Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier: MLwfgFVgl4Uag49HDHCFvCEPwH11W3G23sDY3iu2KWY=
Subject key identifier: 5B:CA:7A:D1:F1:44:7B:4C:19:F2:6C:30:01:22:8D:A3:98:D0:CC:E0
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial: 019CAC7DF5ED0B1E8B833694E80B291E74DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number: 01AE
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: XRg1GerdWcZN8QP7A2NAJQrY/ZeiOo+IRPyUQRGxFXc=)
2: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (hash: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f5:ed:0b:1e:8b:83:36:94:e8:0b:29:1e:74:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=5bca7ad1f1447b4c19f26c3001228da398d0cce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:4c:45:39:03:fc:9f:bf:34:6f:c6:e3:64:
91:bc:d9:0d:08:cd:50:37:e4:d7:34:aa:1f:49:b9:
f4:b5:a4:28:0e:1b:71:56:eb:b1:c1:b9:fe:ba:3a:
16:26:01:bf:a9:47:12:b5:58:81:13:ce:2b:46:fe:
78:eb:52:c5:2b:a9:c6:91:97:c1:a5:a2:ca:16:d2:
fa:f3:46:9e:10:f1:04:9d:41:f5:05:44:ff:12:8e:
92:55:47:43:92:26:72:7b:32:b4:20:48:49:1a:ad:
ff:d7:72:e3:95:b9:d3:9e:91:99:08:1b:8d:c2:66:
da:0e:5f:a1:79:b7:cc:b2:5c:fd:06:67:a6:1f:e3:
85:1b:8d:68:15:79:5f:3f:52:3a:50:d4:0a:e2:bf:
13:7d:e0:5e:37:20:9d:50:36:20:1a:cb:b3:28:85:
77:05:e3:d6:87:86:24:ae:bc:52:ad:ed:65:31:ef:
93:b3:08:9e:03:48:05:94:0c:d1:ca:43:78:1a:e9:
c3:8e:6e:63:90:be:5b:2c:35:4a:d5:46:fe:40:5f:
7a:12:0e:d9:5a:c9:e0:ed:7c:30:d9:58:d6:d2:f5:
f1:01:6c:b5:cf:32:0c:3d:41:d2:01:61:bf:71:35:
25:30:05:ac:9a:5a:de:05:2d:f2:d2:df:e7:99:99:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CA:7A:D1:F1:44:7B:4C:19:F2:6C:30:01:22:8D:A3:98:D0:CC:E0
X509v3 Authority Key Identifier:
keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:10:f9:d4:1f:de:6f:e9:f6:ff:90:b7:f8:27:d2:8b:aa:
7d:fe:78:6e:31:f1:ff:28:23:28:c5:17:e5:21:0d:31:cb:fe:
16:ce:56:7f:c7:6f:18:3f:ad:b4:6c:bc:72:8e:9e:f6:76:31:
d2:1a:f8:65:f6:6f:a6:75:63:e9:97:6d:b8:48:7b:13:e3:7a:
c7:a5:20:05:41:ea:77:bb:54:8e:8a:cd:47:29:c1:4a:61:9d:
1d:84:57:e4:4c:ea:d4:4a:19:d2:bc:dc:df:69:77:63:bc:4c:
59:b5:48:21:44:8d:d6:da:ef:4d:bc:eb:1c:55:80:36:5d:c9:
57:93:10:7b:a2:c2:62:3c:c6:ff:37:bb:01:87:23:d0:19:89:
4d:aa:ae:d0:86:31:2a:85:8b:1e:83:64:9b:5d:ad:bb:fb:cf:
10:69:9e:7b:02:8e:05:f1:01:5a:21:14:f2:5e:93:a8:12:65:
c3:8e:0d:f5:37:03:19:14:c1:97:5e:a9:9f:6d:da:a9:d7:ed:
c1:64:37:3e:80:07:6f:ef:1b:59:d3:05:b8:c0:82:e8:15:9c:
23:48:fa:a9:78:26:9f:aa:80:49:02:79:40:28:c5:9f:ed:93:
4a:80:48:6a:89:23:fb:83:ed:02:65:25:31:18:87:88:da:53:
f7:5a:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:23 2026 by rpki-client