Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: yL3rU7nGTV9u5eyVXXDEBDEX4cL/CRKEOOmn7IEnGVg=
Subject key identifier: 57:D2:D8:34:11:11:DE:89:64:82:1C:45:63:EF:8B:60:36:FC:EF:71
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 019D389BC623EF8DEF2458BFF8D739E9E710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 8D
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: oR+nh9pcptujWVoJW+Be9DjnH5xx1eHXKdaA1rCliEg=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c6:23:ef:8d:ef:24:58:bf:f8:d7:39:e9:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=57d2d8341111de8964821c4563ef8b6036fcef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:4e:39:52:96:20:a0:90:e9:da:1f:da:53:
ae:bc:47:2d:3b:8a:63:cd:9f:2c:a5:c6:86:94:d6:
97:0e:8b:f1:7b:22:e0:b7:01:f8:4c:8b:ee:5c:4e:
60:12:fd:91:38:9b:6e:eb:ee:0d:e5:13:be:a6:51:
06:08:50:f6:0e:d1:3d:c3:a0:45:91:d1:ab:e3:fa:
e7:0f:eb:83:02:91:99:b9:08:d5:ba:9f:99:f8:52:
24:08:23:02:86:11:73:c0:7b:f2:60:8e:d2:b6:53:
ad:fa:e4:be:77:92:08:08:5d:2b:0d:30:d1:55:8f:
33:34:d0:38:ce:3f:f7:82:3c:95:4b:1a:2d:b1:bc:
bd:8a:2b:58:95:a4:ea:b0:e7:c9:e7:f8:1e:83:9c:
11:ce:f5:75:18:8a:b0:3b:7f:90:6d:fd:01:83:b5:
35:7e:b5:09:cb:ad:6b:3d:08:09:8c:b3:65:df:67:
77:98:ee:d5:ec:96:10:69:31:b6:18:95:84:57:2f:
7c:8a:04:22:19:37:5b:6a:4d:6f:28:d8:8e:0b:77:
cf:1f:57:69:17:7a:d2:25:05:61:49:29:bb:5c:1f:
1c:6a:4e:f4:5f:c1:ce:d3:33:ab:08:3f:e1:a7:76:
f6:01:07:76:e3:ff:1b:0c:1c:4b:2d:e6:23:60:f4:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D2:D8:34:11:11:DE:89:64:82:1C:45:63:EF:8B:60:36:FC:EF:71
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:85:c7:7c:21:ca:64:1f:a3:a1:e6:4b:b3:fe:15:10:af:
6a:51:02:ff:7e:f4:46:63:43:22:fd:da:19:c3:e2:bb:21:0b:
86:4e:be:b9:c3:04:c2:d6:57:2d:31:5f:15:b7:4c:87:92:4d:
9f:93:b0:e4:cf:d1:a5:0e:84:ac:78:78:53:28:c1:28:47:7f:
ee:33:cc:d8:ee:02:87:85:ab:c6:4c:4e:45:ea:10:6c:17:b7:
9e:c5:a2:34:7e:ad:28:ca:7e:ad:59:96:35:5c:34:48:76:e1:
bd:76:83:08:6c:0b:96:89:f0:25:cf:7a:07:02:d5:1f:1a:77:
a2:fd:73:d7:38:af:81:d4:f5:d1:24:60:a4:ed:f8:a1:0b:55:
1d:08:38:58:0a:ed:89:1c:92:9d:78:35:78:e5:4e:e1:92:9d:
90:dd:ba:2c:cf:05:93:c5:6f:c1:47:f0:a3:0f:fd:17:30:6c:
08:ef:f0:44:ce:d5:d3:3f:19:88:41:26:9f:bf:ed:b9:b6:7c:
97:cf:ba:4f:05:5c:2f:2b:b9:ea:38:3f:0e:b5:68:ca:d6:b8:
fe:23:b2:07:09:23:ef:17:72:bb:04:2e:f2:d1:3a:c1:48:b2:
79:b2:e1:3d:df:d1:8a:54:9d:5b:cf:11:9a:21:75:37:ae:85:
af:b6:0a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m8Yj743vJFi/+Nc56ecQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZGQ4YTE3ZmM2NzI4NzFiOWYyMDM5NWFkZWRiODVkMDM1
ZWFhNDMwHhcNMjYwMzI5MDgwMDI1WhcNMjYwMzMwMDgwMDI1WjAzMTEwLwYDVQQD
Eyg1N2QyZDgzNDExMTFkZTg5NjQ4MjFjNDU2M2VmOGI2MDM2ZmNlZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx99OOVKWIKCQ6dof2lOuvEctO4pj
zZ8spcaGlNaXDovxeyLgtwH4TIvuXE5gEv2ROJtu6+4N5RO+plEGCFD2DtE9w6BF
kdGr4/rnD+uDApGZuQjVup+Z+FIkCCMChhFzwHvyYI7StlOt+uS+d5IICF0rDTDR
VY8zNNA4zj/3gjyVSxotsby9iitYlaTqsOfJ5/geg5wRzvV1GIqwO3+Qbf0Bg7U1
frUJy61rPQgJjLNl32d3mO7V7JYQaTG2GJWEVy98igQiGTdbak1vKNiOC3fPH1dp
F3rSJQVhSSm7XB8cak70X8HO0zOrCD/hp3b2AQd24/8bDBxLLeYjYPRkOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfS2DQREd6JZIIcRWPvi2A2/O9xMB8GA1UdIwQY
MBaAFDLdihf8ZyhxufIDla3tuF0DXqpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMt
YzE3ODc0OTllZjMzLzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMtYzE3ODc0OTllZjMz
LzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOWFx3wh
ymQfo6HmS7P+FRCvalEC/370RmNDIv3aGcPiuyELhk6+ucMEwtZXLTFfFbdMh5JN
n5Ow5M/RpQ6ErHh4UyjBKEd/7jPM2O4Ch4WrxkxOReoQbBe3nsWiNH6tKMp+rVmW
NVw0SHbhvXaDCGwLlonwJc96BwLVHxp3ov1z1zivgdT10SRgpO34oQtVHQg4WArt
iRySnXg1eOVO4ZKdkN26LM8Fk8VvwUfwow/9FzBsCO/wRM7V0z8ZiEEmn7/tubZ8
l8+6TwVcLyu56jg/DrVoyta4/iOyBwkj7xdyuwQu8tE6wUiyebLhPd/RilSdW88R
miF1N66Fr7YK4A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client