27:bf:61:6b:b5:31:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Jun 13 20:00:25 2026 GMT
Not After : Jun 14 20:00:25 2026 GMT
Subject: CN=0dd3275d78c2798afe3879cd49a4e31b0fd65e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:ac:e6:25:1e:8b:5d:ca:61:f2:a6:cd:2b:
1f:0d:21:86:06:10:5f:9c:65:48:0e:1a:ff:3b:e9:
57:37:b9:68:0f:4d:2f:75:d5:76:f4:9e:c9:eb:f2:
eb:b9:7d:e6:c7:e7:06:68:ff:2d:a8:b8:a5:fe:75:
aa:8f:12:a0:a3:de:f0:d7:40:17:a4:57:68:16:5a:
cb:5a:9e:14:78:54:81:db:bc:4b:7b:6e:16:9d:eb:
70:81:26:a5:eb:f5:46:52:84:1e:12:da:1f:38:43:
48:95:b1:f3:18:13:ce:3c:c5:f5:be:96:a0:e5:d7:
7e:28:a1:2c:53:ca:73:c4:5b:8a:7a:55:ba:90:2d:
c3:ab:c8:23:56:2e:20:b4:95:2f:b7:11:c8:25:e4:
cc:0a:9f:80:a7:19:85:9c:48:62:8d:29:77:7b:ce:
4a:3b:a5:e8:f1:79:fe:4a:d7:66:ef:3a:91:57:38:
e2:8a:0c:40:33:1b:d1:98:f5:8f:70:2e:34:79:2e:
70:9a:39:15:8d:13:66:ac:c8:11:81:4f:c2:ee:11:
df:e7:73:77:bf:68:27:80:bc:41:d0:95:1a:4e:dd:
1b:87:d7:6c:69:e5:1b:61:35:01:92:13:47:1b:9e:
91:99:fd:c2:4a:af:b9:21:69:04:5a:f0:8d:14:c9:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:27:5D:78:C2:79:8A:FE:38:79:CD:49:A4:E3:1B:0F:D6:5E:0D
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:d3:c9:55:61:5f:96:0b:88:d6:a8:b5:86:c4:3f:27:ad:
14:ed:d8:5a:4e:3b:9b:d2:93:8a:f7:87:b9:f3:03:06:76:11:
3b:65:74:a3:03:27:ed:aa:17:4a:da:23:26:b2:c8:af:61:fb:
3f:14:89:3a:69:24:74:81:9d:4e:4a:d3:51:73:c1:99:15:1d:
1c:a5:4d:8e:57:56:b2:65:48:63:86:44:d6:ca:0d:b3:18:f1:
64:9e:58:5b:6b:6d:6f:43:a3:63:d7:a6:35:b7:3a:62:d5:61:
82:d1:1d:2f:e6:5e:c8:f5:e8:fa:96:49:79:ad:21:4a:ff:fb:
f2:93:0c:ed:d6:3c:0f:25:f0:5c:c3:e8:b7:f2:5c:0f:cf:7c:
52:63:e5:76:d9:6b:5e:a9:de:21:2a:98:6c:5d:c2:1e:b6:f0:
6f:f6:dd:49:e0:f6:05:06:ac:03:32:a5:f8:80:60:07:2a:bd:
16:ec:98:2f:6b:92:47:64:f2:97:f4:6d:1f:3a:db:4f:5d:47:
b5:67:d6:1f:e1:c7:f8:dc:a1:9c:d4:36:78:65:42:15:cf:d8:
58:f2:04:2e:d6:75:1d:3c:81:df:dd:ab:33:5c:e1:b8:0e:4f:
d6:eb:b2:17:47:fb:b9:6c:3f:32:1e:46:66:a7:8b:78:3e:7f:
7f:17:e3:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkkLwAqW+tie/YWu1MW5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZGQ4YTE3ZmM2NzI4NzFiOWYyMDM5NWFkZWRiODVkMDM1
ZWFhNDMwHhcNMjYwNjEzMjAwMDI1WhcNMjYwNjE0MjAwMDI1WjAzMTEwLwYDVQQD
EygwZGQzMjc1ZDc4YzI3OThhZmUzODc5Y2Q0OWE0ZTMxYjBmZDY1ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmCs5iUei13KYfKmzSsfDSGGBhBf
nGVIDhr/O+lXN7loD00vddV29J7J6/LruX3mx+cGaP8tqLil/nWqjxKgo97w10AX
pFdoFlrLWp4UeFSB27xLe24WnetwgSal6/VGUoQeEtofOENIlbHzGBPOPMX1vpag
5dd+KKEsU8pzxFuKelW6kC3Dq8gjVi4gtJUvtxHIJeTMCp+ApxmFnEhijSl3e85K
O6Xo8Xn+Stdm7zqRVzjiigxAMxvRmPWPcC40eS5wmjkVjRNmrMgRgU/C7hHf53N3
v2gngLxB0JUaTt0bh9dsaeUbYTUBkhNHG56Rmf3CSq+5IWkEWvCNFMmuYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3TJ114wnmK/jh5zUmk4xsP1l4NMB8GA1UdIwQY
MBaAFDLdihf8ZyhxufIDla3tuF0DXqpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMt
YzE3ODc0OTllZjMzLzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMtYzE3ODc0OTllZjMz
LzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXvTyVVh
X5YLiNaotYbEPyetFO3YWk47m9KTiveHufMDBnYRO2V0owMn7aoXStojJrLIr2H7
PxSJOmkkdIGdTkrTUXPBmRUdHKVNjldWsmVIY4ZE1soNsxjxZJ5YW2ttb0OjY9em
Nbc6YtVhgtEdL+ZeyPXo+pZJea0hSv/78pMM7dY8DyXwXMPot/JcD898UmPldtlr
XqneISqYbF3CHrbwb/bdSeD2BQasAzKl+IBgByq9FuyYL2uSR2Tyl/RtHzrbT11H
tWfWH+HH+NyhnNQ2eGVCFc/YWPIELtZ1HTyB392rM1zhuA5P1uuyF0f7uWw/Mh5G
ZqeLeD5/fxfjUQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:12:22 2026 by rpki-client