Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: FDz8glWUu1aqISiD9J9KSSmtsmj8AdWL1VeBxVp2eCY=
Subject key identifier: E8:68:6B:F3:56:25:31:16:6D:DA:7C:13:17:92:E8:DF:00:93:C4:D2
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 01A1046E5246158D5E2FD6B668791D4EDBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 0227
Signing time: Sun 04 Oct 2026 01:01:41 +0000
Manifest this update: Sun 04 Oct 2026 01:01:41 +0000
Manifest next update: Mon 05 Oct 2026 01:01:41 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: 8UztAoc6VGvzjsF9ia+mQIGEZTvNAL4MbE1GCXpbn/8=)
2: qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa (hash: JWJWQndeDRgVNRYgTaVF4Zb3Aiwbr3beQwuqCBRvJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:52:46:15:8d:5e:2f:d6:b6:68:79:1d:4e:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Oct 4 01:01:41 2026 GMT
Not After : Oct 5 01:01:41 2026 GMT
Subject: CN=e8686bf3562531166dda7c131792e8df0093c4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:a7:d5:05:78:d5:e8:b3:0c:66:fb:9a:96:
54:87:3f:98:7c:a0:4f:1c:55:50:7f:16:d1:3d:82:
97:9e:6c:18:8e:98:a9:ed:82:a2:fe:71:97:c1:a8:
d3:6a:43:7b:4d:19:bc:22:b3:f6:cc:7c:c4:fb:3d:
63:c3:35:62:bc:b7:1f:d6:9b:4e:6c:d4:f2:2e:84:
e6:c6:95:22:00:31:f8:7f:5e:c1:d8:e0:6e:1a:8c:
e3:37:12:55:41:be:ee:cd:d0:b8:62:8b:e4:ba:b5:
72:12:d6:2c:49:2a:3d:78:88:77:42:0b:79:e1:67:
6a:76:be:43:dd:ee:cf:7f:ee:80:50:50:02:b0:2b:
ba:3c:3c:b7:97:42:30:ab:47:28:9c:9c:0a:b5:5b:
7e:94:23:da:78:7e:a3:0c:2a:8a:42:e6:77:a0:66:
33:99:2a:f7:1c:33:78:42:12:c1:53:c6:ce:b5:19:
80:c9:7c:f6:d3:5d:1e:61:6c:63:6d:39:0d:ff:45:
fb:d4:d1:36:9c:27:be:63:0b:57:c8:0f:71:8b:9b:
b7:78:72:d9:67:57:49:b4:63:d2:99:e5:64:05:ad:
7f:22:d2:8e:6f:8a:fb:e5:46:42:2f:af:a9:e7:8d:
a6:1c:37:33:87:32:79:9f:c4:55:f7:2e:0a:f2:b2:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:6B:F3:56:25:31:16:6D:DA:7C:13:17:92:E8:DF:00:93:C4:D2
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:c1:c0:1c:52:3c:a1:8a:b4:b9:8c:81:c0:3b:7b:30:78:
27:91:57:12:06:09:10:b6:36:a9:63:ff:1c:eb:d0:8a:32:20:
51:7a:0c:94:e4:c4:31:e6:d2:ee:49:f1:e4:90:6f:09:59:47:
84:d3:52:09:37:5b:7e:20:ae:08:02:aa:56:2b:a7:63:96:7e:
3e:c9:0c:f2:5e:b0:a9:e4:31:b2:4e:1b:48:40:6b:6a:c1:06:
6c:0b:4e:47:1d:06:fc:f3:9b:80:36:16:34:b4:24:a4:4d:bd:
81:6b:c6:49:94:f1:dc:f5:aa:52:12:ff:13:34:1d:ef:77:47:
1a:4e:3e:77:e4:b8:ee:6c:50:b1:c4:59:cc:73:3c:c1:2e:ce:
59:0d:60:7e:92:af:01:99:da:dc:a1:65:0e:68:df:5d:f0:d1:
95:e7:a1:2d:bd:3e:e2:6c:80:c4:cf:f7:6e:d8:93:53:ab:d4:
3c:14:33:2d:01:7f:d7:43:24:a6:a9:6f:91:bc:1a:9f:20:81:
31:fd:4e:6e:c3:14:2f:73:a1:cc:9e:9d:6f:a4:08:42:6d:31:
bc:45:cf:fb:2d:97:e7:61:f8:9d:ff:87:d1:3a:1b:92:04:62:
d6:9b:a8:1c:be:08:1f:13:66:f7:0e:50:a2:f3:9a:b6:15:89:
fd:6c:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:41:50 2026 by rpki-client