Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
File: MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft (raw, json)
Hash identifier: TaUdTTtshvozv5uTlI2ueuM24NhIqUIS9ZWx9XPRQWM=
Subject key identifier: 37:52:78:99:DE:33:24:B9:3E:2F:97:25:88:A9:CF:2F:B4:B6:DF:B6
Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
Certificate issuer: /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Certificate serial: 019D382DFD324C4BAC609B90FE2002F67EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
Manifest number: 0184
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: DyptUUOjRm_2m8zgbMvoHA1UrBI.roa (hash: K5rbZpcZwUPf7XJmogvvHN54DVEPkHI7+lgGEgRM/BA=)
2: MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl (hash: z49cgXUTCNBR2jqWwRWPVPwVp5KeLkaJNjmdX35aj1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fd:32:4c:4b:ac:60:9b:90:fe:20:02:f6:7e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=37527899de3324b93e2f972588a9cf2fb4b6dfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:d4:83:37:ad:df:58:72:93:21:eb:95:48:
5e:70:10:6c:aa:cc:9f:90:22:ba:9c:4a:8c:28:f8:
18:77:63:c4:a5:67:2b:b3:5c:2d:0b:f1:5d:c8:c1:
ca:ba:4d:29:d9:ff:d8:f0:51:7e:7d:47:b0:15:fc:
ee:ce:41:06:a4:be:20:a6:ed:d8:a9:fc:b3:6d:ea:
f5:53:e2:92:6d:f2:f0:3e:d6:d7:d0:12:ae:1c:31:
73:8d:f0:79:8a:69:02:c6:14:66:79:38:99:81:01:
90:f1:72:e5:68:2f:83:b9:d6:3f:b5:ab:c1:91:cb:
61:5c:b9:39:e1:9e:ff:62:94:4d:0b:c2:fd:6c:dd:
2e:61:14:41:fd:9b:37:a1:6d:82:36:35:78:e0:24:
e5:90:10:b1:0e:0f:f4:d1:67:31:b4:00:ee:a0:74:
9b:2f:e9:1a:a5:c7:29:ed:96:ab:8b:bc:95:a4:84:
d9:6e:16:e5:a9:7b:e9:2f:08:2b:d3:e7:aa:5f:1b:
f3:79:8e:ef:38:3a:ba:8d:fb:a8:f5:36:36:b3:f8:
7a:db:17:14:9b:0e:2e:36:82:c7:e1:9b:3c:a5:76:
d9:36:58:36:09:e9:01:63:92:a5:d8:4d:3b:13:94:
30:9c:dd:9c:89:d4:96:8f:08:62:6c:99:4d:1b:0d:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:78:99:DE:33:24:B9:3E:2F:97:25:88:A9:CF:2F:B4:B6:DF:B6
X509v3 Authority Key Identifier:
keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e8:9d:d8:b9:aa:04:90:61:83:b3:04:73:84:de:40:18:f8:
27:cd:5c:f3:98:fa:17:26:17:72:b8:78:5f:8f:8e:20:da:d4:
5c:b4:e0:82:e6:f2:2f:11:78:98:23:3e:a9:6c:b5:7a:b4:8e:
3a:d4:04:0d:18:92:56:70:6b:a6:cf:e8:88:ca:58:29:b9:79:
93:43:21:70:f4:c4:52:e3:66:09:79:34:5f:70:38:7f:69:76:
0a:bc:3d:b7:83:4c:f4:3e:8e:1e:ef:90:73:b5:78:2d:f4:7a:
b4:ba:9a:5b:32:ad:a8:b2:96:d8:3f:9e:1a:e8:17:71:48:80:
d8:06:19:64:5e:da:3c:7e:d3:d8:01:4a:f1:fc:40:72:23:ea:
f2:a3:5f:0c:ed:e5:ed:47:6e:55:82:a9:75:f4:a7:8d:ca:e8:
3e:54:84:1d:30:d1:ef:99:f1:04:0c:41:e8:4e:40:31:8f:01:
bd:c1:f0:a6:ca:89:9b:27:d2:99:3a:ae:3e:25:af:be:0a:93:
26:4b:6a:d3:5f:82:ca:59:e0:04:0f:19:aa:df:3b:88:8a:bb:
c2:d7:80:33:91:60:53:aa:b2:8f:b6:50:f2:9f:bc:80:bd:29:
e3:64:77:88:03:b1:d8:6c:9f:30:aa:13:53:f0:66:06:37:b1:
6c:d8:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:11:57 2026 by rpki-client