Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: kc5nJeDFiGFG0/7Lw+bAkYJfcSKmWmsyWNtAnS0OCHk=
Subject key identifier: FC:F9:C2:B8:B3:91:D9:A0:64:7D:0D:36:E8:73:D5:C6:DB:84:9A:95
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 01A1562EDEAC15C72EE4FEEB5D7CD7C08768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0CED
Signing time: Mon 19 Oct 2026 22:01:14 +0000
Manifest this update: Mon 19 Oct 2026 22:01:14 +0000
Manifest next update: Tue 20 Oct 2026 22:01:14 +0000
Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: aHKvIfQvaK0H6BCN7fPUCeKRYbZn9BpfaDt5+hVQEmU=)
2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2e:de:ac:15:c7:2e:e4:fe:eb:5d:7c:d7:c0:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Oct 19 22:01:14 2026 GMT
Not After : Oct 20 22:01:14 2026 GMT
Subject: CN=fcf9c2b8b391d9a0647d0d36e873d5c6db849a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:2c:7f:bd:74:ef:73:8b:2c:62:9a:43:5d:
8a:3c:8a:03:ae:f5:8f:cb:96:6a:43:e7:4d:30:d0:
3d:b3:f6:2d:e2:40:05:b0:5f:5e:78:34:e3:f5:d4:
d5:30:fc:ff:a2:bc:8b:6b:47:b9:00:58:f6:0e:38:
f3:5a:bd:3c:6c:5b:00:8e:c0:c4:48:c5:c1:28:17:
50:75:a4:0b:33:4c:e2:84:89:13:83:ad:1f:54:33:
bb:6f:09:01:7c:21:9e:6e:4d:a4:ed:a0:c2:5c:54:
98:71:e5:df:5d:1b:0d:17:4b:ca:ec:f5:99:2c:b1:
ef:07:41:4f:34:2c:fd:6c:35:d9:46:8f:b7:cf:60:
40:67:4b:20:12:a9:7a:b6:76:87:23:6f:01:a6:99:
b0:76:3d:e2:85:75:e7:6b:e7:60:a7:6d:ff:08:3d:
ef:2f:3f:ad:27:89:17:11:e2:fc:5f:eb:c9:89:2d:
0b:43:e6:02:f5:36:4e:59:0e:c0:9e:64:55:69:e1:
f6:70:7b:ac:41:66:7e:18:78:50:4b:4a:45:5a:00:
62:0a:88:65:cc:ec:f3:2b:72:8e:df:77:d0:17:28:
b9:b3:0d:2c:a1:90:dc:e8:60:7c:12:f2:f8:79:02:
13:18:fe:27:ff:f2:7a:61:c2:7c:cd:7d:39:58:89:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F9:C2:B8:B3:91:D9:A0:64:7D:0D:36:E8:73:D5:C6:DB:84:9A:95
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:06:bf:93:60:7f:18:09:e3:57:e6:51:e4:2c:65:ca:db:d1:
d5:b1:d6:40:46:2a:d5:59:8e:46:0a:6e:8a:7f:de:64:76:be:
1c:35:50:fc:9c:bd:9a:c0:ed:7d:76:69:fe:d6:b7:b5:f4:6f:
83:f6:86:1e:d7:5a:1d:ab:9b:05:75:5d:c3:cc:d6:c6:7c:db:
b4:70:8b:13:d7:2e:da:9b:73:dd:c8:b6:fe:7a:25:a8:fd:99:
41:47:cf:29:ac:78:37:7c:a0:fb:f8:31:3c:94:63:3e:81:84:
89:48:a6:ac:15:73:61:60:7c:ef:51:0d:6a:2c:58:9b:b0:10:
b8:29:8a:e8:7a:3d:ba:97:79:72:2c:68:e9:e3:f2:96:09:8f:
d8:88:61:cc:44:6b:0f:db:b3:43:38:4e:37:08:ed:1a:a8:98:
a8:0b:9e:52:07:b6:1c:e7:31:b1:c6:c5:6d:96:ba:dc:3f:c3:
58:ac:b9:6a:00:6f:c7:1f:d7:be:47:1f:0c:51:88:2a:2b:8f:
f7:19:05:a2:7e:f2:dd:8a:13:bb:83:5a:67:9e:56:cc:34:2f:
d4:04:4a:3f:9e:b0:9a:66:73:14:f8:04:48:38:03:29:de:5a:
0d:27:47:96:c2:68:f2:db:64:54:ad:47:07:d8:27:f7:40:e3:
70:7d:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:55:44 2026 by rpki-client