
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: gFj/n5UgxmScvftr5W54m2+hJFF+PmFwrztso544umw=
Subject key identifier: 21:EE:8A:0B:E3:7E:01:96:B7:B1:68:D0:8A:27:95:42:E8:B9:6C:20
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 019F92481C8BFAB8E7D77B5225180E50BB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0C03
Signing time: Fri 24 Jul 2026 04:00:27 +0000
Manifest this update: Fri 24 Jul 2026 04:00:27 +0000
Manifest next update: Sat 25 Jul 2026 04:00:27 +0000
Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: RyFLL0dvcGxw55/i1mo713OJj4XSkSlte2WTjybOY0Q=)
2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:1c:8b:fa:b8:e7:d7:7b:52:25:18:0e:50:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Jul 24 04:00:27 2026 GMT
Not After : Jul 25 04:00:27 2026 GMT
Subject: CN=21ee8a0be37e0196b7b168d08a279542e8b96c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:42:e6:b8:ff:bf:c1:7d:92:0c:fc:4e:17:
62:da:1c:9d:fa:2e:ce:fd:ec:6b:21:74:f4:02:c3:
94:e0:dd:f0:0c:08:d6:4b:94:f0:d6:4f:b5:84:15:
5b:1d:24:48:49:20:2d:31:25:b8:ad:51:82:77:40:
09:25:4b:aa:6a:5e:ce:df:bf:51:56:9e:ab:ae:b6:
b1:30:a9:b0:35:ca:68:ec:3f:22:69:c4:6b:2b:c9:
94:ef:41:b5:da:87:99:0f:68:6f:87:16:b2:8f:f2:
3e:5e:a2:3b:3d:42:39:20:b8:4a:a5:26:c3:2e:d2:
d7:53:41:83:93:6f:59:2c:f5:03:8e:b3:99:09:e5:
ec:70:24:31:dd:f5:d8:f4:70:46:ac:0a:62:f2:bc:
0b:ba:33:14:e6:de:8b:b0:42:e4:e3:48:df:07:09:
e3:0c:34:d3:83:a7:77:0c:68:5d:39:e4:d0:4b:ad:
6b:97:97:f3:fb:70:75:cc:12:e0:77:e9:e1:26:1e:
b1:79:49:b1:f5:97:a4:91:ac:d1:b2:b5:77:10:59:
61:2e:05:ef:3d:76:41:59:85:28:6f:19:7a:c1:7d:
1f:ba:eb:25:05:4b:b9:85:c7:f2:04:72:b9:94:b3:
dd:c2:d2:5a:37:11:8a:76:3e:05:a6:dd:0f:4c:0f:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:8A:0B:E3:7E:01:96:B7:B1:68:D0:8A:27:95:42:E8:B9:6C:20
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:48:ff:15:42:e5:e7:44:42:a1:ef:19:8c:e8:b0:a1:dc:
bb:a2:05:59:c1:07:dc:a8:34:07:b5:87:89:fc:0b:1c:9f:57:
74:5b:d1:a1:f4:88:0e:94:54:67:7d:85:08:77:4c:9f:4c:93:
54:f9:43:ec:6b:06:fd:96:fb:44:74:ef:6a:4f:9e:08:1c:cf:
e8:ec:94:5c:21:d9:dc:5c:a8:55:f7:51:2a:21:a6:5c:1e:23:
10:48:17:b4:02:86:98:28:6c:00:73:86:70:f7:75:68:cc:77:
df:48:06:43:1d:bd:08:89:1d:8b:0d:c8:d2:7e:10:7b:06:00:
5b:86:a7:0e:c9:b2:78:42:cc:d4:66:ec:c8:e6:d6:4e:e3:f8:
59:ea:da:f1:cd:c8:68:fa:5d:9b:5d:b2:5d:44:ab:c0:7f:62:
68:66:85:a4:70:40:62:c5:ca:ea:b1:1e:bc:25:b0:cb:1f:fd:
8f:59:01:60:b2:9f:3e:41:64:bf:92:5f:df:08:72:ff:2b:d1:
60:54:9a:4b:df:27:da:45:b4:77:c2:d2:f7:b4:d3:7e:a0:06:
29:ed:30:d1:d6:50:c0:fc:bd:0d:52:fd:90:9c:12:5d:3e:2f:
8f:98:55:92:ab:98:ee:4c:a4:10:a3:94:cc:ff:70:36:87:1a:
6f:7f:6a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSByL+rjn13tSJRgOULuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi
M2ZiN2EwHhcNMjYwNzI0MDQwMDI3WhcNMjYwNzI1MDQwMDI3WjAzMTEwLwYDVQQD
EygyMWVlOGEwYmUzN2UwMTk2YjdiMTY4ZDA4YTI3OTU0MmU4Yjk2YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVtC5rj/v8F9kgz8Thdi2hyd+i7O
/exrIXT0AsOU4N3wDAjWS5Tw1k+1hBVbHSRISSAtMSW4rVGCd0AJJUuqal7O379R
Vp6rrraxMKmwNcpo7D8iacRrK8mU70G12oeZD2hvhxayj/I+XqI7PUI5ILhKpSbD
LtLXU0GDk29ZLPUDjrOZCeXscCQx3fXY9HBGrApi8rwLujMU5t6LsELk40jfBwnj
DDTTg6d3DGhdOeTQS61rl5fz+3B1zBLgd+nhJh6xeUmx9ZekkazRsrV3EFlhLgXv
PXZBWYUobxl6wX0fuuslBUu5hcfyBHK5lLPdwtJaNxGKdj4Fpt0PTA+JiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHuigvjfgGWt7Fo0IonlULouWwgMB8GA1UdIwQY
MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt
MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi
LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrlI/xVC
5edEQqHvGYzosKHcu6IFWcEH3Kg0B7WHifwLHJ9XdFvRofSIDpRUZ32FCHdMn0yT
VPlD7GsG/Zb7RHTvak+eCBzP6OyUXCHZ3FyoVfdRKiGmXB4jEEgXtAKGmChsAHOG
cPd1aMx330gGQx29CIkdiw3I0n4QewYAW4anDsmyeELM1GbsyObWTuP4Wera8c3I
aPpdm12yXUSrwH9iaGaFpHBAYsXK6rEevCWwyx/9j1kBYLKfPkFkv5Jf3why/yvR
YFSaS98n2kW0d8LS97TTfqAGKe0w0dZQwPy9DVL9kJwSXT4vj5hVkquY7kykEKOU
zP9wNocab39qng==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:35 2026 by rpki-client