Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: KY5qRi7BefXLD1GvgPmppS/ZIw9Z5mdFkD3lCxNzcig=
Subject key identifier: A7:C4:15:71:92:52:D1:55:77:8E:BF:79:5C:8D:92:FD:81:A5:AC:FC
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 01A188D22F08BA5137D5DF2F757CBB48F442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0FB4
Signing time: Thu 29 Oct 2026 18:00:38 +0000
Manifest this update: Thu 29 Oct 2026 18:00:38 +0000
Manifest next update: Fri 30 Oct 2026 18:00:38 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: c2+gGvDTUpscVkrn5zBBuPI+umu4eN2R3b35GJPog1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:d2:2f:08:ba:51:37:d5:df:2f:75:7c:bb:48:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Oct 29 18:00:38 2026 GMT
Not After : Oct 30 18:00:38 2026 GMT
Subject: CN=a7c415719252d155778ebf795c8d92fd81a5acfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:94:07:25:ac:18:e0:dc:b2:f4:5e:aa:34:
bb:d0:ae:35:e4:c3:fa:1f:ea:5c:07:25:26:b8:b4:
dc:14:79:31:e9:f2:13:81:ae:24:09:f8:b0:f9:96:
a3:af:97:d2:c7:ad:59:e6:1e:ea:8f:e0:90:b0:b1:
09:df:46:29:da:15:f3:c5:52:8e:63:a1:60:3d:f9:
dd:ea:f8:56:ca:c4:da:cb:b0:94:16:37:27:39:92:
8e:49:64:37:df:96:e4:5e:a1:16:ac:7f:ab:5f:07:
fd:bc:7b:6b:28:41:4f:b5:c8:d0:fb:a3:86:06:c0:
9e:d9:91:ca:7f:b3:cd:7b:ff:1c:77:03:2d:fc:3f:
de:e4:c3:86:17:11:2d:6d:f4:55:c4:91:03:e9:67:
2d:09:0a:43:cf:c0:56:3e:ab:fb:fa:82:e2:6f:c6:
cb:d5:22:fe:dc:42:c2:5a:eb:fb:92:ed:10:83:78:
b7:d2:af:84:3e:f9:c9:31:dc:f6:28:c1:b5:d8:59:
b1:92:e1:19:53:ec:24:c1:14:6f:4c:be:2a:cf:f2:
f2:38:13:9d:7d:84:30:5c:04:15:f6:23:3f:0c:7e:
3e:9d:40:c5:09:df:c1:5c:d9:ad:55:b9:60:6d:a3:
22:5f:1c:9d:da:7a:69:f6:2e:60:9f:09:6c:ad:0c:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:15:71:92:52:D1:55:77:8E:BF:79:5C:8D:92:FD:81:A5:AC:FC
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:93:b0:c1:57:eb:ae:6a:3b:52:20:8e:ba:f1:c4:57:01:15:
5b:78:c5:fc:0b:33:48:84:be:a9:3d:70:ea:66:03:57:77:d5:
94:40:8f:cf:52:81:1c:3c:48:04:cb:82:68:7c:a9:e3:62:fb:
1e:b1:7f:cd:cd:71:0b:e9:d0:b9:84:67:6e:e2:a5:20:70:b0:
24:56:75:71:e2:f2:dc:cb:56:f9:1f:be:1e:3e:e8:81:48:ff:
a4:d5:49:73:f1:b4:12:32:22:ba:2c:ca:12:84:3f:bf:39:36:
f4:a0:94:03:d6:90:e5:a0:e9:4c:43:ca:67:82:49:87:89:01:
10:28:8f:d8:84:b3:f5:a4:ba:68:9c:6e:bc:57:61:97:73:76:
1e:1f:b1:bc:db:d0:2e:32:8c:83:2b:26:3b:15:bd:48:b3:5f:
4b:9b:62:84:1a:e4:f4:f8:99:b0:de:81:8e:00:7e:ac:de:40:
3e:c0:33:41:c0:33:cc:fd:98:e8:e8:15:7b:aa:58:9f:97:8a:
2b:c5:c4:ec:80:fd:71:9a:39:57:9b:14:c8:5b:39:77:58:f7:
75:6c:9f:e0:da:b9:50:50:13:36:ab:57:e7:fd:0f:8c:28:4d:
b9:85:7b:bc:33:b8:b2:3b:7a:a5:9a:fd:87:82:0c:04:4e:eb:
92:47:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:32:58 2026 by rpki-client