Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: zkZGTaBvF/H9fozYeIaQ9pZcY3d2bM21WQhaTMutj44=
Subject key identifier: A9:20:E0:7B:54:26:2D:28:05:FB:FB:48:5D:A0:18:49:32:90:3A:CB
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 01A1076ED961AA7B652DB6F0C6939B0B4D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0F71
Signing time: Sun 04 Oct 2026 15:01:07 +0000
Manifest this update: Sun 04 Oct 2026 15:01:07 +0000
Manifest next update: Mon 05 Oct 2026 15:01:07 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: y9JuZIWRBgSKghvbYgiz1FaEqEm7CeliizQgF+tHf+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:d9:61:aa:7b:65:2d:b6:f0:c6:93:9b:0b:4d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Oct 4 15:01:07 2026 GMT
Not After : Oct 5 15:01:07 2026 GMT
Subject: CN=a920e07b54262d2805fbfb485da0184932903acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7e:4d:c5:14:b5:5d:eb:a9:8c:97:a3:14:1a:
ef:27:81:e0:0c:10:a8:fd:86:e1:89:d4:a5:80:3a:
bf:0c:f0:d6:e4:45:f2:e5:a2:04:c5:3c:e2:9b:f4:
78:d4:c8:99:ae:41:ef:50:3d:a7:b6:78:7a:f3:8f:
ff:09:83:2c:12:f9:30:6c:f5:7e:7a:52:a0:61:89:
38:80:2a:fc:79:af:b9:72:48:27:bd:01:f7:3c:7d:
8e:3a:44:64:ac:87:b0:cc:2a:5f:86:0f:93:be:82:
18:e1:7c:4a:c9:1b:4c:d1:f9:3f:92:a0:47:2d:0c:
bc:c3:ab:65:c2:61:18:a1:7e:55:33:4c:d0:f2:af:
0e:a2:39:ee:15:05:a3:93:8f:91:5d:8a:74:42:c0:
b1:ab:e4:af:f7:1f:d4:5b:2c:11:42:11:0f:60:40:
ab:e8:e2:0c:27:51:d0:da:3a:a2:ff:4c:68:c1:56:
ef:eb:b4:53:4f:44:e6:c8:2d:3d:79:31:67:8a:16:
c8:de:ac:84:52:d7:45:89:cc:6c:db:05:ec:78:e2:
90:df:e8:5a:2a:c6:8d:04:5a:ff:ff:e9:05:2f:e2:
b1:7c:a2:6e:0e:f7:de:85:cc:eb:ee:de:fb:dc:37:
53:69:fd:98:0c:d0:c2:0a:73:f1:c5:08:84:b9:be:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:E0:7B:54:26:2D:28:05:FB:FB:48:5D:A0:18:49:32:90:3A:CB
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:bd:bd:ea:8d:77:9d:00:72:f3:4a:e0:f2:42:2f:83:32:
38:42:21:c4:46:aa:13:15:31:35:cc:40:21:e3:21:ae:8c:40:
e5:1e:60:de:bb:7e:5b:ce:8f:e9:33:cd:de:07:4d:21:27:27:
e8:dc:93:b0:f9:c4:7f:ca:90:1a:34:2b:b9:58:c5:5a:b6:ca:
88:03:3c:41:77:8a:bb:3e:3c:7f:9f:db:15:bc:74:d8:45:37:
cd:78:da:b6:d1:91:48:98:8d:5b:76:f4:ae:f9:0e:d3:25:22:
98:c1:c8:8f:73:c1:54:52:c6:56:53:15:51:f9:be:5f:00:de:
31:2a:88:0a:30:22:ed:35:42:e3:23:80:5f:ea:46:1f:f9:0b:
51:61:70:16:ee:ef:b9:38:3e:c6:cb:59:df:3d:7f:9b:12:a2:
b7:f8:9b:2d:0d:af:32:b2:4a:95:9f:51:c0:a3:f8:9c:0b:57:
37:b2:d4:54:93:76:53:a1:05:95:eb:69:ac:22:c9:38:3f:9a:
2b:e3:dc:ce:b6:95:2e:98:20:6e:b2:37:45:b5:83:59:f0:43:
eb:2e:8a:40:34:a2:64:7e:ee:29:4a:7f:c6:25:98:41:a9:e8:
43:51:2b:df:af:61:48:15:c0:29:18:96:08:3d:44:38:60:a3:
55:be:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:32:26 2026 by rpki-client