Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: aFdmba6VQuLJdjRG20a1pPSqLmDtayhWjXgflTW26SI=
Subject key identifier: 0E:D2:C7:DC:FC:06:BA:29:EB:B6:EA:4E:40:75:C1:5A:1A:E2:D0:DF
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 01A1325902835EDD9F36E6568151CE705F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 029C
Signing time: Mon 12 Oct 2026 23:00:56 +0000
Manifest this update: Mon 12 Oct 2026 23:00:56 +0000
Manifest next update: Tue 13 Oct 2026 23:00:56 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: Bd0pYNEYlLgzZ9DVFCRqQBYnI+JGW1ZzbimRWeRid48=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:02:83:5e:dd:9f:36:e6:56:81:51:ce:70:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Oct 12 23:00:56 2026 GMT
Not After : Oct 13 23:00:56 2026 GMT
Subject: CN=0ed2c7dcfc06ba29ebb6ea4e4075c15a1ae2d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:28:57:b1:53:0f:98:51:07:dd:5b:78:76:
4a:92:2d:51:0e:b7:36:65:c5:a8:33:30:f5:22:95:
47:7e:7f:ca:94:42:be:71:ec:c0:0e:b3:58:18:03:
82:b7:81:97:6b:89:10:9d:9e:d1:55:1e:a9:29:19:
c7:9a:e7:8c:36:29:15:92:51:26:1c:17:b5:69:24:
21:98:c6:df:ee:d0:d5:0e:ae:a4:c8:e2:24:03:06:
80:ad:9b:ee:41:c4:84:88:d7:cb:81:3f:a2:f9:a1:
7b:07:a4:11:18:a8:51:33:6d:9d:89:23:4d:a2:83:
f8:d9:13:23:52:b2:c8:8b:e9:0d:02:fb:99:58:a3:
c4:7e:8f:8a:e2:2c:b5:45:d2:5c:65:e4:97:25:89:
7a:9a:ec:e7:02:4d:56:29:6e:c2:59:c0:e5:30:4f:
cc:ea:54:96:c8:3a:24:f6:7c:a0:ad:f8:9a:a0:28:
10:dd:65:af:46:60:85:df:f6:72:8d:28:24:f5:36:
50:a1:c1:31:9f:12:2e:97:7c:fd:73:9c:4c:aa:31:
fd:1a:86:38:1e:09:a2:34:93:9a:07:54:b2:fc:56:
b7:4f:97:95:83:d6:e7:5d:40:46:9f:ea:4c:66:78:
cd:9e:61:f2:c0:21:28:f6:3a:d8:87:e7:17:ca:2e:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D2:C7:DC:FC:06:BA:29:EB:B6:EA:4E:40:75:C1:5A:1A:E2:D0:DF
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:93:36:7a:64:15:ca:d7:4a:0b:04:d7:8d:f9:ef:9d:a6:83:
5a:45:3d:51:90:99:cd:3d:e8:88:bd:a3:3b:80:00:48:7b:55:
f3:30:fa:5d:83:27:12:95:9f:28:3d:16:9f:6e:f2:05:6a:e5:
75:59:de:aa:3e:a1:79:d9:a7:ad:9b:a0:66:af:44:d8:df:19:
b9:1c:da:68:89:10:19:c5:8d:7c:9a:5f:cd:33:67:0a:9a:80:
b4:7c:ba:98:da:8b:7f:5a:bd:49:ec:be:ce:11:3b:67:38:92:
fc:22:14:a7:2a:89:57:ed:b0:bb:72:23:53:70:54:63:f9:2c:
55:d8:de:e0:a1:7d:30:2d:39:5d:0e:f6:31:d1:12:28:a4:da:
7c:41:75:a0:0f:bd:33:ca:2f:33:9e:31:ca:59:f5:9c:c5:de:
91:a3:5c:43:b7:74:0c:84:ce:18:af:b3:a3:27:ef:77:e1:b8:
76:68:16:41:cf:7d:6e:a9:a9:be:fb:16:c4:9d:b9:07:b3:86:
b5:e6:33:58:6e:10:8f:1f:7f:68:29:cd:c0:74:87:5e:87:5c:
ae:03:39:44:d3:be:18:19:1e:4c:7f:8d:33:d2:dd:ac:cf:92:
3a:a1:ae:a6:40:e9:90:6a:0c:8f:0c:2f:10:8a:41:b0:da:f4:
d4:ae:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:50:36 2026 by rpki-client