Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: vCi1v5V1ilcB/ubFAnGX6rYaOcBHN0AIWKrmW533TeY=
Subject key identifier: 3A:BB:99:85:D5:A9:05:87:E8:86:49:36:F7:9D:4D:3E:DE:55:9F:8B
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 01A08AC3DD82C3537C3E882C7D1F1B283FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 1410
Signing time: Thu 10 Sep 2026 10:01:27 +0000
Manifest this update: Thu 10 Sep 2026 10:01:27 +0000
Manifest next update: Fri 11 Sep 2026 10:01:27 +0000
Files and hashes: 1: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: 3+JFOs0moCITxCycsYWm4htc3IlQ9aic1iu5YV+jYYg=)
2: nmezCljgDKAAsVa5oeMHTBs1c_U.roa (hash: Xymj/HTNJ2zrfxFUZg4F510dD3oB+LKLTaSEqJfdsGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:dd:82:c3:53:7c:3e:88:2c:7d:1f:1b:28:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Sep 10 10:01:27 2026 GMT
Not After : Sep 11 10:01:27 2026 GMT
Subject: CN=3abb9985d5a90587e8864936f79d4d3ede559f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:ed:13:48:1e:f1:63:8f:cc:26:0c:49:45:
7b:3f:d1:30:10:f9:e8:12:16:58:39:92:0a:e7:16:
b2:53:f4:5c:45:ab:5b:e1:62:b1:fb:89:23:2b:0f:
b6:d6:da:f2:19:90:33:81:e7:34:da:d6:7f:69:81:
68:70:d2:bb:ce:6b:ec:1c:47:f6:ac:4f:c4:cc:ec:
2d:fe:c7:1d:e8:5a:39:2d:3c:67:37:91:8f:b4:3c:
08:11:ac:07:80:5f:e8:ef:49:29:ed:b3:dc:a2:4a:
40:d0:00:b4:e3:a2:0a:1a:f0:5d:cd:62:a4:ff:e3:
36:8c:f2:cf:80:99:ac:2e:80:83:bd:30:7c:70:57:
d0:1b:bd:fc:c6:e9:18:d8:72:05:f3:2e:31:79:5b:
31:fc:69:a7:1f:e3:7b:05:91:f0:9a:19:39:6a:4e:
10:eb:3b:05:5b:6d:f7:cd:ab:29:7f:29:fb:6d:55:
ce:6f:d3:d8:be:ae:58:90:7d:be:de:5d:4e:8d:e3:
28:57:2b:1d:4f:5d:32:33:c1:b6:d2:e2:18:4e:90:
39:35:19:41:b9:27:7a:a3:fd:66:fb:d5:72:e1:b4:
09:fd:80:49:0c:ed:ba:47:b5:e0:ae:73:04:e4:86:
e1:a2:79:08:58:de:7d:e4:15:f5:05:e4:10:d0:72:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:99:85:D5:A9:05:87:E8:86:49:36:F7:9D:4D:3E:DE:55:9F:8B
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3a:71:35:f8:ef:55:aa:fe:47:12:0c:82:b1:cc:13:dc:fa:
11:46:4b:6c:b4:fd:53:a6:f9:ee:b8:bf:30:04:e3:43:60:73:
1e:ee:18:3a:fb:a6:4f:8c:f5:3e:5f:0d:1e:c2:b7:f7:c8:33:
0f:62:eb:57:b3:4c:b2:f4:4f:42:6f:36:24:95:64:24:e3:f6:
80:87:d0:01:a6:ea:76:62:8b:8c:25:44:13:a8:77:d8:6b:f0:
ab:8c:75:f0:d3:14:dc:cb:f7:a3:11:4a:f6:53:dc:8a:c3:97:
4d:64:6c:65:8a:8a:b3:d9:2b:29:6e:0d:c8:d9:f9:70:15:17:
50:c6:be:da:57:88:f2:9a:63:38:35:e4:de:51:5c:00:5c:0a:
79:c3:c3:ed:2d:67:4e:d2:b8:09:e8:0d:3f:b1:d7:72:33:2a:
a0:63:07:4a:f0:43:60:af:1e:00:d0:02:59:da:4d:d3:c5:c7:
69:6e:ba:1b:1a:66:7f:5a:67:eb:d1:f3:3c:69:52:cd:77:24:
06:ff:4e:fd:4b:d3:6b:35:25:4b:d6:8c:47:2e:4e:49:42:f4:
b6:a7:b4:8d:7b:38:38:23:e1:5e:ee:81:eb:71:ea:fc:bb:d4:
ee:f7:10:0e:7c:6d:aa:7d:c5:ef:95:23:52:ed:eb:53:c7:1a:
77:73:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:36:07 2026 by rpki-client