Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: JFwwo14jGw/d2J/9zpRr/CsQGRe3UYCxM3WD1zwW7yM=
Subject key identifier: A1:CA:79:FF:DA:B5:EE:26:24:97:76:95:66:58:FA:4B:A2:EE:69:98
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 01A1894029960CFD60A30589573513EFFC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 02C9
Signing time: Thu 29 Oct 2026 20:00:45 +0000
Manifest this update: Thu 29 Oct 2026 20:00:45 +0000
Manifest next update: Fri 30 Oct 2026 20:00:45 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: 4HRqAUm37wJEuJb7jWjNow5hvsdZ8yp5nYpKn0B2FiE=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:40:29:96:0c:fd:60:a3:05:89:57:35:13:ef:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Oct 29 20:00:45 2026 GMT
Not After : Oct 30 20:00:45 2026 GMT
Subject: CN=a1ca79ffdab5ee26249776956658fa4ba2ee6998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:37:16:d1:bb:60:f4:93:2d:ad:8f:e2:c4:
48:f9:48:e4:c9:48:07:22:e4:4c:bc:8c:50:15:d9:
12:32:ac:4e:2f:f8:19:51:bb:c3:01:0e:27:af:2c:
a5:fe:c4:5a:9d:78:2f:3a:df:34:58:6c:41:b7:35:
4b:8e:bc:6a:a9:c7:6e:cd:0e:b2:6e:b5:7f:10:b4:
ac:4a:77:a9:dd:9c:a1:ef:02:af:d1:3b:d9:74:88:
16:e4:f2:68:30:99:49:27:48:da:fd:1f:2b:0a:76:
b6:5b:55:09:60:b5:98:34:d9:fc:9a:6b:f7:f5:44:
00:14:4f:95:95:33:13:99:9e:5d:34:9c:da:89:3f:
41:d6:c8:44:eb:d4:ec:ee:e8:d8:34:8e:3e:99:2b:
2b:46:4d:6e:37:dc:5a:a6:15:17:08:bb:27:e4:aa:
a8:de:d8:d5:85:35:e1:63:a1:2c:31:00:c6:51:1f:
e2:ef:bf:53:8d:6b:1c:0a:1b:65:5c:cb:dc:eb:94:
cf:e7:d3:e4:5b:bb:b2:5f:f5:e6:d5:68:47:c3:5a:
8a:8a:9d:32:4f:47:1a:05:de:fd:4d:85:25:74:c6:
b6:68:59:8e:b0:0b:80:ae:1d:fc:7e:ad:b6:90:97:
f6:94:d9:07:a3:62:f1:82:01:66:22:f5:3f:d8:21:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:79:FF:DA:B5:EE:26:24:97:76:95:66:58:FA:4B:A2:EE:69:98
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:21:67:07:c6:85:fc:39:6b:f1:b8:f5:91:3c:c9:98:6e:28:
bf:bc:97:ee:47:6a:1a:37:fe:63:2f:8a:c9:9f:7a:e8:64:c4:
54:33:e6:1d:fb:d4:17:4c:1b:63:59:4d:a1:0a:71:1d:15:aa:
a2:0f:9a:79:49:cd:c0:a5:6e:c5:a2:ca:22:f9:66:2a:d8:33:
70:91:e1:42:d0:0b:a6:4a:8e:fd:48:4d:e1:3d:45:9e:02:af:
f5:f5:40:20:82:79:b1:e7:ec:d9:05:1b:da:2a:36:ab:61:88:
30:f4:3f:cf:ec:8a:b7:c2:e9:87:cb:07:96:54:49:17:56:5c:
eb:72:d7:b3:bf:d0:5b:d1:fd:6f:f1:cc:38:b4:a3:c7:4a:59:
36:9d:3e:b3:fe:8f:84:ee:40:8f:45:c1:d5:df:67:e4:3d:02:
3d:d2:6b:a0:76:e0:6e:57:22:f6:f6:a6:8c:f0:0b:89:6d:df:
6c:2f:e4:1a:f2:a3:66:74:99:9e:ff:f7:99:e7:a6:e0:f8:41:
b9:66:7b:00:88:3c:e1:20:d8:68:11:f5:81:c5:11:0c:67:de:
94:e1:ff:f2:8b:46:06:89:ef:90:bc:d2:89:c3:b1:8b:09:4e:
bb:ef:e0:6d:94:51:fb:cf:17:61:35:9b:59:5f:e3:d2:30:5f:
d3:71:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:01:25 2026 by rpki-client