Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: 3HCG+n/B3SkgacG3r2bT/ZeMhOxEN0R3usiBv2D9LUs=
Subject key identifier: 9A:0C:F1:A5:71:E1:D9:AF:0C:D7:E1:A5:38:0D:C2:9E:94:F7:CD:32
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 01A0E777941545F0295C107083FCF79D6C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 0218
Signing time: Mon 28 Sep 2026 10:02:48 +0000
Manifest this update: Mon 28 Sep 2026 10:02:48 +0000
Manifest next update: Tue 29 Sep 2026 10:02:48 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: GndyD+7CcWqqG43KD8KA359O9imcmhWsLRkfDe+O8vs=)
2: qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa (hash: JWJWQndeDRgVNRYgTaVF4Zb3Aiwbr3beQwuqCBRvJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:94:15:45:f0:29:5c:10:70:83:fc:f7:9d:6c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Sep 28 10:02:48 2026 GMT
Not After : Sep 29 10:02:48 2026 GMT
Subject: CN=9a0cf1a571e1d9af0cd7e1a5380dc29e94f7cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:e9:e7:b6:6d:39:71:ea:4b:9f:cc:5d:f6:
ce:e9:06:0f:41:8f:d7:79:f6:a2:59:55:5c:1b:19:
20:34:7e:c6:51:b0:6e:aa:5d:81:02:fe:99:fb:ca:
70:87:71:f2:d9:90:f3:9e:07:5b:88:ec:c2:73:8c:
e8:f1:6a:35:31:8f:06:86:f5:02:35:5b:03:53:fd:
a4:f5:81:68:c0:cf:93:38:0f:9e:f8:5a:ad:76:e4:
70:15:e5:90:b7:b7:c1:7a:dd:f1:dd:83:59:4c:c6:
40:f2:f6:5d:ad:5c:7e:8d:81:9f:ef:85:27:f2:c7:
cd:74:86:99:34:00:46:9e:4a:f0:be:3e:12:e1:bd:
d8:b3:26:af:b3:99:37:f6:42:84:45:80:b4:6b:66:
7f:e2:49:d3:f6:bc:4d:5a:4e:0e:0b:60:24:e1:08:
69:f3:49:56:40:9b:96:6d:09:a6:b3:8c:02:23:eb:
30:e2:32:74:df:c9:0f:e1:19:67:83:f1:ae:ec:b0:
5f:18:e6:48:e4:02:b8:31:2e:d5:b6:66:ac:8f:32:
46:88:72:d6:ac:f9:70:48:74:a5:ed:c9:7e:10:8c:
a7:6d:23:21:aa:7a:7f:9c:96:00:c4:0c:21:7e:ad:
b7:1f:80:67:40:f5:8a:aa:2b:cc:7e:ce:05:06:a1:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0C:F1:A5:71:E1:D9:AF:0C:D7:E1:A5:38:0D:C2:9E:94:F7:CD:32
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:84:e9:e3:cb:e0:9f:de:bb:6d:5a:a5:93:5c:19:8b:99:de:
6c:5b:e0:12:2c:25:35:7d:1f:d0:0d:3e:a9:e7:e2:c1:77:f4:
3d:17:b2:0a:db:92:23:6a:18:db:1d:d5:e2:1f:05:cf:4d:60:
bb:0d:fd:c4:14:39:d6:8d:fa:96:9e:e8:8c:ef:d8:5d:96:7e:
0b:42:17:10:65:cd:87:d3:e9:54:9d:9e:27:a6:36:63:42:08:
73:a8:57:db:f4:fd:13:93:4d:e3:56:34:63:c0:2b:8e:ce:14:
c9:bc:31:05:d5:9f:7e:61:be:99:fd:07:a6:76:7e:2b:9e:d2:
bc:13:47:c2:b3:37:4d:db:f7:2f:da:ee:d3:07:94:71:a0:97:
76:65:b8:eb:99:5b:c1:bf:73:c7:b9:f8:bd:7d:9d:e5:92:21:
00:de:fb:d8:6c:a6:e4:7e:86:ca:63:ab:f8:34:ff:f6:1a:5c:
98:ef:71:1e:be:91:f4:45:ae:10:9b:fc:ac:ed:dd:47:1b:d1:
52:0b:f0:29:6a:b2:40:e8:e8:2c:3a:ee:d8:fc:02:31:c0:56:
bf:38:25:aa:df:99:36:15:7e:5f:e9:4c:9c:b4:bf:fb:6f:5b:
9f:cb:40:b2:09:10:84:62:d8:1a:dc:ef:0c:d2:39:33:61:8d:
c6:b4:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:15:48 2026 by rpki-client