Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: 5cLrrtcd7UYBddtiq4OByg/nQPVRzYWS7xuRV4H+tG4=
Subject key identifier: EF:86:17:74:AE:23:36:A3:94:8E:A8:3F:52:78:F1:29:5A:E8:D4:A8
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 01A0CBFE9772B992EDB9E49B313DC09CBB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 09E1
Signing time: Wed 23 Sep 2026 02:00:54 +0000
Manifest this update: Wed 23 Sep 2026 02:00:54 +0000
Manifest next update: Thu 24 Sep 2026 02:00:54 +0000
Files and hashes: 1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: 1g/9v9tNIuwjpACJMLnKhBOOop5XQEacGVJ44ACM680=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:97:72:b9:92:ed:b9:e4:9b:31:3d:c0:9c:bb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Sep 23 02:00:54 2026 GMT
Not After : Sep 24 02:00:54 2026 GMT
Subject: CN=ef861774ae2336a3948ea83f5278f1295ae8d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:69:04:c4:d9:a4:43:86:31:f8:23:0c:76:
4f:24:65:b2:c0:15:8e:a8:2f:c6:a7:8f:e1:d1:40:
15:b6:5c:2c:0f:14:c9:78:e7:5b:66:56:d4:dd:c9:
34:f9:81:1c:1d:92:55:cd:f9:58:8b:b6:6d:5e:95:
8c:f3:25:3f:72:34:fb:a7:64:01:09:b8:77:9c:57:
85:6c:8c:06:97:de:3c:a6:a4:20:de:e8:b7:82:1a:
e6:03:eb:e5:c6:07:0c:d3:a1:2c:df:33:76:72:52:
c1:d1:17:93:c7:ad:2d:4d:0c:f0:01:a2:17:26:14:
27:33:9a:41:22:b2:9c:64:a7:1d:bd:65:25:f7:84:
c4:79:91:a7:60:1f:01:9b:a0:91:c3:40:5c:2d:91:
92:70:40:61:03:bf:f3:ac:64:66:92:bb:be:51:0b:
a5:7b:97:c9:8c:ee:35:07:9d:60:70:ce:bb:72:04:
fb:f0:57:1d:22:df:d7:76:09:3e:a3:fb:46:7a:fa:
de:5f:e1:75:93:b4:b7:0e:56:11:49:19:9d:01:a2:
cd:80:9f:77:e6:6a:d9:d2:89:7c:77:7a:f3:d2:d7:
2d:0f:d6:61:0a:24:23:16:5d:78:64:90:f4:65:68:
c9:69:84:5b:0e:3d:64:cb:87:14:ea:07:7e:0a:d1:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:17:74:AE:23:36:A3:94:8E:A8:3F:52:78:F1:29:5A:E8:D4:A8
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6d:5e:11:5b:83:75:71:1e:f3:84:f1:29:6e:67:c6:45:c4:
7e:c4:b7:d6:c7:8e:d0:ca:f9:10:c3:41:03:45:f0:77:17:1d:
41:33:7e:93:18:97:dc:48:b8:25:b7:fb:e6:f1:e6:58:25:6a:
61:4b:79:4e:a1:cf:e6:83:39:be:6f:db:5f:e9:12:c9:e0:01:
25:29:dd:ef:6b:cd:aa:74:be:f7:2d:d3:58:b4:a6:c0:00:1a:
60:05:df:17:ce:15:17:2c:66:93:b2:27:9e:33:c2:a4:a2:cd:
8e:55:34:c1:ec:68:95:ed:1a:42:0c:c1:52:bd:a8:54:ca:7f:
f7:02:47:3b:cc:d5:a7:8e:e4:4f:09:85:df:8e:51:9a:af:16:
01:09:4d:06:0a:36:e2:ce:74:2d:9d:39:34:ab:9c:ee:cf:c4:
17:e3:0f:93:71:8c:6b:87:b0:df:28:6c:6f:c8:f0:71:9a:cb:
c2:84:9d:19:3c:dd:92:51:65:60:ed:f5:c5:36:87:d0:72:8c:
8f:43:ed:aa:59:9a:65:b9:3a:a4:56:f4:0c:cc:06:1c:e9:d5:
92:a1:30:a5:21:08:76:29:35:cc:24:47:80:64:d6:7c:6a:6b:
c4:ff:7b:7a:c2:8d:e5:55:b2:af:33:a5:c0:cc:b5:bd:d7:ed:
62:86:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:36:00 2026 by rpki-client