Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier: 9ra1sd780UGpSffN/+emzIdkDlI5WIUbxFIgp/+VND8=
Subject key identifier: CB:B8:9D:43:83:42:B9:42:8A:73:9D:B5:91:B3:28:0E:37:85:E0:13
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 019F9392468695CB01AEEEECAECF82E70117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number: 14DD
Signing time: Fri 24 Jul 2026 10:01:04 +0000
Manifest this update: Fri 24 Jul 2026 10:01:04 +0000
Manifest next update: Sat 25 Jul 2026 10:01:04 +0000
Files and hashes: 1: Kb_I90fGou_SJKSEl9rMWZ6WdbE.roa (hash: Dp4lQ4Ot5TWIuhtp86AoHVlBiynZMqEi1oxvAPPpgfI=)
2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: gZvYGFeryQ4a0wqfO599NuyWcsX4B33v6MLKc5qZheY=)
3: qUdUjzO5wbIJQqS_VlLhpc89w3g.roa (hash: 0jNylDiJyEdjtPsOF21hCjhqjEzpVgAdCqxEIg+vfcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:46:86:95:cb:01:ae:ee:ec:ae:cf:82:e7:01:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Jul 24 10:01:04 2026 GMT
Not After : Jul 25 10:01:04 2026 GMT
Subject: CN=cbb89d438342b9428a739db591b3280e3785e013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:f5:32:52:90:17:29:3c:41:10:97:f5:e9:
70:89:88:54:ef:e0:69:41:25:07:af:11:29:ca:0b:
aa:4d:11:01:57:19:8e:ca:de:85:27:e1:e7:f6:fc:
9e:8b:86:1b:39:5a:9c:bb:ba:ad:00:3b:e1:c7:26:
08:59:74:1b:cf:83:3d:88:17:ba:0e:27:34:e3:fb:
57:ae:c9:11:27:ce:ae:78:50:8a:ff:fd:72:38:88:
a8:36:66:6e:08:4e:4e:b0:e1:41:f7:4b:07:6a:74:
35:25:2b:91:35:fc:cd:e9:25:14:e5:fa:99:2e:51:
08:73:9a:0f:cd:9a:d0:19:8a:9c:78:d4:1f:50:fc:
f0:4e:43:b0:bd:03:34:56:62:7d:63:96:7e:fb:b1:
eb:c4:93:97:1e:29:3f:bd:7d:f0:68:5b:10:ef:e5:
e5:e6:9c:0a:c9:9e:18:06:6d:5d:98:1a:b1:2e:8f:
ca:2d:93:59:b2:3f:6e:90:c9:9b:ce:af:2f:eb:96:
c0:2f:ce:bd:0c:f8:48:aa:46:8c:3f:8b:09:c1:bc:
e5:fe:b2:07:28:99:6c:a8:e6:6f:99:41:cb:77:51:
f0:d5:45:23:da:1a:60:8a:b8:07:5b:13:16:48:ee:
45:94:7b:d4:c7:ce:46:ad:24:ec:67:23:17:81:7b:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:9D:43:83:42:B9:42:8A:73:9D:B5:91:B3:28:0E:37:85:E0:13
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:40:f5:69:e7:1c:75:dd:df:46:61:f0:3a:41:b6:80:92:
46:35:7c:97:72:0f:86:84:07:93:22:d9:48:75:20:89:51:ab:
ad:2a:3e:e5:ec:3d:f1:4d:a3:0c:a7:c8:6a:c7:de:f8:e7:a3:
d9:ba:89:2b:4a:0d:74:22:8a:17:be:75:b3:af:4a:9c:fa:55:
d3:15:4a:0a:7c:ea:7e:13:92:8e:4d:a4:85:99:07:47:d3:6c:
d7:2e:ce:5d:93:1d:57:52:df:e4:3e:d0:b4:24:55:58:61:5f:
bb:db:7b:67:ec:68:85:a9:54:e4:64:db:d1:8c:05:08:83:4e:
c8:b8:e7:2f:2a:ce:f7:8c:1c:b7:1e:c6:7e:a2:fe:c8:8f:4c:
63:92:bc:d1:26:b9:82:b3:4b:6a:a0:b4:36:bf:2f:60:ec:73:
fe:1c:fa:fa:d5:2d:c8:36:16:4b:83:8a:dc:f6:7e:5e:29:73:
02:f8:ff:6c:ab:4c:b5:c1:16:f6:c1:38:b1:d7:f5:40:3a:1c:
3d:ab:5a:09:af:d1:b6:ff:f3:7f:48:3a:94:a1:27:16:18:1b:
03:63:31:31:c1:e3:b1:15:bb:63:2c:e2:43:17:48:0c:25:a1:
06:0e:27:41:36:2e:45:e6:8b:02:59:7c:a2:4c:51:e2:f6:a0:
93:51:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:23 2026 by rpki-client