Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier: izUQKleqfe1TvdOO+QKZTqg238bZGvmC/KTIKY8F/mA=
Subject key identifier: D8:0F:6C:F6:C2:A5:24:08:28:D7:A2:9D:4E:58:9A:A8:71:D7:0B:BE
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial: 01A0E4074CAFBF64319B35246C3F1A2E05CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number: 03DD
Signing time: Sun 27 Sep 2026 18:01:18 +0000
Manifest this update: Sun 27 Sep 2026 18:01:18 +0000
Manifest next update: Mon 28 Sep 2026 18:01:18 +0000
Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: hmXlx+2xSVwesArLxvR7oV7YnSzGkQDjOtMLw9IVgjE=)
2: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (hash: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:4c:af:bf:64:31:9b:35:24:6c:3f:1a:2e:05:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Validity
Not Before: Sep 27 18:01:18 2026 GMT
Not After : Sep 28 18:01:18 2026 GMT
Subject: CN=d80f6cf6c2a5240828d7a29d4e589aa871d70bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:f4:62:e9:ff:59:4b:34:6c:2a:96:cc:ca:
f6:31:5d:57:ee:1f:e0:a9:3e:ce:d1:74:c9:36:4f:
fd:cf:53:68:a8:16:92:dd:56:9e:e9:ab:c7:f3:c9:
4a:72:a3:ff:53:25:89:c0:64:1f:e6:81:74:fb:8d:
26:7a:70:72:f2:f7:09:24:26:cc:26:9a:f7:07:af:
68:30:e3:45:cc:9a:9e:37:08:46:ff:df:30:aa:26:
b6:13:df:28:37:f6:c9:04:4f:ab:ba:79:b1:ae:4d:
6d:78:9a:ad:4f:df:d7:6b:22:a9:9e:5f:45:e4:91:
57:f7:3b:ea:9a:2a:6b:a5:8a:c0:80:c3:69:0f:3b:
ef:e0:80:24:88:2a:49:0b:35:a3:50:ca:f0:c2:10:
22:27:7e:ed:c8:3a:01:ce:07:3a:f2:0c:59:38:87:
97:f8:33:ee:f7:91:55:f8:1a:8a:4b:3f:63:69:0c:
d9:1f:af:45:18:a2:c9:c0:32:76:a7:db:38:9e:e3:
c9:d7:b6:6f:b8:c9:a2:c8:e9:79:db:5d:5d:b7:74:
e8:88:72:81:db:5b:82:21:4f:ab:3a:76:31:1c:68:
e8:f2:8c:e3:b6:26:df:6d:c4:ec:75:81:36:c6:ee:
72:c7:16:7f:da:ec:9b:ec:06:78:44:83:eb:95:0a:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:6C:F6:C2:A5:24:08:28:D7:A2:9D:4E:58:9A:A8:71:D7:0B:BE
X509v3 Authority Key Identifier:
keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:69:04:d1:7f:2a:bb:25:71:bf:99:22:db:60:0f:e4:83:18:
81:7e:db:40:37:67:06:8b:54:26:cd:7a:55:f0:d7:39:90:75:
f6:8a:75:30:18:89:66:3f:42:9d:88:ce:18:9e:13:ab:b6:24:
17:06:da:45:a7:23:ee:87:d1:29:f2:20:75:a8:9a:ed:90:cb:
45:ac:d5:f6:76:d2:91:5f:03:2b:50:99:ed:ef:50:de:99:76:
3a:e8:1a:48:1f:86:fd:7c:94:6d:78:6f:04:b3:84:7f:21:0d:
92:c9:e4:14:b0:d4:6b:a1:f8:ab:94:30:8f:dc:e8:a2:23:f5:
d6:26:de:b6:89:41:b9:f8:bd:08:73:c2:48:b1:3b:b8:9a:fd:
ea:64:9a:4d:62:13:5a:54:bf:5a:03:b3:ee:c5:94:f4:9a:a1:
99:04:9e:10:76:7d:00:f7:6c:18:97:b4:f2:9f:17:79:b5:0c:
d8:9b:29:de:0e:5f:2a:13:ff:7d:46:95:47:6f:27:c4:50:b2:
ce:98:a4:57:52:2b:c5:7e:92:f3:ee:33:d2:50:01:68:e3:d9:
ae:71:ab:00:a1:e4:a7:9f:9b:db:19:b6:6e:9c:03:d2:9c:13:
45:76:f6:17:89:0f:4e:5d:b3:1e:06:f5:ac:3b:25:27:fe:c6:
8a:02:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:53:58 2026 by rpki-client