Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: brs6NsDAIhdZPBoo3OLh8Ij4ajsT1NdSbFq4vTp1c6U=
Subject key identifier: F0:36:48:31:05:D7:0E:43:C1:23:BC:00:56:5C:12:18:34:86:D5:79
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 01A1193DD3D5668F2969AFE5191736179B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 028F
Signing time: Thu 08 Oct 2026 02:00:44 +0000
Manifest this update: Thu 08 Oct 2026 02:00:44 +0000
Manifest next update: Fri 09 Oct 2026 02:00:44 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: VBaHZwxIYFhSnLK1hIHqvfnJg9U+o1aFztCE/uUJEjA=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:d3:d5:66:8f:29:69:af:e5:19:17:36:17:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Oct 8 02:00:44 2026 GMT
Not After : Oct 9 02:00:44 2026 GMT
Subject: CN=f036483105d70e43c123bc00565c12183486d579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:5b:d8:ca:e3:fc:be:f3:57:48:a8:b7:36:
5d:4e:24:f3:ac:87:17:77:cf:0b:8a:2b:22:72:96:
03:7b:9b:7e:3e:2c:58:7a:01:67:3d:e4:fb:6d:8d:
60:56:a1:e9:df:14:84:93:00:76:83:8f:56:0b:e2:
fa:80:9b:d2:c4:10:0c:fd:14:c7:19:03:a8:10:ed:
90:e9:82:ea:5e:07:37:b7:ca:f3:b4:f3:31:d8:70:
54:ea:a7:0d:24:ef:e0:85:3e:03:0e:fe:83:0f:1a:
1c:56:89:4e:e9:74:ee:f6:79:d9:3c:22:07:a6:6c:
3d:00:48:a6:1a:85:e5:9b:03:f6:50:47:a7:69:53:
de:e8:f9:d9:8a:72:eb:07:4c:4b:a3:c3:30:ba:ff:
b5:8a:4b:31:dc:e4:fe:da:21:cd:5a:f8:18:2c:f4:
c2:74:c2:f4:4e:c0:55:6a:36:57:f7:e0:df:dc:f4:
b5:f5:d9:00:f0:22:36:2e:58:61:fe:4f:2e:08:a1:
a7:82:1e:eb:ac:6a:ca:cc:c0:b7:04:89:97:82:e9:
32:8c:eb:44:14:fd:94:a2:48:0b:69:30:95:89:6e:
26:82:72:f2:6a:6f:13:99:67:b4:2f:d3:9f:f0:69:
cc:2f:a9:dd:59:b1:21:c9:83:83:a0:50:91:24:2b:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:48:31:05:D7:0E:43:C1:23:BC:00:56:5C:12:18:34:86:D5:79
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:9a:8f:dc:d0:fa:dd:0b:a4:ce:33:5b:77:87:c0:ec:72:
a4:35:be:ba:a8:46:4d:4e:11:36:f2:2c:c2:de:4c:ae:cf:97:
34:1e:7c:90:df:0a:e1:5f:27:e8:aa:03:07:d2:9d:40:6b:6a:
1b:95:51:8d:fc:44:02:92:dc:91:7a:be:3c:76:95:87:bf:6f:
da:8e:e2:59:aa:eb:37:f5:30:f6:3c:a9:e8:2f:6e:7b:7b:33:
77:13:1b:68:8e:81:a7:91:d6:54:c4:51:0c:35:51:8b:76:76:
ad:61:59:72:b3:d6:ac:89:90:d1:b3:1d:ab:f4:01:58:f5:98:
89:b4:a2:e7:10:e6:1d:20:03:05:72:cc:cf:1c:64:ac:9b:39:
c0:c2:a2:32:a3:60:60:9b:86:f6:1c:97:83:c1:3d:6f:f1:79:
8f:22:ec:f2:46:ec:00:52:48:46:3c:ea:db:e3:73:b1:35:d2:
74:5e:66:07:80:83:f9:d9:34:71:f1:55:3f:d1:5b:8b:77:69:
dd:fc:5b:47:92:2e:37:b4:7e:89:22:ad:16:cd:2a:ba:3a:c3:
50:e3:b4:53:a9:24:b8:82:04:5d:a2:f8:d8:b9:bd:2d:fa:c8:
c1:e5:e2:04:1c:20:6c:8a:6c:0c:c6:32:8f:4b:67:d6:ef:87:
fb:19:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:12:30 2026 by rpki-client