Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: crUhDKV+FMrWK/huENT/eWNtVPvddRS6TfHQ3EiwO+c=
Subject key identifier: 6F:12:54:A9:62:0E:35:88:93:EE:99:80:59:7D:C3:C0:4F:72:4A:85
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 01A08FB265DAA4303FB0CC1206641139F6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0F33
Signing time: Fri 11 Sep 2026 09:00:28 +0000
Manifest this update: Fri 11 Sep 2026 09:00:28 +0000
Manifest next update: Sat 12 Sep 2026 09:00:28 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: DaT+BlkMJ1VrTRc86m4nX52JC+N1rBgtCMLucplJo4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:b2:65:da:a4:30:3f:b0:cc:12:06:64:11:39:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Sep 11 09:00:28 2026 GMT
Not After : Sep 12 09:00:28 2026 GMT
Subject: CN=6f1254a9620e358893ee9980597dc3c04f724a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:a4:29:df:65:e7:4e:a4:84:e5:19:10:b3:
14:38:bb:28:a7:70:ed:8d:7c:cd:16:d4:d2:72:6f:
09:f2:fd:49:a6:90:7c:cb:b5:35:b4:49:45:0e:48:
38:12:b5:6c:21:a7:82:a9:f2:6a:45:60:47:56:91:
f3:54:ad:70:8f:00:92:09:a0:14:bd:b4:77:69:3c:
1c:d7:8e:46:ab:5b:52:d1:58:28:04:53:ad:b5:e3:
a8:45:a5:ad:32:47:59:ed:24:c4:65:45:95:c5:92:
b0:d7:e5:a0:21:13:47:ab:83:20:87:8b:ab:a5:02:
56:98:0c:3d:3f:84:a8:3b:a1:eb:12:5d:f3:ec:ff:
2a:47:0d:20:60:42:9c:52:bc:8f:69:fa:c8:22:ff:
03:24:c6:18:58:7f:e5:f6:dc:8c:55:6c:64:59:98:
a5:4b:26:a0:3e:66:26:11:5d:bf:40:e7:70:23:22:
b8:a6:c9:9e:f9:8e:0b:e4:de:28:4b:5f:59:fa:02:
dc:50:f2:61:1a:1e:d1:4d:47:33:8e:cb:59:f0:ed:
9a:5f:46:5c:e0:d0:d5:c5:41:62:5b:70:91:0c:20:
e0:8b:ff:ca:6d:ac:9e:14:c3:b1:31:6f:71:19:07:
07:66:5f:9c:af:7a:d6:61:2f:ef:12:ef:68:dd:1c:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:54:A9:62:0E:35:88:93:EE:99:80:59:7D:C3:C0:4F:72:4A:85
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4f:5f:b0:30:31:90:95:f2:30:66:25:53:f0:0c:53:ee:72:
34:db:62:1c:b9:52:8f:fc:6d:22:af:10:a2:d6:38:58:70:57:
83:9f:ff:b0:eb:97:74:71:b2:95:00:eb:36:f1:d4:9f:d0:1f:
b7:91:d1:5f:55:4a:89:00:14:2d:38:fb:16:34:59:1a:93:a3:
18:1c:67:aa:7d:37:ef:f7:6b:7a:56:9d:b4:03:9a:f4:21:5b:
43:da:ad:76:91:18:1c:d9:d7:9c:6a:fe:6f:e5:6c:a3:74:ca:
d0:50:8f:93:cb:7d:64:ca:cc:7d:a9:1c:da:9c:40:8b:c3:39:
77:21:04:2f:7b:d0:06:d7:d1:c4:75:1a:ed:38:72:6b:c1:76:
47:53:4d:20:12:fb:93:63:6b:bc:87:f3:ef:45:0a:d0:10:15:
04:b1:2f:0b:be:b1:79:03:2b:c3:e5:70:88:5e:21:59:6a:aa:
6d:f4:b3:23:b6:f3:b0:84:aa:d5:3d:a3:56:be:08:37:a7:a9:
6b:84:d3:81:14:55:ce:4c:4d:38:30:74:b4:00:0a:6c:f8:87:
de:03:7f:ea:24:c3:c6:07:11:d9:ae:41:cd:59:ff:be:6b:ad:
02:c7:f6:68:c5:72:31:12:ac:ca:69:aa:ea:b0:e9:3c:f4:8c:
5c:de:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:42:37 2026 by rpki-client