Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: eDx9u3NW3tcvJ28Cvjb8FvZXMK0JFiW8g/HSjtbMpFs=
Subject key identifier: FA:18:B2:D1:D4:22:8E:03:4C:2C:2C:65:35:C5:F2:D5:BB:E6:EF:1C
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 01A0EB531AF893902E13E47D846E3A6BFD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 021A
Signing time: Tue 29 Sep 2026 04:01:27 +0000
Manifest this update: Tue 29 Sep 2026 04:01:27 +0000
Manifest next update: Wed 30 Sep 2026 04:01:27 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: sK9aj7wg0C6rdpwfQf3myUkwNU5Taky01x7lICtWhmY=)
2: qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa (hash: JWJWQndeDRgVNRYgTaVF4Zb3Aiwbr3beQwuqCBRvJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:1a:f8:93:90:2e:13:e4:7d:84:6e:3a:6b:fd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Sep 29 04:01:27 2026 GMT
Not After : Sep 30 04:01:27 2026 GMT
Subject: CN=fa18b2d1d4228e034c2c2c6535c5f2d5bbe6ef1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:16:e0:a3:e4:cc:0a:86:24:a1:0b:dd:f5:
45:11:b3:85:04:ae:52:60:63:e8:bc:51:f2:b1:76:
aa:f2:ad:e1:14:d1:78:8b:e3:90:23:f4:bb:ca:a4:
3b:9a:12:2a:a5:42:ed:44:10:4c:a2:db:72:c8:4a:
d2:ba:a2:db:01:91:a5:4c:f7:5c:e5:13:e5:4d:17:
39:92:52:d7:98:2d:65:83:4b:34:1a:9e:da:46:da:
b2:c4:35:5e:aa:cd:38:35:17:e2:70:ed:91:46:46:
ce:45:1d:25:d3:e1:7f:e2:5d:9a:d6:3c:6d:1f:6e:
53:1c:34:2a:85:ae:78:52:15:b3:99:76:5f:57:b4:
d9:c6:eb:c8:5f:51:14:8c:23:1e:80:fe:79:53:6c:
d0:90:0a:02:ff:3a:5e:db:0a:a0:4f:36:fb:66:4a:
40:30:df:a2:e7:76:a0:a6:0b:39:e3:cd:e6:1c:66:
93:0b:3e:cd:0d:5c:84:04:b2:13:17:b0:db:54:e4:
81:97:81:f8:de:95:bb:bc:b1:bb:c3:2d:58:5f:e5:
08:57:43:7b:38:0b:47:10:5f:e3:39:4b:cb:06:d9:
5a:ef:4b:65:11:34:e8:75:15:8d:79:42:77:b7:de:
57:0f:ff:b1:f0:fe:0b:d4:18:26:08:ec:ea:ad:84:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:B2:D1:D4:22:8E:03:4C:2C:2C:65:35:C5:F2:D5:BB:E6:EF:1C
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:f7:ea:78:e4:c2:1b:2a:8c:61:57:c2:5e:3f:04:05:6a:
a6:0a:40:95:29:ac:3d:65:e0:59:00:70:c7:35:ff:09:67:97:
1a:24:88:8b:c4:da:57:08:b7:ed:d1:ab:78:7f:b8:b3:fd:3b:
bf:fd:bd:a9:22:45:18:93:23:d8:46:43:bb:27:d7:0f:de:62:
6f:71:c8:9e:2f:78:a0:11:35:5d:f2:e4:1b:45:2a:1b:0a:8a:
e4:3a:03:7e:eb:54:91:d7:da:f0:78:dd:94:9d:3c:b2:26:38:
df:d5:5b:46:e5:62:58:2e:aa:f6:56:8e:b1:cb:74:30:7e:11:
7d:94:55:24:7d:07:83:cc:53:67:07:b1:d5:4f:a9:8c:be:60:
01:44:68:84:d4:cd:82:8b:16:fb:ec:02:59:cb:d6:e1:4b:d6:
2e:ec:03:82:a9:5f:ed:d8:2b:48:6b:cb:8f:b3:e0:bb:09:ff:
2b:f7:d7:c2:f4:6d:8a:0f:c5:db:db:69:69:3d:28:fb:b9:81:
4e:3a:ad:1b:34:4d:6f:5f:b4:b1:b2:97:e4:0c:06:3e:a5:0b:
78:6a:f6:21:ca:36:3e:ae:04:de:e8:5b:f6:0c:ee:a7:b7:43:
ba:e6:a7:b0:dd:d7:07:73:73:0d:cf:a2:fb:0d:f1:0b:ee:4d:
26:92:5c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrUxr4k5AuE+R9hG46a/1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwOGRkMzU3YmMzMTYyODdjMzI2NDI5OWUzMDE3MDc2NWMx
YTMyYzQwHhcNMjYwOTI5MDQwMTI3WhcNMjYwOTMwMDQwMTI3WjAzMTEwLwYDVQQD
EyhmYTE4YjJkMWQ0MjI4ZTAzNGMyYzJjNjUzNWM1ZjJkNWJiZTZlZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wEW4KPkzAqGJKEL3fVFEbOFBK5S
YGPovFHysXaq8q3hFNF4i+OQI/S7yqQ7mhIqpULtRBBMottyyErSuqLbAZGlTPdc
5RPlTRc5klLXmC1lg0s0Gp7aRtqyxDVeqs04NRficO2RRkbORR0l0+F/4l2a1jxt
H25THDQqha54UhWzmXZfV7TZxuvIX1EUjCMegP55U2zQkAoC/zpe2wqgTzb7ZkpA
MN+i53agpgs5483mHGaTCz7NDVyEBLITF7DbVOSBl4H43pW7vLG7wy1YX+UIV0N7
OAtHEF/jOUvLBtla70tlETTodRWNeUJ3t95XD/+x8P4L1BgmCOzqrYRUOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoYstHUIo4DTCwsZTXF8tW75u8cMB8GA1UdIwQY
MBaAFDCN01e8MWKHwyZCmeMBcHZcGjLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUkzVFY3d3hZb2ZESmtLWjR3RndkbHdhTXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGM5MzAtNTJmNC00OWFlLWI0MDEt
ZmExMWMxY2Q0OTc1LzEvTUkzVFY3d3hZb2ZESmtLWjR3RndkbHdhTXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGM5MzAtNTJmNC00OWFlLWI0MDEtZmExMWMxY2Q0OTc1
LzEvTUkzVFY3d3hZb2ZESmtLWjR3RndkbHdhTXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigD36njk
whsqjGFXwl4/BAVqpgpAlSmsPWXgWQBwxzX/CWeXGiSIi8TaVwi37dGreH+4s/07
v/29qSJFGJMj2EZDuyfXD95ib3HIni94oBE1XfLkG0UqGwqK5DoDfutUkdfa8Hjd
lJ08siY439VbRuViWC6q9laOsct0MH4RfZRVJH0Hg8xTZwex1U+pjL5gAURohNTN
gosW++wCWcvW4UvWLuwDgqlf7dgrSGvLj7Pguwn/K/fXwvRtig/F29tpaT0o+7mB
TjqtGzRNb1+0sbKX5AwGPqULeGr2Ico2Pq4E3uhb9gzup7dDuuansN3XB3NzDc+i
+w3xC+5NJpJc0w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:30:42 2026 by rpki-client