Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: RL2OTIyv5K7d3+N+Vq8+ogw/4hxdTRJ+2LjYNXpx0PI=
Subject key identifier: AC:67:F6:8B:7D:71:36:FD:C0:FB:25:63:28:0C:D6:A0:F4:12:E2:E6
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 01A17401D3410F0F74C23E0C6E11BE71BF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 0A38
Signing time: Sun 25 Oct 2026 17:00:38 +0000
Manifest this update: Sun 25 Oct 2026 17:00:38 +0000
Manifest next update: Mon 26 Oct 2026 17:00:38 +0000
Files and hashes: 1: aVRqpMHpdie8kn2Zv8LidnFaG0U.roa (hash: WAT/5tpdgHMh60hpQbSEIRGs2arCro1xYD6u1qjuT7I=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: d+Fo+/tqER//TK/aNVa/VulO86KZjbS3C4VuaG6jOL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:01:d3:41:0f:0f:74:c2:3e:0c:6e:11:be:71:bf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Oct 25 17:00:38 2026 GMT
Not After : Oct 26 17:00:38 2026 GMT
Subject: CN=ac67f68b7d7136fdc0fb2563280cd6a0f412e2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:4f:db:6b:9b:79:c6:82:0d:bd:cd:64:8b:
57:72:6e:90:1f:3c:62:3a:68:c9:6b:dd:be:ed:94:
f0:2c:8c:96:d4:0d:4f:6a:f6:99:d8:9d:16:47:f5:
1f:be:ec:3e:e4:a7:58:aa:14:c4:cd:b9:38:61:52:
ce:a7:98:d3:c0:da:b0:d2:ac:5a:aa:31:fd:da:87:
74:8d:fb:cc:79:9d:e6:d0:3e:af:2b:81:89:56:6d:
f2:fe:50:9f:a2:4d:83:80:8a:29:68:62:b1:27:de:
4a:d5:b7:fe:d4:96:42:db:f8:63:c4:14:26:a8:49:
64:2a:fd:ce:c7:90:cc:54:5f:f4:e9:51:ca:04:2b:
f1:ae:8e:61:12:e6:88:5a:88:29:2d:17:e8:d1:a3:
69:d8:05:2b:74:18:c3:21:b2:2b:47:f2:0c:5b:d1:
34:ec:d7:29:41:4b:cc:aa:e3:61:37:ed:24:fe:0e:
3e:bf:e8:3c:ca:77:aa:ec:c5:4c:bb:ab:65:41:35:
ce:13:96:e9:19:e8:f9:23:38:ae:aa:71:7e:e6:09:
4d:58:2f:42:4e:66:99:d7:34:5c:32:70:a5:6c:54:
1e:fa:7e:77:6d:e9:ca:ac:aa:3d:58:ff:f4:c8:68:
fe:92:03:e8:cb:46:90:1c:49:2a:f1:7d:dd:a4:28:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:F6:8B:7D:71:36:FD:C0:FB:25:63:28:0C:D6:A0:F4:12:E2:E6
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:13:9f:fd:f1:fa:9b:21:da:d1:df:a0:93:a9:bd:6c:cd:d9:
39:36:2f:59:8c:6d:88:14:b8:46:9b:52:62:20:7e:ff:66:57:
94:4a:b4:17:77:c0:85:21:67:e1:fa:16:cb:72:1a:3a:c1:de:
ee:75:18:f0:ff:7a:ea:b3:c4:7d:16:ff:2a:21:69:83:66:9a:
65:1e:33:51:4c:4f:18:e5:13:b9:03:60:dd:56:f0:af:58:6d:
d0:b9:37:22:04:d1:c1:d3:19:00:66:f6:4b:12:1a:d8:f8:85:
fc:19:f2:54:1d:72:9c:ad:2c:74:01:b5:84:89:12:02:13:11:
31:79:90:37:05:06:25:0d:3e:e5:f3:73:38:50:96:28:b0:61:
27:7c:f3:81:ea:de:3e:75:7f:2b:cd:d1:29:74:92:5c:95:96:
38:39:13:98:a2:a4:72:a4:81:4f:f5:0d:29:b7:6b:c8:bb:cf:
b7:2b:21:e0:8c:9e:fd:44:a1:a6:30:eb:c4:e9:72:ad:0e:5f:
42:be:b4:e6:cd:59:aa:54:3b:b2:49:8a:33:e6:45:dd:d8:a0:
84:ce:c2:4c:86:cc:42:c4:77:fe:06:d1:a8:f1:26:db:cf:8e:
7d:91:54:1a:ff:9b:9b:ee:da:b6:9d:1f:24:ca:25:cc:96:8b:
0f:47:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:08 2026 by rpki-client