Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: vmihqF5DaicAm6Rn3XK/bqRpyriDBNb7P9+zMTuIUek=
Subject key identifier: 6A:29:21:E6:F7:18:F6:23:E2:44:95:54:DF:7C:71:CF:FC:CD:28:7F
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 019CACB486C4F46571D3205B306471C3EE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0A83
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: jeLaX0N+4UHQsArlRjdqqEzRKys6md4AannKMa9/qhg=)
2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:86:c4:f4:65:71:d3:20:5b:30:64:71:c3:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=6a2921e6f718f623e2449554df7c71cffccd287f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:be:cb:72:8f:df:ed:bc:c3:7e:65:17:c8:
25:17:cf:20:d7:97:4f:5e:17:ad:c8:4c:d6:19:bb:
78:ba:95:72:1c:70:59:53:21:41:dc:4a:f1:3f:01:
c6:ca:22:4c:ef:66:79:c1:81:85:8d:1b:37:94:6a:
c7:12:bb:7e:e5:e9:7b:ae:c9:7f:56:66:1b:34:e3:
a8:c3:6d:d7:f9:fb:7e:ee:11:c2:90:19:15:ad:58:
b7:f1:d1:16:29:51:33:fa:24:ae:ed:8d:d6:d5:0b:
fe:65:a3:58:1b:d7:9a:b0:04:12:d1:04:7f:e9:04:
f4:4e:fa:0a:a4:26:a4:cd:1a:fa:e4:a6:c6:21:bb:
36:34:0c:ac:78:30:79:54:ff:de:29:cb:34:5a:a5:
51:82:8f:ca:e7:d3:18:53:e1:62:0a:23:14:11:b0:
c4:cf:16:01:c3:30:f9:30:5e:67:5b:71:8a:62:e8:
8a:02:07:0c:8d:50:10:fc:42:dc:4b:9f:bc:90:36:
60:d3:92:06:8d:f2:ce:2f:c4:eb:6a:65:cc:7e:4f:
11:6e:5e:61:0e:4f:d2:11:b2:41:a6:dc:37:93:b9:
09:fa:76:e6:30:ba:97:25:3d:2d:a3:46:80:8b:5e:
ba:ec:6a:ae:c9:a4:ee:e7:53:d9:e8:f4:14:65:33:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:21:E6:F7:18:F6:23:E2:44:95:54:DF:7C:71:CF:FC:CD:28:7F
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:99:49:73:10:50:a3:36:fa:3e:19:69:f8:4d:a0:c4:72:
7c:96:71:7c:7f:5f:4c:ff:91:d4:b6:16:d3:bf:ff:31:7b:cf:
34:61:48:be:d1:68:91:17:3b:3c:fd:0c:b7:84:97:13:c6:e2:
f4:e8:23:1d:f3:5c:c9:c0:02:07:d2:3e:0c:70:f5:1f:e3:57:
7f:ec:6b:4a:92:96:20:ab:f6:de:13:5c:bb:cc:dc:ec:ca:8a:
fb:0e:26:de:ee:f8:78:2c:b7:75:2f:f0:8b:c7:1e:60:d8:1c:
9f:b6:32:aa:38:d1:1c:12:9e:4c:5b:e0:6a:5d:8b:87:dc:d1:
63:fa:ac:6e:7c:aa:66:3c:7e:3f:77:07:cd:4e:be:19:e6:97:
f1:37:a8:b3:2b:c4:f2:2e:f8:eb:17:cd:47:07:2d:92:62:a8:
41:31:82:48:0c:76:72:e8:fb:ea:44:e9:d1:ce:c6:b8:60:0d:
ba:9e:27:cd:f2:1f:f7:d9:5b:ce:de:c8:ea:08:5e:b2:55:c7:
cd:a6:12:0a:35:f2:ec:cf:00:a6:e7:17:73:be:a8:de:5d:ac:
52:21:ba:44:b0:07:e5:1f:bc:27:f6:d1:a7:20:d5:b9:90:55:
b5:93:26:70:39:eb:00:25:bf:96:40:38:66:ba:a9:25:aa:4f:
49:03:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:52 2026 by rpki-client