Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: NNZrhObGO0c+UqhV7RlyvaNhbVmYfzeuOo4Ug44QO7k=
Subject key identifier: BD:C4:94:13:9C:EB:C2:6E:B5:A3:46:03:3F:28:B4:5A:45:0D:67:11
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019E1F1155F3E3B5E4FBDB9F103D94D79AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 09DC
Signing time: Wed 13 May 2026 02:01:30 +0000
Manifest this update: Wed 13 May 2026 02:01:30 +0000
Manifest next update: Thu 14 May 2026 02:01:30 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: IMHCuth1jhkr4IWbeR4KwCZbwmCi5dKp6qY3uWT9+6o=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:55:f3:e3:b5:e4:fb:db:9f:10:3d:94:d7:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: May 13 02:01:30 2026 GMT
Not After : May 14 02:01:30 2026 GMT
Subject: CN=bdc494139cebc26eb5a346033f28b45a450d6711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:b6:0a:b9:08:a6:f8:ce:bc:86:79:b8:4b:
88:cb:c2:ab:bb:90:06:b2:4f:f1:75:e9:2c:8e:f6:
7f:9c:71:45:ae:a0:08:31:8a:09:6a:c2:ea:99:e9:
34:61:c2:c5:76:45:9e:0c:c8:f1:e4:4e:fd:84:bc:
d4:88:7d:b1:6d:dc:6a:12:f4:f3:e2:bd:5d:8f:a7:
fe:91:91:a2:68:a7:18:88:4c:b6:f1:2f:89:1c:5a:
83:ca:50:41:4c:54:db:94:53:de:9b:7a:7a:10:cb:
5a:38:30:e1:5a:06:ce:c8:56:72:d6:e9:8e:6c:6a:
5e:5e:72:4f:ac:a8:a3:db:17:bb:48:ea:0a:e8:1e:
38:bc:03:de:f0:3c:89:e9:a3:48:1b:3b:de:d1:af:
22:05:9f:af:b8:c5:7f:d6:57:f2:b8:e2:a3:d5:81:
7c:26:72:41:8f:12:c1:b8:6e:90:d0:34:53:c2:01:
6d:fa:38:73:55:1e:a8:f7:d9:cf:83:58:80:f7:9e:
01:89:bf:fe:6f:01:59:87:d8:4c:62:cb:dc:18:91:
90:4f:0b:5b:ec:c2:23:94:75:fa:99:67:00:73:f9:
14:9b:52:de:82:39:62:0b:6e:72:0a:14:fc:50:f0:
fb:f3:43:ba:77:51:c6:3c:05:f4:12:40:37:01:eb:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:94:13:9C:EB:C2:6E:B5:A3:46:03:3F:28:B4:5A:45:0D:67:11
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0f:0a:ca:6c:fb:aa:6c:70:e3:06:b2:ff:ed:25:93:be:ec:
d3:e3:85:2b:62:64:5d:86:76:ac:0f:8f:68:33:4c:4b:bd:c1:
b9:33:04:28:48:f1:71:bd:5d:22:62:92:6f:45:20:79:25:ce:
76:26:a9:83:a2:35:cf:c3:ad:80:ea:6d:8b:6f:36:3e:6c:78:
9b:83:78:9a:cf:a6:55:1d:d5:25:de:50:8f:1a:64:94:15:1f:
7a:cd:27:6a:5d:ca:a1:45:f8:45:dc:45:c6:6b:14:86:1d:1f:
5d:8b:cd:9f:dc:a2:66:37:cd:0d:4c:5e:7a:21:2a:46:61:df:
28:2b:d9:eb:c1:34:62:af:d0:97:9c:e5:b8:78:1a:d9:88:33:
d4:b2:e6:28:a1:67:59:96:f3:74:0d:12:ac:5d:08:55:17:00:
8e:09:d4:9a:3c:2e:72:f7:f9:54:3e:35:29:c5:6c:dd:43:ff:
dd:fd:60:f2:93:2a:eb:9c:60:89:ec:ad:78:78:17:55:65:65:
0c:9c:7b:1d:d0:5b:27:ef:0e:cf:4d:58:98:8f:a9:d6:28:b5:
53:a9:c2:d2:41:8c:76:88:37:20:94:6f:07:dd:3e:37:fa:5d:
6b:bb:e3:cb:a2:af:bb:d5:82:fc:5c:b1:a3:79:39:ee:84:6c:
8f:44:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:32 2026 by rpki-client