Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: WaYJaQc+fO/QHfHG6Em1gDSU4/Zhm7Cw+oEPirruWmU=
Subject key identifier: EF:9A:34:E6:D9:46:08:A9:B5:19:D5:ED:17:82:85:E9:A8:E9:30:62
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 019D9EF637323212501CC7C3024A389EC5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: C2
Signing time: Sat 18 Apr 2026 05:00:29 +0000
Manifest this update: Sat 18 Apr 2026 05:00:29 +0000
Manifest next update: Sun 19 Apr 2026 05:00:29 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: 4jF4voZD1i8DMtRGc3VfDbxweLZOxhkUISb+BVksvcU=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:f6:37:32:32:12:50:1c:c7:c3:02:4a:38:9e:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Apr 18 05:00:29 2026 GMT
Not After : Apr 19 05:00:29 2026 GMT
Subject: CN=ef9a34e6d94608a9b519d5ed178285e9a8e93062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:25:d2:eb:b7:4a:d7:d1:a1:9b:06:45:1e:
a2:20:5c:0d:b1:96:b0:c9:98:2f:9f:e0:93:cb:15:
c4:f3:a5:b0:5f:eb:cd:d2:6f:a7:59:db:42:f6:b2:
f1:af:56:a6:fe:b9:2b:8a:ae:f4:5b:7a:08:be:fc:
c3:1b:d6:97:54:3a:f6:03:4a:22:c7:90:02:21:da:
c1:fa:cf:ae:d9:54:7a:c6:46:0f:93:e9:68:a9:7c:
8d:4c:b4:9e:be:69:ac:bc:f3:ca:1f:65:70:b7:d9:
8e:28:88:a1:9d:bf:3e:85:54:b3:6b:54:40:93:78:
ca:7e:e1:dc:02:18:fe:51:f1:6f:35:4a:2a:56:4c:
9d:3e:99:32:a0:e8:2e:88:91:b2:30:8b:da:41:90:
8d:cf:45:f3:a7:94:6b:f2:a0:28:19:1f:3b:e0:61:
7f:de:15:9d:90:71:1c:94:b1:68:a1:a6:3f:1b:84:
6f:18:e2:41:73:83:ff:c3:12:89:9b:8c:ec:ba:5b:
c6:41:5a:bb:c9:bc:e5:6f:6e:89:15:a2:bf:b6:c9:
06:22:2d:16:7c:19:5a:76:63:40:8b:d3:30:29:20:
4e:c0:57:58:e5:e6:74:ba:e7:ea:ed:6d:18:46:b3:
74:b0:37:2f:73:1a:26:9b:4d:cb:05:ef:2d:27:2e:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:34:E6:D9:46:08:A9:B5:19:D5:ED:17:82:85:E9:A8:E9:30:62
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:19:2b:78:58:4f:59:1f:3a:9c:e1:f5:26:bb:db:70:7b:6c:
e7:ff:2d:bc:10:a8:c3:bf:bb:c5:2c:75:e1:ca:19:3f:4a:5b:
0c:d1:74:a0:c3:1c:99:f3:38:25:06:f9:4f:91:e6:0f:38:87:
86:7d:77:40:40:84:da:5e:76:a7:de:4d:c6:aa:0e:78:73:30:
af:85:f1:56:a9:9c:1c:6e:cd:7a:2e:53:19:f3:53:3a:71:25:
ad:45:21:18:97:e6:4a:3e:dc:f6:a5:33:eb:17:60:ca:69:a3:
f3:1c:6c:f8:86:e3:cb:bd:58:43:af:a8:a1:d4:58:97:78:e7:
14:ce:71:f0:f1:61:f4:84:11:ba:d9:31:45:1a:2b:a0:56:1f:
72:fa:65:69:cc:68:90:95:a7:5f:71:3a:58:4f:d1:4a:4e:77:
fd:40:46:fc:3f:60:6b:7d:fa:2a:26:2a:d0:21:d9:6a:c1:89:
7b:e3:d2:0f:df:96:7f:7b:45:b1:61:42:f5:5b:8b:a2:8b:69:
63:40:a6:03:1b:db:58:88:f8:36:39:eb:9f:08:c8:35:44:e7:
91:ab:b7:1b:7f:63:c9:60:2f:e5:cb:bb:c1:94:81:4c:3c:12:
33:00:92:29:82:9a:34:e5:8c:69:ac:20:7a:33:41:9c:65:b7:
eb:41:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:04:33 2026 by rpki-client