Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: RzkJQx//Z/iY+OzUMa0RV4b2d4qL9FIV7yfNMuxoVgE=
Subject key identifier: 5F:99:A3:02:8F:16:C4:18:62:9A:86:83:98:C4:87:56:E0:0C:02:B5
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 01A0CEFF13E3ABD0F52CD247332167D746B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0CA7
Signing time: Wed 23 Sep 2026 16:00:18 +0000
Manifest this update: Wed 23 Sep 2026 16:00:18 +0000
Manifest next update: Thu 24 Sep 2026 16:00:18 +0000
Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: KHfTr9rZ2PYYyQqS5WhLuV0TpTHm5//6bVvArYzCczU=)
2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:13:e3:ab:d0:f5:2c:d2:47:33:21:67:d7:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Sep 23 16:00:18 2026 GMT
Not After : Sep 24 16:00:18 2026 GMT
Subject: CN=5f99a3028f16c418629a868398c48756e00c02b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:da:d3:46:5f:67:e5:37:94:2d:bd:55:85:
7c:e3:0d:62:43:da:8d:92:09:1c:05:0d:d3:a5:e5:
bd:7d:45:93:03:49:ae:3d:0a:ef:df:62:7a:f7:22:
81:5b:e0:b7:e5:94:7d:62:97:3a:87:c8:f3:be:6e:
68:0e:29:fb:cf:8f:46:8d:a7:99:f8:ae:0f:90:42:
5a:56:59:ee:b2:f0:13:3c:9c:89:83:cd:06:a3:57:
c0:d1:31:30:e4:5e:cd:d8:c4:6b:75:da:60:17:3d:
b9:f3:5b:cb:04:e2:ca:4f:22:35:4e:65:4b:42:9a:
a4:e8:79:e3:6a:0b:ad:85:5a:64:1b:97:ae:dc:83:
0c:3c:53:5e:c6:2a:66:15:36:06:69:65:9c:4e:94:
6d:16:e9:a9:b8:32:3b:0f:6c:7e:af:09:79:ee:a9:
40:c9:43:3f:35:57:21:49:0e:f8:8b:be:e9:9a:96:
ee:d8:fc:01:e7:10:c1:e2:bd:5b:bf:d5:ee:ce:ab:
ec:ef:c9:64:94:74:bf:f1:f8:07:99:1e:4d:21:00:
cd:73:2f:24:c6:e3:ac:ae:45:d4:05:a3:5e:0a:c1:
84:84:01:3c:5f:f8:62:84:1c:89:e3:01:a0:30:a1:
54:d5:a1:24:30:e5:58:9a:a3:60:70:55:72:30:b0:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:A3:02:8F:16:C4:18:62:9A:86:83:98:C4:87:56:E0:0C:02:B5
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b8:ce:b4:c6:59:1e:eb:91:65:8a:e9:5f:05:81:7d:6c:6e:
51:63:51:f1:eb:35:36:86:d1:10:d7:cf:64:89:48:8f:3a:41:
0f:40:23:e3:40:1e:44:b4:10:d6:99:32:29:88:6c:dc:62:40:
cb:61:cf:aa:74:fc:be:8d:9d:66:5a:73:fe:b2:55:2c:80:28:
69:98:5d:7d:66:67:4e:4c:e5:c6:f0:70:bd:76:a6:3c:da:4e:
66:5d:fe:7d:d0:64:a0:62:4b:47:0c:07:b9:f0:df:b0:dd:19:
e3:27:22:93:e2:4e:6b:5b:18:ac:95:a2:69:78:24:d3:a5:2d:
47:97:da:ac:2f:ee:68:c9:cf:0f:e6:f3:b1:c1:94:26:bf:1e:
49:dd:4e:e4:7f:ad:e0:56:6c:09:f9:06:1f:9a:c8:25:fc:be:
ca:df:4e:b3:ee:88:63:5d:43:24:b7:5e:2a:4b:2c:ae:26:89:
50:91:43:22:b6:5b:9a:55:d4:ba:a8:24:3f:f6:ec:e6:db:04:
3b:ba:32:e5:4d:0d:c5:85:6a:bf:8b:9a:1f:ec:1f:1a:0c:1b:
5d:f8:55:4c:95:66:b8:30:5e:a8:f9:8b:54:a8:a1:ad:25:9f:
d9:b3:9a:dc:d9:a7:5f:5b:44:69:33:e0:22:d0:71:74:1d:e6:
c0:13:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:34 2026 by rpki-client