Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
File: mcFmTbj325Ln1EZQdic5W8EH3V0.mft (raw, json)
Hash identifier: jVw7AMLnhP+WjLk0vUfCE4HHlpkb8/ElLc6s0poWb1U=
Subject key identifier: 10:75:13:3B:B9:7B:CB:EE:1E:95:06:92:30:86:1A:B7:CE:10:F1:1F
Authority key identifier: 99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D
Certificate issuer: /CN=99c1664db8f7db92e7d446507627395bc107dd5d
Certificate serial: 01A0FBA1C0E2313AF48F7052283DB0C94002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
Manifest number: 8A
Signing time: Fri 02 Oct 2026 08:01:16 +0000
Manifest this update: Fri 02 Oct 2026 08:01:16 +0000
Manifest next update: Sat 03 Oct 2026 08:01:16 +0000
Files and hashes: 1: L3SCpmXJBeENQlngFVsPO7y4j9I.roa (hash: TNxBSmMFYjhX4xx6VIgUZfTdujBVV7wlaoUOw5FQgSs=)
2: mcFmTbj325Ln1EZQdic5W8EH3V0.crl (hash: 1+jPlinyHMdGs5mWdkJxp3bS3sHmN6r4hFs+8xO+itg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:a1:c0:e2:31:3a:f4:8f:70:52:28:3d:b0:c9:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99c1664db8f7db92e7d446507627395bc107dd5d
Validity
Not Before: Oct 2 08:01:16 2026 GMT
Not After : Oct 3 08:01:16 2026 GMT
Subject: CN=1075133bb97bcbee1e95069230861ab7ce10f11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:90:e8:47:3c:e5:7c:58:dd:dc:d8:10:d7:35:
bb:8f:34:e9:bd:6a:14:d0:bf:fc:7d:37:06:fa:16:
4a:92:98:fd:17:0c:16:c2:d0:76:b1:ed:ad:d6:c7:
49:6d:06:34:71:db:d3:73:20:e3:0e:30:03:09:91:
44:1d:a1:20:cf:57:ef:a9:4b:10:d8:34:0f:7f:d2:
ad:4d:f2:61:68:12:5d:ed:33:06:17:0d:ea:ae:1f:
de:85:74:b4:bd:11:38:3a:8a:bb:66:69:b3:10:39:
03:01:16:7d:a1:29:af:f1:c1:29:f1:8b:85:2d:d9:
6e:40:61:8b:db:d8:aa:9d:da:40:dc:7a:95:ac:cd:
9c:38:9d:91:49:91:b9:3b:28:2d:f0:1f:d7:01:40:
46:84:63:1b:a0:e4:84:2f:69:85:1f:f6:d2:2c:70:
7d:0b:9c:99:de:75:4a:1a:a4:b8:2f:fc:66:4c:80:
33:9f:64:a4:ab:d8:34:54:23:0c:dc:a7:f2:b1:0a:
7b:7d:e8:40:55:8e:66:db:dd:18:ae:0d:94:94:26:
ed:0e:b3:97:eb:0e:0a:38:b5:c4:ce:77:0a:68:96:
2e:87:6f:08:6a:30:c2:45:f7:ee:a7:c0:38:38:b6:
3d:0e:23:91:a9:4c:02:8f:de:c4:9e:37:ae:ee:79:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:75:13:3B:B9:7B:CB:EE:1E:95:06:92:30:86:1A:B7:CE:10:F1:1F
X509v3 Authority Key Identifier:
keyid:99:C1:66:4D:B8:F7:DB:92:E7:D4:46:50:76:27:39:5B:C1:07:DD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcFmTbj325Ln1EZQdic5W8EH3V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9755f2-bd2d-4e52-8ae7-85b00203b2a2/1/mcFmTbj325Ln1EZQdic5W8EH3V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:77:9b:c3:52:c9:c6:67:8e:62:6e:02:04:46:0f:54:41:
83:30:13:fd:a3:dc:31:d0:58:bc:4c:67:95:7e:99:43:01:36:
64:4f:da:56:b2:ec:71:97:e3:47:0b:db:77:43:0b:bf:8d:c0:
a3:46:9f:10:59:b6:43:d0:4a:07:24:d4:25:e2:df:be:d9:cb:
a2:5e:c8:8b:07:af:44:de:f0:42:ef:4e:23:ce:d8:d4:a7:67:
ab:f5:9a:c5:76:a6:2c:00:93:55:71:73:71:74:b5:14:50:24:
77:0d:4d:0f:36:62:b2:e3:36:6f:b8:b3:42:4a:f9:82:fd:79:
d4:4e:49:0d:58:34:e2:17:a5:7d:92:ad:4a:65:e0:a0:8a:32:
58:5a:c5:21:c8:a2:1f:bf:77:58:5b:e3:b4:f3:ac:0c:bb:58:
54:c8:50:c4:8f:bf:61:cb:bf:61:e0:c0:d2:b8:55:6e:d2:82:
08:61:18:f1:de:df:f5:ed:82:d7:8a:d4:fe:8c:ec:76:ef:13:
2b:16:87:c5:35:a0:b6:ce:8d:11:84:6e:85:9a:7b:6e:ff:0c:
08:24:b9:72:ee:b8:ab:fe:f5:25:df:29:f5:03:bd:80:75:da:
34:36:06:fa:4e:31:96:e4:6b:e1:93:12:13:fe:1d:14:00:52:
41:a3:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:56:04 2026 by rpki-client