Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: pXkdWKRGipkhiSk2rTm/HBGn9tib16gWdVG2GIiMEhY=
Subject key identifier: 3A:A4:F7:43:63:9A:AD:E4:9E:CF:8D:B6:FE:5E:7F:03:B8:F8:7A:CC
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 019CAAC6258D6F26E5E01109B9CF56B823C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0A82
Signing time: Sun 01 Mar 2026 19:00:38 +0000
Manifest this update: Sun 01 Mar 2026 19:00:38 +0000
Manifest next update: Mon 02 Mar 2026 19:00:38 +0000
Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: tRVzmHQEU/N3/y4eFaphnc0y3b7WJuKIeI6+aLomEsk=)
2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:25:8d:6f:26:e5:e0:11:09:b9:cf:56:b8:23:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Mar 1 19:00:38 2026 GMT
Not After : Mar 2 19:00:38 2026 GMT
Subject: CN=3aa4f743639aade49ecf8db6fe5e7f03b8f87acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:fd:75:fa:3b:f4:8e:9c:98:8c:8d:f7:6d:
b4:49:b9:f8:6b:63:3c:bb:87:58:05:ae:f3:5f:cd:
93:aa:ca:b3:7e:4e:41:9a:ae:3c:6e:d0:d7:2b:3a:
5c:7a:0b:a8:3c:6b:d3:bf:42:bd:fd:b8:0c:e3:58:
6b:9d:40:a2:0e:fd:0f:39:4e:43:db:74:3c:23:e4:
52:cb:a1:e1:2e:20:80:d9:cf:4c:99:2b:fb:9f:f2:
72:50:e0:9d:a4:58:bd:48:fc:ee:f7:c9:9c:33:03:
b1:27:c2:8b:42:ab:6b:0a:a7:bd:eb:2f:fe:6d:a3:
08:e9:65:c4:03:8f:ab:bc:dd:b5:b3:d9:af:65:e6:
a0:ad:25:d9:27:69:ff:83:93:34:33:b5:d4:64:1f:
72:62:2f:69:84:bf:25:d8:82:7d:95:3a:22:e0:ba:
48:b8:89:fe:3b:e0:74:77:27:00:d9:a1:af:de:9e:
ee:50:c6:6f:6d:a1:bf:24:af:b8:3f:03:aa:5e:3c:
30:f5:dd:82:7e:a5:c0:83:92:da:d9:64:41:74:dd:
58:d0:f5:b2:ef:bb:f7:df:85:2e:6a:fd:a0:cf:a2:
ea:85:2f:cb:81:7c:93:0d:f8:0e:a0:78:ce:25:3f:
64:2c:5e:c9:da:e4:b6:f7:64:2f:87:b4:23:03:72:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:F7:43:63:9A:AD:E4:9E:CF:8D:B6:FE:5E:7F:03:B8:F8:7A:CC
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:e6:dd:1b:81:9c:d8:c7:e2:6f:0a:c5:4e:dd:58:25:c4:
5c:91:16:78:92:4c:34:7d:3f:e2:84:05:f7:93:31:87:84:96:
99:37:df:56:89:15:ab:89:2e:0f:c7:65:2b:2a:d9:9b:b7:38:
03:d2:c1:55:ee:45:93:c6:4f:33:18:82:de:6d:10:53:af:ba:
e9:0a:ba:bb:fe:69:14:86:5a:63:02:f1:b5:49:7e:06:d4:46:
76:74:e9:ff:3d:cb:ea:4e:8f:dd:13:5e:b6:9a:ab:6d:74:82:
b0:34:f3:bd:31:a6:b5:4b:0e:76:ce:ab:66:78:88:83:70:2b:
ff:d2:ee:b9:6f:ce:1b:55:fb:57:82:8e:b4:a0:87:f0:92:41:
06:98:2b:0a:e0:5c:4d:4c:72:9c:4c:96:10:c4:1d:2f:0b:c2:
bb:ad:17:cc:3f:cd:be:96:72:53:82:6f:08:24:90:e8:55:b6:
04:b5:fd:f6:ff:ca:da:d9:90:bc:65:cf:41:71:cf:34:2e:b7:
e0:b5:7a:1f:65:8a:23:72:e0:01:63:67:aa:fe:45:cf:ad:8d:
45:07:e1:8f:bc:12:33:6c:b1:9e:57:c9:40:13:33:c2:d3:a0:
26:b0:6c:53:84:09:e2:39:17:a8:a3:e6:29:70:72:6f:07:93:
fa:48:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:18 2026 by rpki-client