Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: /C6Fnph4JmhPakciXB0IUR/QV30rEtJrrUnx0bM3n4E=
Subject key identifier: 7F:8C:46:77:C0:76:AB:95:68:CB:1F:18:14:B9:6F:86:5E:F8:EF:30
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 019F9E4C1F9DE9ECF7BCC516DCFAF919F391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0EB6
Signing time: Sun 26 Jul 2026 12:00:16 +0000
Manifest this update: Sun 26 Jul 2026 12:00:16 +0000
Manifest next update: Mon 27 Jul 2026 12:00:16 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: cMjvubJvsqkPBjyZk2QNt/0raiKSex9hXS8gLCGJ2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:1f:9d:e9:ec:f7:bc:c5:16:dc:fa:f9:19:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Jul 26 12:00:16 2026 GMT
Not After : Jul 27 12:00:16 2026 GMT
Subject: CN=7f8c4677c076ab9568cb1f1814b96f865ef8ef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:eb:5f:de:c5:4d:95:9d:cd:66:95:80:60:
a7:a0:01:f7:69:bd:41:db:75:23:f5:31:78:33:06:
c9:0b:ca:aa:e5:7f:d9:e0:66:7d:00:76:09:f3:dd:
67:2c:27:16:66:07:94:4a:6e:3c:53:00:a6:b2:19:
52:5a:1b:d9:20:11:d2:eb:ef:e1:0f:e4:39:3c:ae:
7d:e7:d8:7f:7a:f0:97:5b:79:a1:e8:ef:d3:6d:d8:
73:63:59:ec:44:8c:76:fa:cf:86:d3:3a:be:98:64:
84:bd:03:d0:10:e5:66:36:04:9e:ee:68:41:83:6c:
ab:65:f3:04:93:00:03:98:5d:12:df:a4:8d:b9:17:
4a:19:d8:1a:af:ec:50:bd:b5:12:71:4b:f1:f1:7f:
d4:2c:5c:ea:fb:e9:87:2f:e3:5e:07:f6:a4:2f:f2:
66:fc:3f:09:d3:b2:20:9a:52:88:19:c5:71:b2:fc:
14:86:0d:71:7d:44:cd:0f:ea:70:26:e1:72:a1:91:
1f:55:a6:4d:ba:0b:a1:70:76:5f:9a:2d:09:19:d1:
23:e1:18:1b:aa:38:a8:16:3a:17:1a:e9:04:23:2f:
3a:21:9d:6f:44:fb:31:bb:4c:90:ae:ba:87:ed:a1:
71:38:14:4b:e9:21:17:15:58:49:a6:6f:d0:ad:61:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:46:77:C0:76:AB:95:68:CB:1F:18:14:B9:6F:86:5E:F8:EF:30
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f6:33:13:13:35:97:8e:c8:af:73:af:27:72:54:5b:44:9f:
af:08:57:3c:f6:61:7a:28:53:8f:b6:93:cf:19:d6:97:c3:43:
71:31:d2:02:01:13:16:83:64:b4:a5:0d:05:92:f9:39:a1:f1:
e9:1d:64:dd:e6:6f:ac:70:c1:11:9c:d2:ce:e5:53:35:70:83:
23:e3:41:da:09:41:5c:b9:bb:23:d4:54:a1:ed:38:23:bc:f7:
c7:b6:8b:ef:2b:76:bc:73:6a:8b:08:62:d7:83:dd:7b:5c:46:
99:00:b8:18:a2:6e:b0:49:20:90:2b:f3:b2:68:0a:93:2b:cc:
59:3a:a1:b0:07:01:e3:ae:83:5a:97:39:ac:3a:ce:1d:63:00:
c3:50:44:32:4b:a5:7a:e1:5c:d7:96:44:49:ae:0a:7c:b5:28:
3d:f9:2e:7d:29:48:ec:12:ac:92:8b:36:7f:bb:51:26:87:4d:
cd:c3:e7:36:83:95:cd:79:d5:3e:70:2b:98:af:18:ed:a6:04:
f5:44:e2:8c:f6:ca:d5:d5:97:ae:d7:cf:c1:58:88:4e:98:59:
21:80:06:49:f7:ff:c7:e6:e4:d8:f3:93:5e:32:21:7a:90:8f:
96:00:c9:e1:1c:d0:54:1c:83:39:4e:63:aa:fb:b6:23:37:86:
39:2d:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 19:59:25 2026 by rpki-client