Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: cy7BL+dw+6NJ6i5QjmwyEL0N4oKY7PbGecxupo0/mt0=
Subject key identifier: 9B:79:D8:79:15:C8:94:1E:20:4D:09:D1:2A:66:CF:AE:C1:36:B4:A1
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 019DA3E66405D32AB226B962DF97A8A84021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0B03
Signing time: Sun 19 Apr 2026 04:01:18 +0000
Manifest this update: Sun 19 Apr 2026 04:01:18 +0000
Manifest next update: Mon 20 Apr 2026 04:01:18 +0000
Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: QdHZl0qsDlV/+Bmk4iAtR4msM0cpDY/2I1mJnakVgyc=)
2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:64:05:d3:2a:b2:26:b9:62:df:97:a8:a8:40:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Apr 19 04:01:18 2026 GMT
Not After : Apr 20 04:01:18 2026 GMT
Subject: CN=9b79d87915c8941e204d09d12a66cfaec136b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:e1:22:07:b8:08:3d:3b:f4:a9:e9:b1:b6:
74:0b:47:4f:89:f6:02:26:56:65:7d:38:8a:a3:26:
f3:f4:67:75:93:0a:cb:d5:d3:45:f2:2b:bf:17:02:
09:0a:94:d3:3d:03:bc:ff:bd:11:0c:bd:fa:74:86:
7d:b4:01:61:2a:97:60:d3:1f:51:4e:52:de:b8:23:
98:89:dc:86:47:f7:91:ce:ad:c0:21:e6:8a:4e:07:
eb:a6:bc:9e:54:26:ed:a3:c8:a1:a7:fb:9d:60:47:
08:c1:2f:e0:0e:af:91:7e:27:ea:bf:04:2b:d8:2a:
93:b8:c5:5a:9b:f5:1b:64:cc:97:7e:b2:22:5b:bf:
00:ee:43:33:9c:c1:f6:da:89:a6:8d:a1:a7:c4:71:
f1:d1:2b:8d:b9:dc:4a:19:af:d9:72:40:9e:34:88:
eb:09:d6:ea:46:8c:a4:bf:ff:e9:c8:32:50:76:82:
ea:84:dd:3c:76:7f:4b:44:32:ec:0c:03:9e:4a:68:
ab:f5:d6:c0:f1:83:52:3f:4c:cb:36:db:f4:cd:d0:
d9:4c:8a:ea:fc:a0:b6:c9:7f:66:d8:4f:ae:0b:69:
81:39:61:4a:8a:16:3f:41:d4:b4:d0:5d:b6:d9:f5:
0b:d7:40:d2:99:b4:c9:8e:59:bf:f9:0e:4e:e4:86:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:D8:79:15:C8:94:1E:20:4D:09:D1:2A:66:CF:AE:C1:36:B4:A1
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:11:37:27:e3:e1:a5:6f:82:63:2b:3a:42:4a:53:75:8a:6f:
9f:ff:5a:48:6e:26:5c:d4:9d:db:45:24:96:b1:ff:c7:bd:e4:
4b:1b:15:96:1e:f5:bb:13:da:49:76:8f:30:a0:96:6c:8a:96:
64:9a:94:20:41:e0:a6:d5:51:e1:f5:01:e1:72:d8:c2:c3:c6:
dc:c3:d9:bc:d2:70:57:fe:2b:19:7f:2f:28:27:f1:3c:39:ba:
79:b0:9d:94:c9:dd:85:6e:a3:1a:59:fa:45:5f:18:3a:9a:30:
9f:54:c5:c3:d0:2e:2e:e6:95:3a:4f:ab:cc:c2:a2:ba:80:ea:
16:74:89:ad:b8:28:bc:69:29:0f:48:aa:66:d3:87:85:b8:6f:
21:c9:5a:65:69:46:d2:06:f8:d7:38:52:25:0e:3d:ce:cf:fe:
2d:1e:58:c5:51:dc:08:4b:38:8f:57:a3:12:3a:32:49:dd:c9:
84:d5:30:52:af:58:db:5e:a0:a4:de:2e:96:89:89:ab:6d:ba:
ef:32:ad:5f:4e:f4:ac:9a:95:78:f5:76:61:81:c6:26:1b:b3:
26:aa:ee:34:d3:e9:e4:bd:4a:71:2d:5a:17:9c:82:68:de:ae:
dc:6b:c4:1d:9f:f5:98:7e:d4:ac:30:97:bc:cd:da:ad:ba:7c:
3a:53:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:21 2026 by rpki-client