Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json)
Hash identifier: gicWpxX7j5YfSZT/0UwbIqVYx8UPEv6b51fy+XutL+Y=
Subject key identifier: 8D:AA:CA:F3:38:94:BC:D9:83:3C:41:F7:57:99:C8:C9:C2:88:E5:E0
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 01A100239C73AA79E0A5BAC5D1757CCF2E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
Manifest number: 1A82
Signing time: Sat 03 Oct 2026 05:01:36 +0000
Manifest this update: Sat 03 Oct 2026 05:01:36 +0000
Manifest next update: Sun 04 Oct 2026 05:01:36 +0000
Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: TUuvjeCDB5oqtI5ZsN6dODkAHlRwPBy2wMAwyrykwb8=)
2: deef0kQTVkiZ-iP9kTGY1fZU_WA.asa (hash: qMJyhV5YvZg0IFpQ2HLYt65onYCb8vkHlaPqKePxLhw=)
3: fk98PFEV3mDBaZCuwYolMaoJs9Y.roa (hash: reF0fqPgy7vLy87CUH+mtBW2X+gVQB8QUdLo8VDTjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:9c:73:aa:79:e0:a5:ba:c5:d1:75:7c:cf:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Oct 3 05:01:36 2026 GMT
Not After : Oct 4 05:01:36 2026 GMT
Subject: CN=8daacaf33894bcd9833c41f75799c8c9c288e5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:00:d0:8a:b8:9e:d8:3d:93:72:21:6c:09:
a2:13:3f:b4:5e:b1:cd:a2:fb:b5:5f:09:20:61:33:
9e:24:c2:98:82:f0:3d:f8:4b:76:9c:39:55:fa:f0:
2b:5a:99:81:dd:e9:15:4a:b8:1c:96:7e:85:7e:9f:
2f:32:05:60:eb:a1:0e:36:85:d0:50:45:e9:f6:0a:
0c:a8:8b:fc:b0:61:66:2f:0b:14:27:02:21:d1:15:
e4:d6:3a:fc:8e:26:cf:2b:6b:ab:cd:f6:56:5f:35:
e2:8b:4e:8d:eb:13:8c:c4:30:7f:17:7d:69:82:16:
8a:a5:72:43:10:47:e1:d3:4b:43:de:81:bd:02:e3:
65:bc:5a:b2:18:ff:d0:b4:0b:72:46:1b:46:94:a6:
6a:d1:3a:33:21:08:20:06:db:cb:2a:15:ee:ba:99:
22:07:83:f9:15:5b:a8:be:f4:18:f9:7b:78:4f:9e:
08:a7:fd:5b:a2:4f:d7:60:9a:1b:23:17:e3:d5:7c:
55:b3:24:ad:98:48:0b:55:2f:f8:7b:87:a8:59:21:
2d:60:a9:81:15:82:35:23:59:79:64:40:37:48:dd:
f2:25:04:fd:e8:99:34:53:92:a4:92:12:83:a1:42:
94:5c:c9:58:b2:05:d2:00:db:da:92:ba:ad:31:59:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:CA:F3:38:94:BC:D9:83:3C:41:F7:57:99:C8:C9:C2:88:E5:E0
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:20:bf:72:14:79:6c:8a:b7:0b:31:8c:94:57:ea:f8:ad:61:
5f:da:c2:d7:19:f5:5b:48:74:0a:22:92:a9:b2:b6:a8:f6:a0:
79:34:63:fc:01:d8:6c:67:21:e0:90:d0:fe:d0:5d:f5:ed:dc:
36:4d:d7:8f:b2:ff:6d:95:7c:d0:ae:85:d8:b6:cb:54:af:35:
51:5a:5c:41:39:b8:bd:f9:01:ec:cd:55:ec:07:d4:d0:e8:1b:
d0:f5:c6:73:bd:ef:13:ca:4c:b6:cd:e9:a9:93:72:f6:87:68:
02:11:f7:37:b2:15:2f:c0:f8:8a:03:54:45:68:58:b4:de:8e:
5d:a1:b5:38:f5:a6:6f:c4:b6:e2:7a:dc:07:8e:e1:19:a0:e3:
8c:11:61:1c:83:c4:72:b4:22:77:33:2f:50:cd:4f:92:c9:58:
2c:b2:b3:e1:e3:6d:c0:33:d1:59:74:16:75:a7:58:cf:5f:6e:
22:d1:8c:9a:7c:8d:21:30:a1:27:fe:74:85:79:20:23:38:9f:
32:2a:e8:c8:19:45:e5:04:49:35:8c:be:45:b1:1b:5b:1f:ab:
ce:cf:3a:ed:a4:2c:03:67:5f:0a:cd:43:54:1f:d0:bf:d4:93:
e2:63:a1:ba:62:c3:41:8b:94:08:2c:17:22:21:90:4e:a1:8b:
6d:b3:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:07:19 2026 by rpki-client