Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
File: McdRr8ueHJZqz3YmDJA6K7GvYC4.mft (raw, json)
Hash identifier: DgHqACNc1YjBn3GSSEp9DLE0MzlSUDhiVTZoYAOGB+Y=
Subject key identifier: BB:5A:DD:5D:17:3C:A6:BE:3D:88:C8:70:B5:8F:74:2B:85:E4:7D:08
Authority key identifier: 31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E
Certificate issuer: /CN=31c751afcb9e1c966acf76260c903a2bb1af602e
Certificate serial: 01A1807445CBBE865EBF85343049AFF4803A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
Manifest number: 01A0
Signing time: Wed 28 Oct 2026 03:01:06 +0000
Manifest this update: Wed 28 Oct 2026 03:01:06 +0000
Manifest next update: Thu 29 Oct 2026 03:01:06 +0000
Files and hashes: 1: McdRr8ueHJZqz3YmDJA6K7GvYC4.crl (hash: F5zn9Rv8xZobU3vvByb7LiDH88AxtQD+nwBiP3nlazc=)
2: d-7Ne4WZes1wekph0cprs11cW_0.asa (hash: cBpioPZmstqTqXBIyQHOqca+O/OfR+4YIKoBZItPJDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:45:cb:be:86:5e:bf:85:34:30:49:af:f4:80:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c751afcb9e1c966acf76260c903a2bb1af602e
Validity
Not Before: Oct 28 03:01:06 2026 GMT
Not After : Oct 29 03:01:06 2026 GMT
Subject: CN=bb5add5d173ca6be3d88c870b58f742b85e47d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:b3:01:b4:6d:d5:6e:fd:76:c7:5b:3c:ad:
3e:f0:8a:79:a7:65:a4:ef:62:4f:53:6b:33:56:18:
f9:6e:14:e5:96:57:8c:ac:01:4d:8f:1c:6f:92:f1:
a8:00:6e:fe:b0:4c:24:d5:91:c8:b8:6d:da:18:5d:
fd:7c:b4:f8:9c:19:36:90:8e:59:eb:73:6b:52:9e:
d0:e7:92:3b:db:a2:09:b1:13:46:8a:75:a5:08:c3:
db:d4:4e:02:62:7f:15:0c:a9:61:ea:91:38:3b:7e:
db:ad:31:35:af:1b:08:ca:c9:78:04:1d:54:41:93:
48:65:72:1c:12:4e:04:06:25:d6:42:b4:13:26:1c:
92:49:2a:34:49:07:22:b1:c5:3e:0f:e9:4f:b7:4b:
60:1e:a7:35:e6:fa:88:7a:f2:41:f4:09:11:f4:89:
37:c4:f7:53:61:42:0a:57:f1:60:9f:02:39:00:16:
7c:fa:fc:5b:0f:77:14:41:fb:e2:8d:9a:d2:2f:ee:
fd:8c:dc:8d:d3:83:1f:de:1d:fc:66:65:14:7f:45:
98:4b:f4:54:9c:b4:67:a3:cf:ee:9d:d6:00:cd:ee:
8c:cc:c4:7e:de:ff:b1:70:14:60:df:09:6d:91:94:
d0:99:88:ed:f2:63:75:f6:c6:9e:1c:30:8d:c8:5e:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:DD:5D:17:3C:A6:BE:3D:88:C8:70:B5:8F:74:2B:85:E4:7D:08
X509v3 Authority Key Identifier:
keyid:31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a5:e1:c8:8c:5c:d7:b3:c5:fd:a4:3a:a8:bb:77:62:9f:66:
3d:59:5e:1c:2d:b1:0f:3d:f7:d8:1e:2b:f7:35:8b:24:66:8a:
51:bb:e8:89:62:94:f5:38:5e:8e:b3:bc:b6:65:7b:17:2d:61:
e5:15:06:53:2e:1e:f5:5d:d0:09:d5:ee:7a:03:69:7a:df:a0:
a6:7c:d5:87:98:4c:4e:97:e5:2f:d8:79:e0:97:ac:3b:68:51:
c3:43:ec:a1:b5:4a:6a:3c:09:2a:9c:a3:7d:e8:0c:aa:ae:b4:
81:d0:03:3a:92:12:b0:6d:b4:e4:a3:fc:6f:eb:82:ad:e7:e4:
86:ed:1e:45:f0:e7:f8:07:0d:16:d2:74:13:4d:93:9e:bd:c4:
35:8b:2c:26:f8:bc:46:cb:68:cc:56:ba:01:6d:06:3d:eb:11:
44:3d:8c:10:61:1b:cf:f6:a4:2d:f4:57:7b:ae:ba:57:b1:ef:
f0:43:b2:4b:fa:e2:6a:1b:29:e9:ab:85:b9:58:04:9c:ca:ea:
3f:c5:c9:4c:cd:1a:ff:37:b0:a4:dc:ef:17:8b:65:1d:75:93:
5c:6b:00:c4:95:ed:a0:9a:61:38:66:fc:75:ba:c8:1c:33:19:
80:08:76:b1:a9:2c:33:98:0d:7c:fe:8a:fb:6c:93:22:a8:83:
dd:18:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:31:12 2026 by rpki-client