Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
File: MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft (raw, json)
Hash identifier: QUjnJIHCGBauYKf5kkmmGvGEOfRzB7jm5baKn/sMhmA=
Subject key identifier: E0:08:3F:F6:16:4A:63:3D:C8:5A:F8:AB:B0:AC:9D:C7:A4:22:EE:71
Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
Certificate issuer: /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Certificate serial: 019D28BB450379C13D02DA2FA3D1143BE09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
Manifest number: 017C
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: DyptUUOjRm_2m8zgbMvoHA1UrBI.roa (hash: K5rbZpcZwUPf7XJmogvvHN54DVEPkHI7+lgGEgRM/BA=)
2: MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl (hash: xCBPNd8zLn62NvYzMhzPKLcf3AvD7xX7TpVsh8+GOs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:45:03:79:c1:3d:02:da:2f:a3:d1:14:3b:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=e0083ff6164a633dc85af8abb0ac9dc7a422ee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:4e:d3:bb:c6:5f:21:60:e3:38:69:41:0a:
59:59:b2:a4:c3:bd:53:64:8d:7f:07:15:e1:0d:ac:
0c:22:ad:dd:b7:7d:27:08:b0:ca:6d:28:4a:c0:7f:
bb:97:75:81:1a:20:9a:78:90:5a:61:29:1e:bf:82:
25:35:28:3e:76:5f:95:f8:fc:ec:18:8d:b2:b9:51:
94:ef:6e:db:fc:15:34:4e:72:23:a4:43:82:cd:22:
ec:66:e1:8f:6b:43:e3:30:35:3c:56:72:0b:4e:72:
64:e8:3d:00:76:e4:eb:63:54:39:d2:f9:78:83:d9:
2e:d3:a7:2b:bb:46:b0:b8:a3:1b:70:e2:da:05:87:
61:32:2e:7b:bb:c8:07:ec:19:9a:fb:ad:96:33:f1:
f3:4e:ab:fd:eb:e0:5d:63:ed:24:e7:9f:1c:8d:17:
64:fe:ba:dc:48:10:68:0b:2a:08:ef:a9:b6:94:37:
0b:8e:80:cb:00:7a:eb:f7:38:a1:a0:7c:92:03:7e:
e9:e5:f3:3a:24:e7:10:89:e9:11:bb:d7:74:41:6b:
d8:9e:81:32:3b:15:1b:1f:f4:ec:6b:62:8c:05:fa:
d1:ff:9f:73:ce:89:b3:ef:24:f8:e0:5f:31:12:3e:
22:39:54:89:f6:66:6e:8a:bd:a5:73:e5:01:16:4c:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:3F:F6:16:4A:63:3D:C8:5A:F8:AB:B0:AC:9D:C7:A4:22:EE:71
X509v3 Authority Key Identifier:
keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f6:21:35:2e:e7:13:5e:52:de:3e:3f:b7:ee:24:cc:f0:20:
42:59:c5:42:57:2a:3d:cf:5d:ed:3d:22:d3:8d:e4:cf:92:55:
69:22:fe:fe:9c:3a:b1:0b:e6:e3:bf:fc:68:94:51:c2:01:11:
cd:c9:75:dd:01:10:11:67:92:d8:f6:63:67:8b:a1:ac:e8:2c:
64:46:ee:a5:fc:38:c5:a0:d5:bd:62:84:9f:41:2e:3a:5d:ca:
b2:7e:f4:f0:35:44:45:bf:5a:2b:9e:c4:ab:90:67:09:fa:0a:
5e:88:11:b6:77:cf:ca:61:9c:f5:88:01:c7:11:d7:d6:ce:15:
e8:87:c9:70:90:a6:60:ca:ba:45:cb:c0:86:74:be:4f:3d:9c:
ce:fc:ee:bd:bf:e4:51:01:da:48:6e:27:d7:8d:20:55:3a:cf:
af:65:4f:86:1d:e7:10:98:37:a3:1e:4c:51:90:37:8e:b1:15:
9f:a5:84:c6:84:ff:ad:3c:25:04:ff:67:e9:b9:16:e9:94:ae:
7d:44:dc:3f:c4:e3:18:bd:f6:d6:c9:c4:08:77:35:1e:53:ae:
aa:5d:4b:f0:d2:d2:07:1f:71:7a:bf:23:0a:c0:87:45:a8:d5:
de:64:59:99:2a:37:f6:84:ec:69:c8:6f:93:5d:e5:b6:d7:01:
87:d8:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:12:57 2026 by rpki-client