Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.mft
File: MjtO3rbWVDSqwerRjggNvqtj1rQ.mft (raw, json)
Hash identifier: LNXJzpBoaE0kJlTfghaAEMs4SQwHOpzKY6N5W8XUisI=
Subject key identifier: 8B:63:11:D3:F7:0B:46:C2:70:74:9C:67:A6:4C:85:2C:4C:B0:FC:20
Authority key identifier: 32:3B:4E:DE:B6:D6:54:34:AA:C1:EA:D1:8E:08:0D:BE:AB:63:D6:B4
Certificate issuer: /CN=323b4edeb6d65434aac1ead18e080dbeab63d6b4
Certificate serial: 01A128E89ABE7EA5EA940AB153CF6CA15AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjtO3rbWVDSqwerRjggNvqtj1rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.mft
Manifest number: 20
Signing time: Sun 11 Oct 2026 03:01:34 +0000
Manifest this update: Sun 11 Oct 2026 03:01:34 +0000
Manifest next update: Mon 12 Oct 2026 03:01:34 +0000
Files and hashes: 1: MjtO3rbWVDSqwerRjggNvqtj1rQ.crl (hash: BGV4kzBY2JhbEssHlfYlkD6YpYnHkTr0YFZWQ8rjOAw=)
2: u7wFVO7nxymihLp225w2K5t9iXQ.roa (hash: cLsJ9qx1KNyQsRqmjj062bjF2+zXRoM5yUYiUP8VehM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjtO3rbWVDSqwerRjggNvqtj1rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:9a:be:7e:a5:ea:94:0a:b1:53:cf:6c:a1:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323b4edeb6d65434aac1ead18e080dbeab63d6b4
Validity
Not Before: Oct 11 03:01:34 2026 GMT
Not After : Oct 12 03:01:34 2026 GMT
Subject: CN=8b6311d3f70b46c270749c67a64c852c4cb0fc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:41:12:11:37:78:6c:5d:aa:39:8c:dc:9f:
e9:64:a8:85:87:43:51:e0:62:ca:b1:f4:8a:d2:84:
0a:f0:55:96:05:78:0d:fe:12:48:ce:4d:27:4d:6b:
56:cf:81:ce:e6:6c:d7:56:a0:49:77:e6:23:9d:e0:
af:2e:8f:09:30:d0:56:54:10:b2:6f:cb:80:36:27:
33:8e:ab:2a:8b:de:c0:c4:17:e1:ca:47:09:3c:ab:
5d:a6:df:b2:0d:72:e6:2d:08:2b:23:e2:2e:d2:d3:
6b:fa:a7:43:af:56:26:ff:2f:29:e1:1d:2d:83:c1:
7a:32:b6:46:c6:6f:04:84:86:bf:c7:b2:2c:81:8c:
0b:83:d5:83:81:b3:a4:61:22:b0:41:e9:73:8a:1b:
93:6b:d1:bd:7e:59:71:36:ab:22:44:ab:9d:39:bc:
3c:eb:bb:e8:52:f4:53:a7:44:ed:64:86:e1:f6:23:
ba:dc:28:af:30:b3:9d:da:8a:1a:7e:07:1e:80:cb:
d0:25:18:22:61:58:a9:33:43:22:47:a6:cd:b4:db:
46:8e:1f:de:71:05:6f:64:2b:30:8a:d0:9d:63:b7:
31:0a:a5:f2:2c:1b:39:74:68:d3:72:77:64:93:c0:
ae:78:66:5e:35:a4:79:3a:fa:cb:70:50:49:42:dc:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:63:11:D3:F7:0B:46:C2:70:74:9C:67:A6:4C:85:2C:4C:B0:FC:20
X509v3 Authority Key Identifier:
keyid:32:3B:4E:DE:B6:D6:54:34:AA:C1:EA:D1:8E:08:0D:BE:AB:63:D6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjtO3rbWVDSqwerRjggNvqtj1rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6f9835-2d80-40de-96f3-e0c72d116b23/1/MjtO3rbWVDSqwerRjggNvqtj1rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:05:06:a7:af:84:d9:27:3a:fd:55:be:e9:4b:8a:e6:19:28:
a9:be:bb:e5:75:26:04:55:89:f3:63:2a:a6:17:59:86:50:04:
8f:c5:bc:fc:ba:81:ce:28:2b:39:70:34:b5:d1:cb:85:f1:75:
97:e1:38:7b:07:cb:ff:20:90:a1:d5:1e:39:a1:05:40:47:9b:
9d:22:47:fa:37:33:97:82:1e:f6:a2:c6:b8:5e:bc:f6:ba:f8:
53:29:26:c2:6a:91:05:83:79:44:e9:89:40:81:17:96:85:fd:
59:69:a2:2b:1e:fb:76:f4:75:9a:7b:45:c4:14:53:ab:97:54:
94:5a:2d:85:5b:66:4b:16:cd:3b:a8:3c:45:5c:66:fa:8b:a6:
66:50:aa:96:47:5c:2d:c3:fc:33:57:12:e6:6e:b8:a7:00:11:
76:72:03:f6:68:e9:de:6e:12:3d:59:6f:e3:95:be:f0:c4:eb:
b3:6c:b9:ca:61:ab:0b:4f:d9:5f:ae:ea:5a:c2:bc:d2:15:9f:
50:0d:5f:46:6a:1e:f8:ab:e1:a8:b0:6e:1d:87:d6:4f:a5:bc:
5a:a5:49:b1:4f:ef:f4:39:4d:3e:96:c3:3d:24:8f:49:72:52:
92:42:90:f0:09:8d:9e:31:64:dd:78:5f:7c:0c:e8:15:0b:22:
80:8f:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:47:59 2026 by rpki-client