Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: UrTQUqoAMZgeys9u0wOZDTGv/rPz5spr17SxQpS0KwU=
Subject key identifier: 60:89:E5:1B:EE:72:E9:20:94:A7:4A:1D:CA:B5:70:8A:B1:32:C0:35
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 01A090205BD61BEC9BCFBF86CD2A615EBA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 0248
Signing time: Fri 11 Sep 2026 11:00:34 +0000
Manifest this update: Fri 11 Sep 2026 11:00:34 +0000
Manifest next update: Sat 12 Sep 2026 11:00:34 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: 1MV5vIdHZnl41LcpoqW30zvYXPJPWPQEhsqqTj8i/ow=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:5b:d6:1b:ec:9b:cf:bf:86:cd:2a:61:5e:ba:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Sep 11 11:00:34 2026 GMT
Not After : Sep 12 11:00:34 2026 GMT
Subject: CN=6089e51bee72e92094a74a1dcab5708ab132c035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:13:33:a6:32:2c:4d:06:54:a3:fe:fc:d8:
0b:1a:28:9c:0e:88:e2:4b:f9:33:68:87:48:81:6f:
dc:1e:00:cd:51:90:82:2f:08:2a:39:ff:36:8f:f9:
29:63:ca:3b:22:54:26:78:1f:b0:12:39:d6:f7:87:
3c:16:ea:53:e1:f3:d2:a1:fc:04:f9:b2:86:65:7d:
42:db:7a:5a:04:27:da:a4:25:d0:07:b6:8b:e0:c2:
06:33:93:c6:86:8f:9c:e8:57:ed:9f:4d:65:7a:10:
fd:5d:bc:30:e7:24:df:7d:f9:31:7c:dc:6d:20:49:
05:ea:07:95:98:60:4d:bb:90:a1:bd:77:64:96:24:
4b:3c:39:4d:8d:42:3e:2f:7e:37:44:30:5a:b7:bb:
67:13:e9:43:52:0f:77:ec:ce:ef:b1:f0:05:bd:b4:
66:85:80:e1:7c:63:a8:af:dc:63:72:f2:f5:3e:e7:
51:9b:6c:20:f9:d8:58:11:a1:39:f7:48:3c:83:e8:
65:b6:32:5a:5c:57:1d:9f:8c:16:7c:cf:7b:fa:cc:
a1:ab:41:19:92:20:ea:cc:c6:a6:76:d5:1c:7c:1c:
b9:bc:91:d7:42:66:9e:1b:fe:61:f6:c3:fe:fc:12:
d1:e3:01:5c:31:14:f6:a4:b5:79:43:17:07:dd:c2:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:89:E5:1B:EE:72:E9:20:94:A7:4A:1D:CA:B5:70:8A:B1:32:C0:35
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:36:d2:e1:52:a1:9b:d5:03:e8:8e:67:98:d6:45:43:19:03:
88:48:5f:f9:33:52:25:5c:4e:71:0f:93:c9:d0:42:b0:a7:eb:
6e:b0:1b:87:6c:7a:d3:ac:ca:c2:49:cf:2f:48:66:58:87:86:
42:06:a9:8d:1a:fc:0d:1d:e7:c8:f3:5e:ed:02:4d:f1:80:f0:
b8:93:3b:27:05:58:6e:89:2b:13:4d:0e:32:aa:ba:10:ba:a0:
b0:6e:11:61:70:1f:8a:52:df:24:a8:de:63:d3:c2:cf:60:35:
c9:37:b5:93:1e:c8:cd:cc:fc:d0:bd:0d:e0:cf:ac:23:16:a2:
5e:f1:14:9d:71:92:13:69:99:31:0f:50:17:80:d8:83:f1:7b:
0e:c5:c6:97:e4:28:e0:53:84:46:6b:62:f2:ba:ab:63:0a:96:
8d:09:ba:ef:34:8f:6d:59:b4:c2:36:be:2f:3c:d7:bf:b7:6c:
b0:e8:1c:1c:76:99:e7:fb:75:74:9c:77:81:9e:97:91:1e:de:
99:0f:4c:85:fb:f6:88:e1:1d:18:71:19:71:b1:a2:b6:f2:68:
78:a9:1e:a5:d0:df:c7:f0:d7:d9:23:f1:25:3b:3e:1b:d2:ff:
21:f5:0d:8a:ef:b0:15:bd:a3:e0:02:63:e0:71:2f:e7:d4:8c:
2c:1d:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:15:57 2026 by rpki-client