Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: sjN0XIWEcw77TATYgmZnp+ap8IeR8ls+TOyMIFhyvMI=
Subject key identifier: D0:30:A1:40:5E:FA:FD:4A:A5:07:D2:55:E1:F5:A0:61:BA:5F:6B:FE
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 019FADBF6DE984BE03BB5CA4DBED6E0F1949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0EBE
Signing time: Wed 29 Jul 2026 12:00:31 +0000
Manifest this update: Wed 29 Jul 2026 12:00:31 +0000
Manifest next update: Thu 30 Jul 2026 12:00:31 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: BnNFZQu4fNs9tUN0usAHt+UG/49CeqkQLPl2zS55TUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:6d:e9:84:be:03:bb:5c:a4:db:ed:6e:0f:19:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Jul 29 12:00:31 2026 GMT
Not After : Jul 30 12:00:31 2026 GMT
Subject: CN=d030a1405efafd4aa507d255e1f5a061ba5f6bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:6f:fa:f5:38:31:96:dd:bb:d4:8d:79:dd:
87:9f:56:85:af:00:b0:ea:d8:98:c0:1f:bd:5b:9c:
c6:ad:6c:b1:61:30:68:0e:b9:75:e3:bf:8c:3a:d0:
c9:97:0c:d7:74:8a:70:bb:10:49:da:59:d7:8e:39:
79:d6:b2:41:71:2f:87:61:cf:36:24:2c:88:aa:38:
bd:a2:c5:75:11:8c:b0:61:8c:4f:67:7f:96:7e:a5:
b9:8e:88:c3:ca:83:2c:c9:14:91:6d:1c:ad:5b:ed:
3f:5f:5b:bd:d3:25:fe:f2:81:57:eb:8a:86:d0:77:
2d:e9:92:8a:2b:c2:2e:64:16:e3:9e:d5:0b:fa:34:
67:74:8a:0a:26:a5:44:b9:59:dd:ee:7a:92:11:91:
a5:cf:dc:3f:1a:cc:6c:7c:07:47:20:0c:cb:3f:d8:
e9:1a:58:01:72:b0:cf:f0:0d:24:cc:9f:d2:50:4a:
96:f6:74:0e:93:19:19:ba:5a:d2:67:28:af:3b:b9:
06:3d:0f:be:9a:42:69:05:6a:b9:e0:fd:5a:cc:34:
2d:de:53:38:33:69:80:f8:67:37:bc:c5:3b:ee:1e:
7a:79:20:36:f0:02:c4:84:0b:33:73:fa:8c:01:6a:
51:c8:5d:3e:eb:3e:6d:c1:3e:23:a2:b3:69:b4:5d:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:A1:40:5E:FA:FD:4A:A5:07:D2:55:E1:F5:A0:61:BA:5F:6B:FE
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:16:d0:6c:c7:9a:2c:b8:95:bb:d8:27:5a:ca:0d:43:10:6c:
f5:77:65:0d:d4:41:65:0f:7f:58:8c:ab:b7:fb:4e:9b:8d:ab:
a2:90:6a:4c:1a:a8:8f:b7:75:7a:78:8b:03:e2:bd:32:73:12:
eb:f6:57:92:b8:77:53:f8:ae:b0:8b:12:6b:8c:26:04:e1:9a:
46:06:21:60:ab:6d:8e:d5:ca:39:a9:87:6d:8d:be:f7:8b:c3:
0e:e0:d5:2b:16:47:8f:c9:66:9a:d2:fe:95:d0:e4:e2:b0:57:
2a:92:de:e8:99:c9:d2:fe:56:7b:54:20:a0:11:73:0c:86:8f:
9b:63:f5:ba:ab:5e:2a:b4:d0:ad:c5:87:20:4f:7c:15:2f:83:
d9:4a:3f:d8:43:2a:98:bf:84:ca:ee:f7:b2:02:00:1e:24:96:
9e:57:3c:61:de:94:df:92:eb:cb:2c:03:77:31:b6:1d:01:b7:
2e:56:01:9a:8c:0c:c9:2f:6e:6a:00:d1:69:ba:22:ea:9f:98:
d4:d6:8b:89:a3:74:16:41:16:e8:c7:03:09:ee:17:1a:f2:33:
3f:d7:8b:38:44:04:98:39:66:e0:2a:7a:1e:bf:ec:88:dd:50:
18:ff:98:4b:f1:d1:de:cf:5d:70:15:9a:53:9f:24:dc:b3:a5:
90:59:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:50:21 2026 by rpki-client