Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
File: _MziomuQk8lrKlzN3XA0u1zgEvw.mft (raw, json)
Hash identifier: srsn/8x8agN4bKn00fMWLI07Ekhz2sN0pPWJ2lO1LVY=
Subject key identifier: CE:69:C2:54:82:58:2B:DC:12:3C:16:0C:8C:FE:50:85:EA:5B:58:B1
Authority key identifier: FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
Certificate issuer: /CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Certificate serial: 01A08C7A8411A87D5B75820AF12A286F0BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:34 +0000
Manifest this update: Thu 10 Sep 2026 18:00:34 +0000
Manifest next update: Fri 11 Sep 2026 18:00:34 +0000
Files and hashes: 1: SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa (hash: MQYGYdS73ZtBvhBLN7sM94ounBVaM1F31AdoiiH3acc=)
2: _MziomuQk8lrKlzN3XA0u1zgEvw.crl (hash: dgAv/8BoVoxnY4IovO6+x0nHDGGlxeWCXs+u+CGfxOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:84:11:a8:7d:5b:75:82:0a:f1:2a:28:6f:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Validity
Not Before: Sep 10 18:00:34 2026 GMT
Not After : Sep 11 18:00:34 2026 GMT
Subject: CN=ce69c25482582bdc123c160c8cfe5085ea5b58b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:be:4a:12:90:04:e3:74:b5:3b:a7:23:b2:
5c:c0:9a:8a:2c:1c:56:4f:ca:cb:17:93:ce:aa:3a:
79:f5:d0:99:4b:37:4c:0c:37:ad:e0:56:2e:58:09:
96:ea:bf:38:af:61:42:f4:20:1f:03:e9:22:ee:6d:
7e:ae:9f:7c:c9:66:b9:0a:12:f7:0f:6b:dc:0e:b4:
25:ca:f1:38:10:62:db:11:a5:01:51:aa:f8:ca:67:
6a:23:b1:c8:d2:5f:22:b6:53:70:9f:5a:ab:fe:ae:
6f:0d:68:56:fc:87:37:8b:fe:77:5f:35:36:fd:ee:
dc:62:2f:eb:35:25:19:5e:8d:c6:a8:a4:00:b4:ee:
85:d6:10:a5:78:5b:39:0b:95:a6:4c:34:85:a0:94:
24:f7:37:e3:3f:b9:6e:62:5e:fc:13:59:33:b3:d8:
29:eb:b9:da:67:ab:4f:0f:4b:7c:fc:96:14:ad:72:
c0:fd:d0:ca:d6:2a:08:91:7a:96:fd:13:91:76:38:
ae:95:32:bf:02:24:d1:1d:ce:b6:18:20:14:05:48:
b4:f8:f6:dc:b4:24:16:98:3e:9a:d8:3c:67:04:24:
a1:9b:86:c0:64:59:a2:05:92:7a:7e:77:3f:93:9e:
1f:3a:0e:b3:f5:81:ba:c0:79:b4:91:e0:c1:62:8f:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:C2:54:82:58:2B:DC:12:3C:16:0C:8C:FE:50:85:EA:5B:58:B1
X509v3 Authority Key Identifier:
keyid:FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e7:d7:1b:7f:3d:69:78:21:6b:1b:1e:64:c1:97:70:09:c6:
d1:40:cf:4e:49:c3:4c:54:7a:f1:de:ca:e8:28:e0:96:d0:2e:
aa:ed:99:07:d1:33:26:63:ec:f1:28:7e:c5:4f:2f:f4:2e:57:
5f:76:c1:10:64:c8:87:18:a0:bc:42:a8:a3:48:56:01:41:70:
c0:b0:49:67:e4:88:d4:5c:d5:c1:28:9b:bd:ba:b6:f8:d7:5c:
01:10:6b:eb:13:58:61:b5:6d:37:cc:3a:10:ce:0e:2f:9b:c2:
38:ba:1a:55:d2:e5:8b:d0:d5:1a:10:aa:e1:9a:ff:97:8f:8c:
da:9a:f1:1a:a0:4c:61:bc:54:cd:54:eb:32:0f:97:cf:71:8a:
15:88:ad:9d:a2:ff:a4:91:00:ed:3e:57:d4:5f:95:c2:09:7b:
ea:07:80:6d:5a:3d:1f:e0:64:d5:2f:39:3a:4b:5e:f8:1a:58:
de:df:7a:73:c6:67:d8:4d:ce:de:6f:53:29:6f:aa:16:45:75:
db:8b:0f:59:f4:5f:54:b1:6e:b1:d5:fd:88:f6:4c:d2:46:94:
99:1f:e5:3f:a7:c7:fa:c5:83:f1:58:e2:40:55:6b:e5:72:ec:
a9:a5:a6:43:99:70:01:9d:08:f6:d2:e9:48:52:cd:a0:41:79:
24:d2:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:32:25 2026 by rpki-client