Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: vXEPOXNfH0rv2FNp5aufLh6BBoV5LonBr1Pb50/furU=
Subject key identifier: D4:CB:F2:AB:C5:9A:A2:F3:BD:F5:00:22:0A:52:4D:F3:10:96:3D:A9
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019D28BBB11D25D2ED187194887739FF1064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
2: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
3: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=)
4: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: P1eBJmhoHrAzyt69bp9YQaDi+EVbMvV/ctun45L9R9w=)
5: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
6: Z9Q6TpYhUX-RgIKjZEgzzfOnnbg.roa (hash: GDfSQmfXjh6HIgHuPNpGSyxzN9pt2yQdSRBlkSy/ldA=)
7: bTOnRxNxvECcf7nHGrRBggKpVis.roa (hash: jNHyRUZLE/GNpUxOo+zEa+SVHdha0P98kuHnkgY64OA=)
8: jdLi2jo-vRnA8HhgEIQUXpdJ3GU.roa (hash: kJfk39O0SlyYYvFMHymb9HselcoiZgC/FdVLuUvtcKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b1:1d:25:d2:ed:18:71:94:88:77:39:ff:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=d4cbf2abc59aa2f3bdf500220a524df310963da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:80:be:4e:25:ae:d9:90:33:f5:26:ee:e1:
42:f1:c1:7f:2e:6b:91:a8:9b:c6:c4:b7:4f:d4:f6:
50:7c:4a:cf:ca:c7:99:ae:17:b1:13:6f:4f:dd:ac:
d2:8d:a3:db:6b:eb:66:86:2f:d4:f6:5b:51:e7:a3:
03:15:89:c1:b1:c5:f3:68:16:5e:3f:8a:5e:00:b5:
0a:29:57:df:79:eb:1e:d0:7d:e5:8b:63:99:36:af:
76:e4:92:a8:d9:76:2f:49:be:8e:0d:c8:96:2f:2f:
24:90:60:fc:ed:42:87:55:37:c5:3a:18:57:28:44:
4e:55:2b:87:1f:7e:10:db:e1:15:f7:a2:56:ee:12:
df:e4:a3:64:70:67:70:b2:b2:45:db:aa:cf:25:b2:
23:bf:c6:c5:f4:ee:47:e4:ba:8a:52:04:7e:03:c3:
3f:fb:11:b2:08:a0:b2:20:63:dd:17:ed:8d:26:64:
20:c7:c2:d7:69:c3:33:67:29:29:05:d7:f1:a9:be:
8e:07:f2:d4:09:6d:77:c4:f8:5c:ff:61:a1:05:10:
91:a5:80:6b:8d:65:1c:06:1c:6b:b7:a8:0a:04:84:
96:97:2a:0a:a3:e3:f8:3b:18:a3:1b:54:7e:7d:51:
23:ee:d0:fa:44:45:b8:c9:e5:4a:dd:cf:ff:c6:6d:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:F2:AB:C5:9A:A2:F3:BD:F5:00:22:0A:52:4D:F3:10:96:3D:A9
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:72:be:5e:d5:a0:26:b4:b3:00:1a:2d:e3:83:75:ca:7d:3f:
34:ea:1a:7e:3d:a5:90:92:51:ae:27:3c:d9:23:56:c9:b9:b3:
22:19:81:c7:17:2f:1b:22:5b:1e:26:80:5b:2a:7a:e0:42:b0:
5a:92:c0:8e:37:43:95:9c:7d:95:73:2e:9c:1a:03:e3:9c:04:
43:4e:59:18:a0:c6:1a:e7:45:a9:58:fc:89:81:65:30:af:39:
91:fd:6b:72:6c:e0:0b:a6:d4:81:67:5e:43:a6:c3:17:40:13:
67:09:e3:f4:26:1c:57:a6:5b:53:94:0e:e4:6b:b6:9c:75:87:
d8:3f:c1:69:d9:89:b1:f9:ae:50:11:e6:38:04:9c:e7:ea:20:
eb:16:cb:50:b9:f8:31:ee:7f:e1:9c:d5:90:71:dd:67:2a:25:
0f:f1:3a:17:88:80:8d:66:56:b2:46:b6:9d:55:ba:0d:21:1e:
84:5d:73:2e:30:a6:61:e1:cd:79:de:49:42:d1:e6:9e:ab:0a:
64:ca:e2:6e:16:bb:7b:1e:20:e4:00:91:1e:40:57:90:d0:da:
24:29:10:49:b1:85:10:f0:8a:78:55:6c:d0:60:ad:b2:0d:ba:
70:76:ef:94:27:06:ed:0d:db:ec:60:fa:46:51:a8:76:e8:b3:
17:42:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:03 2026 by rpki-client