Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
File: MNs1tD7r7J26qD7xjrHv8CPxge0.mft (raw, json)
Hash identifier: +7wKjXxOzdjz8NijJu01d3vw6QglR4MW+Fh2WwKMprk=
Subject key identifier: 7B:73:AE:ED:C0:CF:EE:CB:77:81:9A:09:3B:BD:D2:9D:E6:F2:80:49
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Certificate issuer: /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial: 01A0679271BEC2867B374F9279E15DD58CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
Manifest number: 12
Signing time: Thu 03 Sep 2026 14:00:45 +0000
Manifest this update: Thu 03 Sep 2026 14:00:45 +0000
Manifest next update: Fri 04 Sep 2026 14:00:45 +0000
Files and hashes: 1: GqzdFNSiDk6sI52-YP2ccD92cJI.roa (hash: drkoNBSBFH+OuC0Inyg8xVO+iSjJR9Gj4j9T03Dwk58=)
2: MNs1tD7r7J26qD7xjrHv8CPxge0.crl (hash: xTi+mwRvlEPpzIrJt4C7Uzr0bQII+oR5VwlPy4cC1Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:92:71:be:c2:86:7b:37:4f:92:79:e1:5d:d5:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Validity
Not Before: Sep 3 14:00:45 2026 GMT
Not After : Sep 4 14:00:45 2026 GMT
Subject: CN=7b73aeedc0cfeecb77819a093bbdd29de6f28049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:fb:f2:4f:16:66:a2:66:43:af:00:dc:49:
fc:7e:00:f0:08:b9:8d:55:a6:a2:4b:ac:db:a6:47:
80:6d:27:07:a2:a4:89:4a:82:d0:1e:6e:89:42:4e:
3a:2d:4f:0a:14:66:b3:35:80:cb:f4:57:eb:1e:7c:
32:3c:18:44:37:dc:5b:94:74:1f:4b:c1:78:b6:43:
f0:8b:d9:cc:90:d7:3f:18:70:cc:a3:e1:69:11:d2:
e6:09:b7:f3:0b:cb:bd:23:59:a1:6f:d8:44:f3:b9:
4d:ce:aa:10:cb:13:2a:4a:03:f2:08:f9:6a:f2:eb:
d5:68:b8:55:44:f0:9e:82:6c:1e:72:d5:de:00:51:
cb:59:d0:65:f3:a2:74:49:14:c7:ae:7c:97:d5:29:
da:c0:32:cb:ba:70:33:a0:52:9d:e1:b6:fc:9c:b9:
8d:89:22:ac:0d:95:27:b6:60:59:46:06:0b:8d:33:
a5:df:ab:10:10:73:ae:5f:64:1c:bb:87:0b:d6:d4:
94:ef:48:65:b6:21:1c:43:ce:c8:1a:bf:f0:33:20:
c3:2b:ef:58:78:6f:a3:39:39:94:b8:47:32:63:e8:
d9:c6:b8:b9:2e:25:b1:30:fe:09:d9:bf:a5:c4:aa:
fd:d1:ce:30:a6:47:d1:f3:3d:52:09:b1:b9:de:fe:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:AE:ED:C0:CF:EE:CB:77:81:9A:09:3B:BD:D2:9D:E6:F2:80:49
X509v3 Authority Key Identifier:
keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:9f:e7:99:91:9c:dc:52:08:c9:0e:fc:e3:bc:74:d0:33:
42:43:b3:03:b0:14:2c:8f:b5:18:7e:2d:d2:fe:16:ff:80:a2:
2b:23:df:d9:ce:31:69:c0:e3:7a:ae:31:9e:92:82:7e:f5:7e:
21:7f:bd:2b:61:b5:c9:02:1e:8d:8a:7a:07:91:71:d8:ac:5d:
02:48:77:20:9b:a9:f6:6b:45:50:12:23:ce:a5:e1:25:00:e2:
78:f9:c0:0d:9a:58:1e:41:8b:96:71:55:83:01:16:cb:d7:9d:
c4:a2:31:d9:1c:54:5f:da:b4:62:d4:c4:5a:ce:c3:3a:cd:5a:
09:59:d6:38:c2:2b:4f:af:84:56:21:e2:c1:9a:26:a3:8e:4c:
5d:88:ce:32:30:1e:b5:4d:75:af:ba:33:ad:2f:86:3b:60:15:
66:91:05:b7:85:72:e8:0f:f1:15:6f:56:7a:0e:e9:f9:a1:fc:
4a:ff:0a:09:39:13:cc:33:97:43:f5:f3:75:6a:0f:e6:08:1c:
e5:b8:5c:7a:88:ac:04:dd:82:81:da:2b:5c:7d:59:f9:43:e9:
57:05:db:dd:55:88:f9:19:7b:c6:65:75:d1:c8:f4:04:88:3a:
b4:3a:70:69:0b:f6:b7:f7:2d:28:39:bf:59:da:83:1c:04:46:
fe:07:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:37:46 2026 by rpki-client