Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: e6z1jt/cs6x0SGyuovPtuZDlaNyjn6gAw6ZJkR4zTT0=
Subject key identifier: 01:87:81:05:E9:80:43:00:73:6C:21:D1:D6:BD:5C:DD:E3:58:2E:97
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019F81C2610F005735BB3B9FACD8073ABB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 19DB
Signing time: Mon 20 Jul 2026 23:00:27 +0000
Manifest this update: Mon 20 Jul 2026 23:00:27 +0000
Manifest next update: Tue 21 Jul 2026 23:00:27 +0000
Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
3: J8xAVkqYLMb47ptuZk5Ix4lfjWU.roa (hash: pHPtPx9vsv712QiSLZLL9G31WWmDzgqCzXERnuz9zRg=)
4: KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa (hash: AtauxquVGMfNWT+OwoqixJIcGDXl6Ybqcwqx4c3ybJQ=)
5: Lm1nnFYkUsiu098gCvYjKS5-l4g.roa (hash: 1RaZfLGyq0c5ZD0BFswNZ5s2IFMTrcMOt76tyg+sqUg=)
6: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: ElI6mDaJRgvMeeHre677zqWYDNflzRPGB6MmNgdpUgU=)
7: NX6QjZN-pwUZGrxeBh6ZeWXUtZM.roa (hash: YPxNBQxqKzSRH7VqT/pnoJq/j2DPg0mDeSU7F/W/bvs=)
8: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:c2:61:0f:00:57:35:bb:3b:9f:ac:d8:07:3a:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jul 20 23:00:27 2026 GMT
Not After : Jul 21 23:00:27 2026 GMT
Subject: CN=01878105e9804300736c21d1d6bd5cdde3582e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:f7:0a:50:12:1b:12:9c:e5:3e:72:98:d8:
1e:f2:9a:25:58:5a:cc:fe:d4:2d:9a:af:ff:fb:83:
88:ec:f3:f8:90:10:dd:a0:30:30:dd:92:f1:f1:44:
8c:d2:94:cd:0d:b8:c0:ac:d1:df:ae:02:48:c4:41:
f3:ff:8b:80:5c:24:aa:19:49:9b:9c:f8:c7:9d:45:
3d:2d:fb:bc:d9:f4:32:51:11:02:5d:9e:d8:79:b4:
03:34:3b:f5:92:d5:a1:6c:12:a9:ba:66:e7:70:81:
57:6a:59:19:b3:42:d3:99:a6:33:76:d6:2c:2c:b5:
ec:97:a9:1a:7b:b9:f5:99:88:1f:26:23:82:b9:b1:
bf:08:8d:4e:a1:72:e6:a0:68:7c:d7:9b:f7:d1:04:
8f:9b:70:69:84:fc:58:35:ab:22:f6:02:24:9f:96:
fb:5b:0c:42:38:e2:e6:94:48:6a:39:22:b9:72:9e:
78:d4:7f:de:8c:93:19:22:8a:0b:f0:28:46:0b:13:
cb:51:5f:0b:a0:d5:e8:a4:a9:d3:b6:43:73:98:b8:
2f:d5:70:a4:52:05:44:3a:ec:cd:cc:d6:b7:4a:db:
6e:36:a8:82:84:1f:0e:8f:2a:1c:de:1f:31:1f:17:
df:30:a7:b9:ba:32:5a:c3:54:d0:be:1f:f3:c2:97:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:81:05:E9:80:43:00:73:6C:21:D1:D6:BD:5C:DD:E3:58:2E:97
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:e3:c8:39:66:e1:bd:a5:dc:c4:ba:b9:fb:37:2c:84:de:
95:e6:bf:e9:8b:5e:26:a5:8c:0b:21:6f:38:4f:ec:57:cf:3c:
fb:f1:37:11:54:fa:56:13:f1:d9:75:e9:87:48:2b:9c:16:1c:
fb:b9:1b:03:82:e9:06:c5:1e:44:ad:a8:0d:bd:3a:b8:4e:be:
fd:67:ac:bf:ed:61:d6:0b:7d:2a:a1:52:bd:c0:67:02:d0:08:
f8:a9:b3:67:fe:dc:7e:c5:d2:7b:b8:a4:96:0c:19:1e:75:ef:
35:10:23:b3:c6:4e:3b:8e:2a:3d:19:f5:72:5a:17:ee:f5:be:
c7:5c:5d:cb:cd:26:3b:8a:11:4e:53:29:0a:ad:b2:d8:a8:42:
95:8b:ca:5d:aa:7d:ca:01:24:d5:60:c1:43:02:26:da:55:fb:
a3:08:a4:89:68:31:fa:3d:94:bb:b9:c4:dd:6d:97:a8:85:59:
17:87:e5:19:23:81:0a:03:d0:44:a7:5a:69:ec:cf:0d:03:d5:
24:c0:eb:6e:c4:c5:54:ca:c3:30:cc:db:51:55:67:50:94:c9:
2a:4c:a7:b1:9b:2a:e7:78:6f:4c:dc:6e:d6:b6:ab:51:fe:3a:
42:6d:19:18:ab:5d:5c:84:89:ea:32:99:77:c6:1a:5a:92:a5:
50:8b:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:01:06 2026 by rpki-client