Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
File: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft (raw, json)
Hash identifier: WNfR9J9Zn6pFsseojzSar36uy4SKFHtVOajYuyPpF9g=
Subject key identifier: 98:6C:07:C0:F3:54:98:DA:F8:1C:AF:4F:96:43:2E:54:60:0F:18:D5
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Certificate issuer: /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial: 01A119ABDB3FA814DB3EC9130FE80F7F7445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
Manifest number: 0232
Signing time: Thu 08 Oct 2026 04:00:55 +0000
Manifest this update: Thu 08 Oct 2026 04:00:55 +0000
Manifest next update: Fri 09 Oct 2026 04:00:55 +0000
Files and hashes: 1: MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl (hash: o5If0SnWE09L282Er5uQLREacDl7PhyvwURi6Gtwta4=)
2: qUd2LDyRm3Mc4QqBTCIWUHxm9KY.asa (hash: JWJWQndeDRgVNRYgTaVF4Zb3Aiwbr3beQwuqCBRvJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:db:3f:a8:14:db:3e:c9:13:0f:e8:0f:7f:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
Validity
Not Before: Oct 8 04:00:55 2026 GMT
Not After : Oct 9 04:00:55 2026 GMT
Subject: CN=986c07c0f35498daf81caf4f96432e54600f18d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:82:84:f2:c4:42:30:ce:ad:cb:59:ad:ca:
11:d2:76:8b:c0:51:5a:7c:32:f6:50:10:84:c4:df:
ae:d1:5e:d0:b5:92:9a:85:fd:58:13:e0:80:04:e0:
74:f3:20:83:fc:1b:42:37:d9:74:94:20:b9:dd:40:
8c:41:71:83:30:48:5c:a8:d2:25:34:06:48:06:ac:
a2:78:bd:7f:b0:32:04:3e:19:15:37:18:f7:be:a8:
09:3c:56:de:27:54:31:3b:79:b8:5c:a5:08:0b:e3:
d8:00:f9:d1:51:50:5e:5f:9a:84:dc:7c:95:01:3c:
79:61:88:11:ed:e7:96:d5:ab:7f:ae:27:aa:e9:f4:
13:6c:53:03:85:58:57:4f:c2:33:b1:5f:ae:d0:5a:
71:84:6e:d4:03:e8:8c:66:c5:92:d0:46:0c:1f:2e:
07:f4:d3:e0:b4:08:c8:23:1d:34:50:90:67:f8:45:
19:85:08:52:54:0b:69:8c:0f:cf:df:56:5a:e5:33:
59:5e:c1:a8:ba:61:e2:5f:07:bc:c9:cf:6a:f8:73:
32:cf:d1:d1:b7:70:fa:0e:a0:6b:3a:40:e9:2a:16:
4d:a1:90:91:4b:11:dd:59:23:21:a6:6d:d5:b6:a4:
9c:81:85:fb:96:d2:ca:e1:25:9c:3f:cd:3e:7e:be:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:07:C0:F3:54:98:DA:F8:1C:AF:4F:96:43:2E:54:60:0F:18:D5
X509v3 Authority Key Identifier:
keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:c7:c5:3a:8b:98:b2:35:a8:6f:22:e0:b3:80:d3:e5:65:
f4:09:41:3f:b8:9f:1a:e7:31:45:4c:86:58:b7:a8:65:0b:28:
11:7a:22:07:68:c8:37:3f:39:f5:c1:87:b7:d5:58:95:6b:b2:
a2:5e:7b:85:02:59:ce:9d:50:0c:7d:c9:5f:8f:2f:19:b0:99:
96:64:a6:fc:2e:44:1d:39:87:9f:66:25:a0:97:aa:d5:e5:39:
4a:7a:75:81:e8:3a:2c:3f:8c:c9:50:71:14:1e:44:0a:74:0f:
ff:20:d8:73:de:40:28:e2:f2:bc:23:2d:c3:6a:7f:f9:53:69:
b8:03:0d:66:05:00:cb:18:25:cb:2c:ed:7a:24:cf:38:a5:b8:
1c:0f:98:f5:27:d9:c4:48:e5:ee:01:13:20:49:19:5d:ec:ff:
37:da:27:5d:91:35:26:ae:98:c1:ea:32:be:35:33:5f:e7:5c:
1c:69:ab:f5:81:60:1e:b1:26:5c:69:cb:2d:57:88:fe:32:27:
0a:34:e7:0f:95:fa:d6:9c:ef:e6:8a:8d:8c:34:5a:dd:d6:ad:
e6:c6:b0:f3:e9:4b:fc:65:53:1b:7f:03:0f:8b:d5:28:01:aa:
1d:ec:ee:ef:2c:79:c1:2b:ca:22:94:b4:09:9d:89:fa:41:1e:
51:4a:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:24:26 2026 by rpki-client