Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: M8jg7gTesPj0fOOkcKE9fDaZpe2JSHn/I8/4myu0zUU=
Subject key identifier: 91:25:D7:C3:B0:98:67:6F:9D:D9:EB:EF:E0:CC:39:34:B9:49:6A:94
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 019D382DFCFACB7D07C287D34D1C26FEF7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0D78
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: llCKnR7KUc8ahmaGeYe4v+qKCHPh3ltHSZ+WissrQBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fc:fa:cb:7d:07:c2:87:d3:4d:1c:26:fe:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=9125d7c3b098676f9dd9ebefe0cc3934b9496a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:1e:30:ac:6b:1f:83:ad:fc:a7:72:05:26:
7d:86:1e:03:66:b2:69:f0:12:7b:89:fb:c1:32:a5:
c5:ea:da:2d:51:bd:e7:8b:70:65:28:0d:52:8d:e9:
38:41:d7:b9:4f:f6:a6:12:5c:19:00:4d:d3:49:72:
ef:46:ef:fe:d6:52:c7:29:d4:16:20:df:58:8e:7a:
cf:45:68:4b:14:9e:9d:32:3f:d0:73:d5:17:c0:98:
cd:96:e4:9b:8f:e5:18:d4:d3:1d:3e:05:74:6e:c3:
23:81:f8:cd:d2:15:1e:fc:4b:87:3d:b5:e7:e3:d9:
1b:0a:71:cb:0f:26:9e:66:f7:6f:6c:2a:0e:60:90:
1e:13:f0:fa:72:bc:48:00:75:e5:a5:b0:34:49:bb:
25:4d:00:7d:6a:bf:68:e2:7b:2f:51:0d:19:2f:36:
ab:d5:ad:41:9d:dd:a8:cb:2b:55:04:83:5d:b9:bb:
e4:b8:0b:6d:f7:c5:5c:de:48:80:5d:b2:f5:78:f7:
e4:f3:0c:b7:69:e4:a5:36:ff:22:be:99:e2:00:b6:
6a:1a:1b:46:cf:80:de:16:be:9a:74:84:02:2b:67:
cb:47:97:4c:5d:09:78:9f:12:c3:9f:1e:4f:9e:36:
e2:50:55:16:8e:f6:70:a0:46:c0:ee:af:a0:30:85:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:D7:C3:B0:98:67:6F:9D:D9:EB:EF:E0:CC:39:34:B9:49:6A:94
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:6d:20:6d:e3:24:a7:6b:5c:9d:5d:f6:ba:22:bb:f4:51:
36:dd:c7:b3:91:5e:1d:57:90:5d:33:9a:37:8f:43:56:e9:b1:
02:a4:be:f8:1d:f5:71:d6:a2:13:54:ac:8a:31:17:8f:d4:f6:
67:0c:20:dd:a1:08:a8:01:4b:bc:c7:69:3e:2e:b1:19:17:1c:
e2:dd:d8:ab:8d:ab:97:08:cf:7e:55:39:c5:a4:d0:a3:f7:40:
1b:3e:1a:62:a2:79:90:f4:d7:a0:be:1c:2d:14:73:bd:7c:dc:
69:26:25:7e:bd:09:7f:4d:14:08:41:32:ff:a6:8e:3b:18:5f:
c8:68:93:1b:d0:b4:65:e7:4c:c9:c9:1c:3d:83:77:b8:10:6f:
82:c4:f6:1a:51:49:9c:f5:ca:94:cb:da:9a:0b:52:70:67:06:
94:d6:1e:bb:ee:e9:49:93:e1:c2:f2:28:c7:bd:fa:14:04:97:
ad:79:f4:8a:dc:a7:a4:af:11:b7:73:e0:14:66:27:ef:17:b6:
be:ef:17:0a:39:ad:de:b6:f6:5a:a5:03:54:e1:4a:73:0f:f3:
fb:53:23:95:1b:70:e4:0b:21:f3:f4:81:d3:d4:cd:e3:56:fb:
c2:dc:ed:10:e2:f4:2f:90:1a:f2:44:14:3e:29:08:11:b5:e3:
e2:bf:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:43 2026 by rpki-client