Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: YvlPzm7Ov9OtoYeINBvOnjfc0cm7YY0D6ylFWHjgdsI=
Subject key identifier: BD:B7:32:6D:B7:95:0D:84:9A:25:27:EB:93:80:1A:62:42:25:4E:52
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 01A08CB2064638080AE5EDB867B6668E55BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 1411
Signing time: Thu 10 Sep 2026 19:01:12 +0000
Manifest this update: Thu 10 Sep 2026 19:01:12 +0000
Manifest next update: Fri 11 Sep 2026 19:01:12 +0000
Files and hashes: 1: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: rkkNMQTbaBO5bavds8uQ8wlmnGQlKI1JyVD/X2WVidM=)
2: nmezCljgDKAAsVa5oeMHTBs1c_U.roa (hash: Xymj/HTNJ2zrfxFUZg4F510dD3oB+LKLTaSEqJfdsGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:06:46:38:08:0a:e5:ed:b8:67:b6:66:8e:55:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Sep 10 19:01:12 2026 GMT
Not After : Sep 11 19:01:12 2026 GMT
Subject: CN=bdb7326db7950d849a2527eb93801a6242254e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:d4:23:36:ba:02:20:b5:c2:5c:4c:c6:2e:
48:2f:9c:9f:81:f7:e3:c9:8e:68:38:84:46:0e:b0:
67:9b:d5:c5:a2:d3:9d:bf:1b:82:9f:61:5b:49:09:
fd:b5:56:c1:26:09:31:af:39:ec:9f:b5:7c:c3:00:
e9:68:33:7d:55:28:e8:c2:39:41:81:8c:1a:bf:0d:
0a:c9:bf:40:b5:4b:19:6b:9c:5c:1c:43:1b:e3:69:
4d:bf:85:2b:1f:23:64:98:f2:fb:8d:1b:56:85:a5:
8b:d9:61:f1:06:5a:3a:eb:ab:73:ce:51:f7:63:e7:
42:9a:e0:11:a1:9c:8f:98:32:34:3a:e9:ba:0a:db:
93:fb:cf:89:ec:68:dd:ce:81:70:ad:3b:65:f9:99:
32:2f:50:bc:10:d5:31:07:eb:fd:6e:22:74:ae:25:
c9:ef:39:60:3a:7a:77:35:2c:b4:e7:2b:89:b4:e7:
c5:2c:fa:66:09:6b:bf:1a:63:33:9c:d4:95:bb:be:
3b:69:f7:6f:91:8f:19:90:be:f5:94:38:9b:d6:85:
f9:70:f7:33:de:3c:54:0c:e2:11:8c:c3:c2:7f:12:
17:2b:bc:68:02:b9:12:1b:67:50:43:0c:7a:f4:fa:
ca:20:ee:21:49:39:fd:bd:b3:f0:d1:7c:a5:ef:49:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:32:6D:B7:95:0D:84:9A:25:27:EB:93:80:1A:62:42:25:4E:52
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f3:09:10:15:b3:2a:73:13:93:8d:ed:2a:34:6d:36:a1:6b:
2d:71:54:56:64:0e:38:72:7c:c1:17:41:0b:98:d2:92:00:14:
62:fe:ef:46:96:79:21:f6:fd:b5:8a:9a:5c:13:c7:bf:3b:97:
cc:c5:90:f2:7b:f1:76:4d:b0:de:47:e8:a2:aa:ac:33:df:2b:
ed:d8:47:3b:12:61:62:5b:48:95:da:60:75:a3:e0:2a:1d:51:
54:8f:02:54:3c:51:b7:53:4d:76:3d:aa:a4:f7:16:c2:25:c0:
96:34:2c:0a:34:24:a3:36:cf:26:e0:b1:48:de:68:a8:c2:a4:
a4:38:88:34:7f:39:41:c9:f9:b2:f2:1a:ed:42:8c:66:f4:ca:
9a:ae:5c:20:67:5f:66:b8:33:7e:7e:c6:44:d3:f6:82:70:20:
56:a6:c2:96:68:36:f1:5a:54:bf:ab:30:c9:41:f2:70:12:59:
ee:e9:af:73:a7:f3:01:ca:3e:4f:f3:a7:bc:8f:9a:6f:84:11:
c8:25:3b:f2:95:39:12:bb:39:61:42:01:13:5e:5d:35:14:63:
a0:0a:63:ad:e5:04:a1:ee:b6:7a:a5:1a:07:c0:1a:39:ae:53:
fe:c1:22:d6:10:c9:6b:6d:c2:f9:35:f7:26:50:85:0e:db:b0:
c1:96:5b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsgZGOAgK5e24Z7ZmjlW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjVmZDMzOWFhNjQ1MDRmMjg5YTAwYzQxNzNjNTVhMDAw
MmViNDQwHhcNMjYwOTEwMTkwMTEyWhcNMjYwOTExMTkwMTEyWjAzMTEwLwYDVQQD
EyhiZGI3MzI2ZGI3OTUwZDg0OWEyNTI3ZWI5MzgwMWE2MjQyMjU0ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlPUIza6AiC1wlxMxi5IL5yfgffj
yY5oOIRGDrBnm9XFotOdvxuCn2FbSQn9tVbBJgkxrznsn7V8wwDpaDN9VSjowjlB
gYwavw0Kyb9AtUsZa5xcHEMb42lNv4UrHyNkmPL7jRtWhaWL2WHxBlo666tzzlH3
Y+dCmuARoZyPmDI0Oum6CtuT+8+J7GjdzoFwrTtl+ZkyL1C8ENUxB+v9biJ0riXJ
7zlgOnp3NSy05yuJtOfFLPpmCWu/GmMznNSVu747afdvkY8ZkL71lDib1oX5cPcz
3jxUDOIRjMPCfxIXK7xoArkSG2dQQwx69PrKIO4hSTn9vbPw0Xyl70kqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL23Mm23lQ2EmiUn65OAGmJCJU5SMB8GA1UdIwQY
MBaAFDAl/TOapkUE8omgDEFzxVoAAutEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YTUyM2ItNzI0NC00MjJkLTkwMDQt
YzRhYTlkYjFhYmI1LzEvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80YTUyM2ItNzI0NC00MjJkLTkwMDQtYzRhYTlkYjFhYmI1
LzEvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/MJEBWz
KnMTk43tKjRtNqFrLXFUVmQOOHJ8wRdBC5jSkgAUYv7vRpZ5Ifb9tYqaXBPHvzuX
zMWQ8nvxdk2w3kfooqqsM98r7dhHOxJhYltIldpgdaPgKh1RVI8CVDxRt1NNdj2q
pPcWwiXAljQsCjQkozbPJuCxSN5oqMKkpDiINH85Qcn5svIa7UKMZvTKmq5cIGdf
Zrgzfn7GRNP2gnAgVqbClmg28VpUv6swyUHycBJZ7umvc6fzAco+T/OnvI+ab4QR
yCU78pU5Ers5YUIBE15dNRRjoApjreUEoe62eqUaB8AaOa5T/sEi1hDJa23C+TX3
JlCFDtuwwZZbgg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:24 2026 by rpki-client