Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: gRW6ZMgHDaeIMVETWMgMFKLN6wVKBw2Uz3yBqqAhivU=
Subject key identifier: E8:2F:5E:99:77:9F:9E:40:C8:25:94:EF:BE:49:48:A3:7F:BF:DA:9A
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 019E314DEF0DAC5E379620D540E89FFCBA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0DF9
Signing time: Sat 16 May 2026 15:00:51 +0000
Manifest this update: Sat 16 May 2026 15:00:51 +0000
Manifest next update: Sun 17 May 2026 15:00:51 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: HXrDlKYRezBOsYGahhtAW/I/qBPOdtqqI1jBv8xPXfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:ef:0d:ac:5e:37:96:20:d5:40:e8:9f:fc:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: May 16 15:00:51 2026 GMT
Not After : May 17 15:00:51 2026 GMT
Subject: CN=e82f5e99779f9e40c82594efbe4948a37fbfda9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2e:a4:54:72:23:e4:45:8a:19:48:63:c4:f5:
a0:28:5e:78:14:76:29:fb:32:08:05:95:c5:0a:f0:
d0:52:18:c0:78:74:6c:38:7a:bf:a4:ff:91:fd:16:
42:61:43:3c:55:0f:7b:d1:4e:fd:8b:2e:37:d3:a7:
b7:24:a8:91:3d:74:03:d6:ef:2b:5a:df:8d:67:8a:
4e:ea:53:bf:bf:4b:02:92:70:e5:7f:ef:e5:3b:d0:
d1:71:79:13:61:b9:76:76:75:ca:e5:66:79:9f:2b:
c7:55:92:cd:f9:50:0d:c2:ba:4e:7a:37:aa:e1:44:
92:3e:da:79:94:44:fb:fc:2e:a7:c3:7e:f2:4a:b2:
49:79:c7:45:03:44:1f:6b:00:48:1d:13:17:44:aa:
46:db:92:c9:48:88:1f:72:30:bb:f0:25:5b:04:b6:
b9:7e:43:50:05:59:47:03:d8:5e:02:ce:fa:36:b4:
49:3a:39:82:bb:7e:6e:7f:61:04:45:82:ad:11:3d:
77:f2:78:22:9e:e6:f9:d2:a1:19:c7:f1:f9:f3:46:
9a:0b:0b:13:3b:b6:02:97:1d:9e:93:1b:3b:c7:0f:
ed:81:ab:e6:d6:4a:0b:cb:01:bc:87:49:7e:69:9b:
f6:c0:7a:c5:28:1d:15:a2:38:50:3e:11:2a:54:b4:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2F:5E:99:77:9F:9E:40:C8:25:94:EF:BE:49:48:A3:7F:BF:DA:9A
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f4:6e:63:33:d6:d8:f9:59:7d:ef:b3:e2:64:df:c2:c1:94:
bc:31:18:9c:b4:1c:fd:87:79:db:92:2b:c3:58:59:19:c7:be:
35:91:7a:d4:47:ad:83:ad:16:9b:a8:61:32:be:a8:89:3d:ea:
8d:ed:37:41:0c:b9:f1:03:3b:c1:ce:1b:25:6e:84:af:21:c0:
9b:b2:93:c0:54:69:3d:19:93:85:f7:c2:31:64:a4:83:7d:a8:
34:e0:df:b9:0f:cb:97:10:c6:46:0e:94:f7:66:4e:27:d8:82:
95:a1:e7:5a:fd:ee:6c:2b:4d:40:0b:e5:96:5e:2e:fc:ab:9e:
1e:43:2d:52:99:d0:34:9e:88:53:a4:21:04:55:c7:8a:ac:f9:
4f:05:48:42:97:88:c5:f5:ad:2b:67:cd:07:c3:9a:f3:1f:52:
f6:88:24:b1:cf:10:43:bb:37:6d:0e:27:8c:cf:25:e4:44:f4:
d6:9f:75:37:f9:b2:09:fe:ed:8d:d6:2c:9d:fe:d8:22:e6:52:
a2:c7:cb:71:6c:10:48:07:2a:70:0a:76:92:78:aa:46:e2:34:
9b:95:97:8e:ac:b8:92:bc:34:d5:33:1f:9c:5b:05:ac:c7:a0:
25:67:40:64:75:13:c3:6e:6b:0c:42:6f:6f:f7:f7:53:ad:2b:
c0:4b:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:14:29 2026 by rpki-client