Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: q8YtADAQTSHIW8OHvVJ0qzE0pOJkgXNg/GPjT2lScvE=
Subject key identifier: 0D:9D:AC:F7:46:04:FD:78:EC:A6:CF:AF:67:51:FD:2C:30:64:C8:F1
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 019E205AA90871E64AC8E345B54037DBCB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 0105
Signing time: Wed 13 May 2026 08:01:12 +0000
Manifest this update: Wed 13 May 2026 08:01:12 +0000
Manifest next update: Thu 14 May 2026 08:01:12 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: dD8k82dlD+voQMmkixqyCIKO1POW/KANU/peJDY6rnY=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:a9:08:71:e6:4a:c8:e3:45:b5:40:37:db:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: May 13 08:01:12 2026 GMT
Not After : May 14 08:01:12 2026 GMT
Subject: CN=0d9dacf74604fd78eca6cfaf6751fd2c3064c8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:37:f8:04:55:fb:79:08:88:63:77:23:bb:
cc:3c:e2:80:92:e8:b3:5d:3e:b8:1d:70:62:87:1e:
55:34:92:10:8d:ac:10:37:85:14:c9:b5:a0:26:a2:
61:bf:3f:ac:7d:f4:22:52:06:7e:9c:83:64:5d:6a:
fe:69:12:36:80:0a:eb:df:de:ee:39:ff:eb:c4:3d:
80:17:d1:f2:91:7c:2b:a7:ae:9f:e9:1d:88:af:4c:
37:3e:df:26:68:28:91:b1:71:f8:48:10:a2:e8:98:
d7:81:2c:2b:37:fa:f1:bf:24:73:ae:91:5c:dc:25:
7b:bd:e5:63:89:c0:55:78:a2:cc:f2:5a:5c:07:0b:
cd:12:36:28:d5:27:bb:c7:57:30:25:57:0a:6f:d5:
97:67:15:c7:f2:c9:d2:a5:b6:d0:d6:dc:7c:3b:ed:
de:41:53:fa:b2:47:6e:93:ac:7c:49:da:06:9c:c4:
d5:a9:38:8d:7d:b5:c8:9a:93:6f:68:9e:6c:6c:7d:
1a:cb:a8:f7:b1:a3:b7:dd:3b:0e:4d:05:24:e1:79:
db:ee:c9:9c:26:f3:da:3a:96:24:d6:ce:30:4d:b3:
1e:da:94:2a:1a:76:c1:81:9b:1c:f1:e8:47:c7:c0:
a9:11:39:ab:5d:22:40:3c:ac:82:76:ef:6a:22:af:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:AC:F7:46:04:FD:78:EC:A6:CF:AF:67:51:FD:2C:30:64:C8:F1
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:24:3c:29:0f:e7:84:81:2f:4e:f9:13:db:a3:38:3b:17:cc:
fc:fa:a4:cb:52:a1:5d:44:c8:2b:11:a2:63:a9:dc:21:7f:51:
9f:7a:d5:a3:2c:74:95:d4:cb:a4:e0:54:2a:85:c6:ad:e1:38:
85:5b:df:42:68:71:b0:79:61:19:10:c5:3d:bb:14:2a:95:b0:
e4:bf:4d:d7:35:e8:1f:7b:34:7b:67:73:d2:44:81:ca:e6:dd:
b3:62:85:b1:c7:7e:54:0f:19:f7:c6:fb:aa:7f:0d:f4:5a:8b:
8b:44:82:00:41:1a:f4:8b:f6:2b:91:50:31:49:fc:b9:92:82:
e4:b1:d2:7f:7e:2e:26:42:fc:41:c3:31:63:ea:50:2c:1e:52:
34:d5:93:4d:34:f5:79:bf:fe:c5:f1:aa:5d:06:3d:57:2c:c0:
19:fd:bd:9f:a8:09:22:4c:d8:3e:ca:1a:73:5b:b3:50:5b:08:
2c:94:69:d5:b9:b9:65:8b:02:45:c5:33:ea:a8:35:9b:82:68:
02:55:4e:27:7b:c9:2a:0e:61:81:b0:65:09:9a:fb:53:5d:c8:
bc:89:cd:1b:f0:d4:88:09:c9:b6:11:57:8a:35:33:19:72:5a:
ed:d4:be:97:32:3a:d6:30:77:5b:18:12:4b:8d:d4:11:ea:28:
e4:a4:0e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWqkIceZKyONFtUA328swMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZGQ4YTE3ZmM2NzI4NzFiOWYyMDM5NWFkZWRiODVkMDM1
ZWFhNDMwHhcNMjYwNTEzMDgwMTEyWhcNMjYwNTE0MDgwMTEyWjAzMTEwLwYDVQQD
EygwZDlkYWNmNzQ2MDRmZDc4ZWNhNmNmYWY2NzUxZmQyYzMwNjRjOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbQ3+ARV+3kIiGN3I7vMPOKAkuiz
XT64HXBihx5VNJIQjawQN4UUybWgJqJhvz+sffQiUgZ+nINkXWr+aRI2gArr397u
Of/rxD2AF9HykXwrp66f6R2Ir0w3Pt8maCiRsXH4SBCi6JjXgSwrN/rxvyRzrpFc
3CV7veVjicBVeKLM8lpcBwvNEjYo1Se7x1cwJVcKb9WXZxXH8snSpbbQ1tx8O+3e
QVP6skduk6x8SdoGnMTVqTiNfbXImpNvaJ5sbH0ay6j3saO33TsOTQUk4Xnb7smc
JvPaOpYk1s4wTbMe2pQqGnbBgZsc8ehHx8CpETmrXSJAPKyCdu9qIq8oswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2drPdGBP147KbPr2dR/SwwZMjxMB8GA1UdIwQY
MBaAFDLdihf8ZyhxufIDla3tuF0DXqpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMt
YzE3ODc0OTllZjMzLzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82MzViMWEtNTExOC00ZDljLTgxMzMtYzE3ODc0OTllZjMz
LzEvTXQyS0ZfeG5LSEc1OGdPVnJlMjRYUU5lcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliQ8KQ/n
hIEvTvkT26M4OxfM/Pqky1KhXUTIKxGiY6ncIX9Rn3rVoyx0ldTLpOBUKoXGreE4
hVvfQmhxsHlhGRDFPbsUKpWw5L9N1zXoH3s0e2dz0kSByubds2KFscd+VA8Z98b7
qn8N9FqLi0SCAEEa9Iv2K5FQMUn8uZKC5LHSf34uJkL8QcMxY+pQLB5SNNWTTTT1
eb/+xfGqXQY9VyzAGf29n6gJIkzYPsoac1uzUFsILJRp1bm5ZYsCRcUz6qg1m4Jo
AlVOJ3vJKg5hgbBlCZr7U13IvInNG/DUiAnJthFXijUzGXJa7dS+lzI61jB3WxgS
S43UEeoo5KQOEg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:26:52 2026 by rpki-client