Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: PDIBl+loikn+DpvdpRmDlFamBcd75vBBVBiFRI+gnNA=
Subject key identifier: D9:6D:7C:01:6D:D3:ED:45:B8:B5:8D:15:66:15:E2:93:61:39:EA:6B
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 019D2660091D0B019D18EA6C0002354AFD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0AC2
Signing time: Wed 25 Mar 2026 19:02:01 +0000
Manifest this update: Wed 25 Mar 2026 19:02:01 +0000
Manifest next update: Thu 26 Mar 2026 19:02:01 +0000
Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: rg866VPHl1P8I7GxI6ImQLmSbXd480Vh3YYEtDZmD+k=)
2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:09:1d:0b:01:9d:18:ea:6c:00:02:35:4a:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Mar 25 19:02:01 2026 GMT
Not After : Mar 26 19:02:01 2026 GMT
Subject: CN=d96d7c016dd3ed45b8b58d156615e2936139ea6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:da:92:1d:86:92:48:a8:e4:e6:49:73:29:
72:d6:29:ca:60:2e:3a:55:c1:db:d0:a6:51:e9:f4:
f4:9f:4c:c9:a0:c3:37:14:a3:ad:d4:2d:e0:77:4e:
a2:fa:84:05:ab:e7:dc:48:fa:b4:fe:61:11:74:aa:
f9:af:1e:9b:70:32:f3:5f:53:cc:d7:04:fe:68:b1:
7a:d5:50:7a:18:b2:5a:30:81:f7:7d:7d:83:48:a7:
af:7e:4b:8d:47:9e:73:9d:6d:06:3d:e2:39:1f:16:
fb:6c:fb:69:f5:8c:af:80:88:d5:b9:3f:c0:f3:52:
5b:63:0b:00:8f:e5:aa:de:1f:f6:5a:54:11:2e:bd:
bf:a2:76:20:d8:a7:f5:d0:38:0c:21:fe:bd:89:5d:
90:ce:d7:1a:1a:0c:70:b6:66:21:f8:54:7b:33:b5:
51:0c:c4:5a:20:26:cc:a3:32:17:14:c9:20:a2:5c:
c0:19:f7:91:be:e4:41:a3:4d:cd:98:68:c7:34:f8:
0a:d0:b1:f3:ce:fc:c7:79:22:65:a5:9b:27:28:46:
41:4a:5f:cb:14:de:cc:25:16:9d:00:41:ba:e2:b9:
bd:07:2a:b1:74:f9:5e:95:6b:17:15:3f:4d:47:95:
02:a3:6b:08:d4:05:59:fc:d6:e1:8f:64:26:30:6f:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:7C:01:6D:D3:ED:45:B8:B5:8D:15:66:15:E2:93:61:39:EA:6B
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:ef:29:5f:a0:65:71:78:97:87:f6:4b:a5:11:86:e8:7c:
8e:b9:9b:43:ef:82:aa:24:c6:1a:ac:24:e0:05:f5:9c:03:c0:
ff:63:55:80:7e:59:f4:64:d5:33:f9:51:92:62:ad:93:35:28:
25:eb:17:06:0d:dc:6a:5a:e7:27:8b:9c:89:d2:87:87:f8:8f:
f2:c6:5c:c2:56:76:fd:dc:68:fe:a1:48:49:66:5f:5b:03:2f:
66:06:ef:c3:92:6b:e1:0f:96:87:7b:46:a5:1d:42:5a:65:3c:
1a:c9:b9:ba:df:db:a6:20:a9:2d:21:23:96:08:d4:d1:3e:1b:
32:34:05:e4:48:9c:af:6b:b7:a9:15:b0:1f:c8:d8:29:9c:5b:
4b:da:38:ac:29:e7:b1:e5:af:c9:6b:19:dd:de:34:a2:64:6f:
a5:7f:97:27:60:29:3a:0c:96:a7:a1:7e:59:96:35:9a:15:80:
b7:a6:f2:eb:d4:98:eb:d5:cd:99:86:05:e2:c0:a5:03:f0:18:
b6:92:ba:d5:63:23:bd:b8:4e:08:cd:02:ec:01:98:2d:10:46:
f0:c3:78:a9:bb:e2:8b:e3:0a:78:98:33:8b:0e:52:d5:70:78:
c9:7d:56:e6:63:4b:5d:98:b0:da:ef:e2:e5:a5:f2:2d:41:97:
c3:7f:b5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mYAkdCwGdGOpsAAI1Sv19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi
M2ZiN2EwHhcNMjYwMzI1MTkwMjAxWhcNMjYwMzI2MTkwMjAxWjAzMTEwLwYDVQQD
EyhkOTZkN2MwMTZkZDNlZDQ1YjhiNThkMTU2NjE1ZTI5MzYxMzllYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvazakh2Gkkio5OZJcyly1inKYC46
VcHb0KZR6fT0n0zJoMM3FKOt1C3gd06i+oQFq+fcSPq0/mERdKr5rx6bcDLzX1PM
1wT+aLF61VB6GLJaMIH3fX2DSKevfkuNR55znW0GPeI5Hxb7bPtp9YyvgIjVuT/A
81JbYwsAj+Wq3h/2WlQRLr2/onYg2Kf10DgMIf69iV2QztcaGgxwtmYh+FR7M7VR
DMRaICbMozIXFMkgolzAGfeRvuRBo03NmGjHNPgK0LHzzvzHeSJlpZsnKEZBSl/L
FN7MJRadAEG64rm9ByqxdPlelWsXFT9NR5UCo2sI1AVZ/Nbhj2QmMG/gnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNltfAFt0+1FuLWNFWYV4pNhOeprMB8GA1UdIwQY
MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt
MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi
LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+/vKV+g
ZXF4l4f2S6URhuh8jrmbQ++CqiTGGqwk4AX1nAPA/2NVgH5Z9GTVM/lRkmKtkzUo
JesXBg3calrnJ4ucidKHh/iP8sZcwlZ2/dxo/qFISWZfWwMvZgbvw5Jr4Q+Wh3tG
pR1CWmU8Gsm5ut/bpiCpLSEjlgjU0T4bMjQF5Eicr2u3qRWwH8jYKZxbS9o4rCnn
seWvyWsZ3d40omRvpX+XJ2ApOgyWp6F+WZY1mhWAt6by69SY69XNmYYF4sClA/AY
tpK61WMjvbhOCM0C7AGYLRBG8MN4qbvii+MKeJgziw5S1XB4yX1W5mNLXZiw2u/i
5aXyLUGXw3+1Aw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:31 2026 by rpki-client