
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
File: Mt2KF_xnKHG58gOVre24XQNeqkM.mft (raw, json)
Hash identifier: rKp3Jb1sr43nuvlI7bUxtOlIX/JgD85Wvg0Q6eD+hx0=
Subject key identifier: C4:CC:B6:C1:5E:F8:2A:8E:12:51:A4:EA:09:4F:EB:A2:B3:BD:A0:CE
Authority key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
Certificate issuer: /CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Certificate serial: 019D254C9B2F3E65AAAD81C2BA892F70624F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
Manifest number: 83
Signing time: Wed 25 Mar 2026 14:01:10 +0000
Manifest this update: Wed 25 Mar 2026 14:01:10 +0000
Manifest next update: Thu 26 Mar 2026 14:01:10 +0000
Files and hashes: 1: Mt2KF_xnKHG58gOVre24XQNeqkM.crl (hash: ugwaqGRcIiAbNBft2BLgKvb5ZGlTGrN+MAWtl38VvK4=)
2: iJp_w0Gl7GfcqdbyhdzmWteUnPM.roa (hash: /auo9AQw4p5lVFg1b3B3tCWgJ3vnfszd/oteep42U3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:9b:2f:3e:65:aa:ad:81:c2:ba:89:2f:70:62:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32dd8a17fc672871b9f20395adedb85d035eaa43
Validity
Not Before: Mar 25 14:01:10 2026 GMT
Not After : Mar 26 14:01:10 2026 GMT
Subject: CN=c4ccb6c15ef82a8e1251a4ea094feba2b3bda0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:4f:13:57:d9:02:7c:7a:20:3c:09:30:9f:
fc:bf:19:bf:c1:dd:12:07:f8:2e:18:95:d7:e0:e3:
a8:61:4b:53:59:66:80:7b:6d:d0:e3:2e:6e:98:1b:
b7:8a:85:3f:9e:5d:50:21:c9:3c:e0:c7:47:a4:ba:
d4:6f:2c:4e:ae:ac:ea:8b:6a:cb:47:fb:b6:95:d9:
42:3e:b8:b5:f3:b6:80:06:c0:48:4d:64:59:db:97:
35:f9:93:83:cc:8b:70:a2:ca:01:b0:31:e1:d7:56:
c1:4d:c2:55:aa:06:28:2c:97:e6:bb:93:1a:58:08:
d2:a9:3f:07:10:47:82:75:d5:23:f0:c4:21:b0:6c:
c9:33:32:60:1f:4f:4d:09:0a:d3:c9:f8:f7:33:88:
26:04:d0:d7:57:1a:e3:20:8a:71:64:bf:2c:d0:8c:
58:29:f5:75:c1:f8:e6:68:8d:5f:06:71:84:fa:fe:
e4:e2:75:94:47:59:a2:1a:d9:61:a8:a8:5e:8d:fd:
c0:97:cd:9d:73:8b:2d:3e:29:ab:56:9d:59:00:2a:
7b:b3:a9:19:34:ef:7b:bf:dc:cf:81:18:ec:79:08:
c1:d8:05:16:bc:24:fa:bd:bc:a4:03:df:bc:29:b8:
48:a4:60:2c:5d:8f:38:2b:44:77:a7:b5:75:e2:68:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CC:B6:C1:5E:F8:2A:8E:12:51:A4:EA:09:4F:EB:A2:B3:BD:A0:CE
X509v3 Authority Key Identifier:
keyid:32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:85:d6:38:07:d0:6d:23:a5:13:34:a6:7f:f3:72:0b:88:a8:
51:b6:d6:96:94:e2:b9:3a:46:d2:da:0b:ce:b5:e2:e6:a0:95:
eb:26:02:74:84:48:0c:71:37:aa:de:d0:89:af:0d:7d:1b:29:
89:c8:32:3b:0c:bd:e6:e1:21:8f:06:4d:d2:b4:f1:11:75:dc:
24:02:69:bd:a1:89:3c:dc:b5:e9:4f:1d:e6:e3:ec:07:e3:27:
16:a6:1c:03:35:8f:40:32:75:da:72:d1:b9:87:83:30:ee:23:
f4:e6:46:07:e2:38:b1:8f:c1:c5:26:0b:b6:c5:03:e0:48:bc:
ed:d3:7a:25:49:3b:c6:01:ca:68:28:50:84:6f:df:2f:65:28:
43:13:8e:fa:d0:75:89:7c:da:8d:47:f2:11:ae:eb:7d:36:55:
35:f5:1d:39:d5:22:34:9c:e7:77:fe:d5:66:7e:e0:fb:60:74:
07:62:c5:3e:9b:d0:84:7c:b3:0e:87:72:d8:4c:c8:28:ec:96:
36:1a:30:6d:ba:df:58:bd:c7:c6:f6:ac:7c:b4:79:e3:d4:c6:
07:32:e9:8e:49:c5:5b:93:fa:ce:30:fb:38:29:e7:08:59:fe:
59:a6:15:60:0f:5e:da:78:79:11:71:fa:de:86:63:bc:88:3a:
b9:49:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:17 2026 by rpki-client