Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: AB1taG3nnjiVj8XxA3qtt6PK15BbCN2vqbgE8CK5HhU=
Subject key identifier: 15:6C:05:F4:3C:5F:84:A3:CE:77:73:A5:03:FC:3F:49:A6:1E:41:51
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 01A1593001770D374EFEA40AB3DB8B5D77BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 0C5D
Signing time: Tue 20 Oct 2026 12:01:20 +0000
Manifest this update: Tue 20 Oct 2026 12:01:20 +0000
Manifest next update: Wed 21 Oct 2026 12:01:20 +0000
Files and hashes: 1: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: 0m1eZQM5fbuekFJykDsSEVOfiNuY0MahK15Wygknxzk=)
2: bY4WY1iKxzvuOL6bmkVqfpfooVA.roa (hash: Ph+QZYyi/7d0WLmkOSuDFC4tOnaIRjljQNdRjvbGpWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:01:77:0d:37:4e:fe:a4:0a:b3:db:8b:5d:77:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: Oct 20 12:01:20 2026 GMT
Not After : Oct 21 12:01:20 2026 GMT
Subject: CN=156c05f43c5f84a3ce7773a503fc3f49a61e4151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:52:06:50:30:52:12:5f:cd:34:9b:23:55:
83:76:d5:2e:d6:64:ae:62:3b:58:60:e0:2e:ec:20:
79:b7:ba:e2:31:8f:06:80:cf:64:e2:f1:ed:15:99:
ce:71:4b:10:9c:1d:1e:7d:7f:54:f6:0e:28:7a:4c:
13:34:64:fc:ec:25:3a:90:ea:44:27:3c:06:60:7c:
7d:5a:90:94:02:9f:bc:66:68:c6:81:4b:73:5c:46:
50:60:80:ac:97:4d:02:11:c0:fa:13:cb:18:e8:dd:
81:f8:a6:ae:1c:6b:29:e3:11:13:4d:9a:b7:c8:9c:
cd:96:4b:c5:a4:9a:9e:53:e1:e9:39:24:e5:39:f7:
5d:05:66:68:ef:23:63:b4:ab:5a:db:c1:7f:49:b3:
49:3d:44:6a:d5:4e:36:ed:2e:01:5d:e2:9c:56:06:
2d:37:6a:38:b7:34:c6:0d:7b:ca:9e:87:14:fc:53:
5d:75:a8:8c:c1:b0:cd:72:6b:6a:ef:81:63:6d:08:
e9:c4:11:42:87:df:71:5a:05:28:ed:4d:dc:05:b6:
23:e4:d1:e1:ab:5b:d4:cd:6f:35:f1:e5:09:44:60:
e7:20:6d:d3:8a:0d:89:e2:10:a1:37:bc:d9:40:29:
15:91:8d:5a:4f:8b:83:ef:dc:7b:bd:b9:ee:91:57:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:05:F4:3C:5F:84:A3:CE:77:73:A5:03:FC:3F:49:A6:1E:41:51
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:11:fa:80:02:37:52:60:66:50:9c:45:82:47:76:60:de:e3:
58:5e:32:59:7a:c8:dd:c1:1c:5b:c4:ac:88:18:34:0e:53:6f:
d1:24:ba:a7:da:15:71:91:30:e4:37:6e:c4:9e:0c:36:72:6e:
aa:98:ae:8b:db:fc:50:ee:4f:97:e6:c8:9f:fc:ac:f6:1d:fa:
99:cf:f7:8f:9d:32:ba:98:67:a0:6b:02:cc:09:3f:53:64:c8:
a2:fd:6e:2f:87:d9:26:cb:c6:67:1c:29:d9:bd:ed:a7:70:71:
92:49:2d:38:c0:f7:01:40:00:74:c8:5d:d6:69:de:09:4d:44:
3a:17:3c:54:4c:d1:ca:29:5d:eb:8e:3a:15:e7:19:e6:0a:c0:
f9:31:e2:26:bb:42:45:25:c8:16:15:a7:54:93:3a:d9:84:90:
71:de:08:f0:62:c7:1b:6d:4a:0d:e7:f6:4b:2e:37:5b:b4:c2:
c7:a2:30:3f:cc:8c:38:31:9c:00:e6:6d:05:b8:0b:83:3a:63:
a6:96:1b:f5:03:ea:0a:4e:0e:ed:1c:0a:0c:cf:57:17:00:04:
29:d6:bb:df:46:5a:02:91:10:2b:c5:bc:8c:70:b9:29:f2:fd:
82:b8:45:ad:07:4b:46:c1:99:a0:e6:15:ea:5c:16:0f:d3:1c:
2e:2b:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:05:17 2026 by rpki-client