Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: M5yf/5z6emKF+ZcBCYyU5gZZLuz+3S/DvZt+AgS8nDg=
Subject key identifier: FB:C8:08:C1:C0:11:D8:89:54:0A:7A:E6:A0:1C:55:8F:70:BE:76:FE
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 019F9692ED44AD79E32172E7A524547CFAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0EB2
Signing time: Sat 25 Jul 2026 00:00:39 +0000
Manifest this update: Sat 25 Jul 2026 00:00:39 +0000
Manifest next update: Sun 26 Jul 2026 00:00:39 +0000
Files and hashes: 1: 44IrAvvEKSWJ98iqKpkSKb-6qZQ.roa (hash: U4fdOWuwUY9/P9u0/ZElUYWz4NntxpKIR4cfbGlP9vk=)
2: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: 7EmIxk12alYtRbpzAvjDPONjquSPgK23jKGBclEoiho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:92:ed:44:ad:79:e3:21:72:e7:a5:24:54:7c:fa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Jul 25 00:00:39 2026 GMT
Not After : Jul 26 00:00:39 2026 GMT
Subject: CN=fbc808c1c011d889540a7ae6a01c558f70be76fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:b3:58:45:cb:e9:38:aa:c3:b6:ad:99:44:
e9:a4:32:e5:ac:55:eb:8a:24:5b:77:8a:63:9a:16:
cd:8e:3e:c5:ad:d9:9e:65:37:cf:10:44:a1:e5:0f:
bd:58:b5:9a:26:9b:70:4d:b6:01:98:11:13:16:77:
84:72:f5:17:81:f2:7d:39:53:2a:46:ef:72:83:43:
5d:78:03:28:8a:dd:aa:9c:0d:e2:ac:78:0d:e1:50:
30:fd:62:7e:57:11:af:2f:11:e1:a7:4b:df:0a:ab:
19:73:14:7e:6c:06:84:57:94:7e:b6:19:eb:2c:0b:
7d:b4:c6:82:97:61:4b:0c:f0:2f:1e:d3:e5:ed:17:
69:73:88:4b:26:92:54:38:01:02:07:e9:fe:6b:57:
0a:59:94:cc:c7:2a:ff:17:59:bb:e1:93:52:21:ec:
74:5f:4f:51:a9:78:55:3e:be:7f:a4:0e:85:a3:40:
df:6e:db:9c:cb:c8:71:cc:6a:1a:8e:19:96:e2:e0:
cd:36:a8:b7:1d:f2:eb:cc:b8:fc:94:15:4a:38:16:
b4:8c:0f:70:27:9a:07:40:c0:91:c6:ec:6a:0c:df:
66:46:d9:9c:3b:f9:8a:c8:ca:58:c2:4a:41:e1:43:
14:31:a1:c1:4b:1f:4d:46:fd:c2:96:0b:28:b4:03:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C8:08:C1:C0:11:D8:89:54:0A:7A:E6:A0:1C:55:8F:70:BE:76:FE
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3c:91:22:a6:a5:48:17:ed:28:99:97:7f:19:39:ab:df:14:
f5:de:e5:72:d8:c9:4b:d8:c0:cc:63:e5:88:e6:90:2b:73:fc:
98:3e:56:08:3c:a2:55:14:33:c9:8a:d8:69:75:8e:c3:94:93:
8c:36:22:db:2f:ef:ed:66:92:e5:2d:bc:85:bc:8f:b4:71:5e:
ca:e1:05:1b:a6:c9:5a:fe:5a:ca:74:ec:33:66:25:9b:e5:c9:
91:7a:9c:17:c7:70:69:d2:18:63:fc:14:00:92:82:8f:52:68:
e0:98:82:8b:98:42:6b:45:c4:7c:d3:ba:39:17:0e:c7:1b:a8:
f1:49:e0:46:c1:46:b2:0d:a3:da:4c:f5:4c:a6:08:fd:05:b3:
a0:5a:d8:8f:ad:39:71:45:a7:ff:f5:7e:9a:bb:94:47:0e:47:
ee:ab:90:b9:11:7f:45:60:19:29:30:a7:e2:93:18:7f:73:bf:
87:d0:31:ff:b2:8a:67:19:8f:6f:bd:c7:be:30:38:c7:e6:07:
aa:f9:13:c3:81:bd:ba:2b:97:56:91:db:d8:5d:6a:ed:74:c3:
42:62:42:4e:8f:4f:1d:c2:d3:f2:6d:12:77:03:93:23:3d:44:
3b:0a:76:66:b5:a8:a8:37:f7:b3:55:80:6c:ae:49:24:e4:15:
3d:0b:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:15:49 2026 by rpki-client