Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: yA2Pyu9vni+34lJ6c66ZF3YmW/SmLPDJx0Uc1sWQUEQ=
Subject key identifier: 7B:98:42:1F:B8:07:E8:A3:0C:4D:89:87:83:67:1A:5E:6A:46:06:9E
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01A0DFF41DC30FF7F436A18077EC0E34C083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0B49
Signing time: Sat 26 Sep 2026 23:01:52 +0000
Manifest this update: Sat 26 Sep 2026 23:01:52 +0000
Manifest next update: Sun 27 Sep 2026 23:01:52 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: SAig3jmR/EZ0ZvwJ+vPpmNP+yxFwPsV8NgR07cIhc7o=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:1d:c3:0f:f7:f4:36:a1:80:77:ec:0e:34:c0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Sep 26 23:01:52 2026 GMT
Not After : Sep 27 23:01:52 2026 GMT
Subject: CN=7b98421fb807e8a30c4d898783671a5e6a46069e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:46:f6:41:c1:98:45:fa:21:64:3b:d5:07:
42:45:37:8e:98:42:c7:98:92:03:c4:0e:2e:6f:dc:
f6:bb:8d:32:be:00:0e:a9:89:ca:9b:55:87:25:49:
02:36:f1:ec:81:55:0e:a2:4c:99:45:5f:77:f6:ed:
17:f1:ed:e4:5e:74:4d:c5:7a:01:6d:41:4a:ef:b2:
44:10:80:81:a8:7a:d8:21:ef:78:6b:ec:b3:53:78:
a2:7d:3c:24:88:36:fd:0e:71:14:b7:03:14:f6:f6:
d2:a7:48:13:d4:1c:50:07:28:6f:af:28:24:d1:a4:
e8:8d:ae:ca:95:d1:f3:36:68:a9:42:7f:f1:f6:9b:
5a:3d:e7:d5:9f:76:8c:8a:ba:0c:97:d6:cc:c4:c6:
c0:58:ea:a5:13:bb:0b:9f:3a:0e:1a:5b:c3:75:a4:
42:2a:b6:87:2a:da:28:44:98:cc:f1:b3:2d:a9:dd:
f5:23:4c:b9:eb:ac:34:06:a2:fe:87:20:b8:74:c6:
23:b0:e8:cc:2d:b7:bd:bf:c5:7f:6a:c6:f0:bb:a7:
12:af:7d:be:29:a6:d4:5f:e2:e1:72:5f:72:ab:b3:
f9:4f:25:7c:3f:c0:d8:97:36:35:4c:76:92:96:8a:
2d:2d:bf:26:d1:22:c5:52:84:4b:15:02:6a:4e:f4:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:42:1F:B8:07:E8:A3:0C:4D:89:87:83:67:1A:5E:6A:46:06:9E
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:4c:16:02:f3:6a:50:c2:9d:eb:c6:8e:3e:7b:0c:7f:a4:
6d:0c:e2:83:ed:fd:e4:1e:09:41:14:c2:b9:69:d8:1c:f4:1d:
d8:ec:02:44:a0:e6:4f:2f:45:89:7d:c2:e2:50:54:77:8f:15:
dd:3c:d8:05:43:09:c2:3c:4f:b6:d7:c6:aa:3d:62:30:f1:c7:
ea:a9:f9:4f:72:22:e3:37:2f:c8:b3:b5:88:ed:70:7d:a3:41:
d9:12:bd:67:80:ec:d0:27:b4:65:57:1d:22:03:63:e6:5a:dd:
b6:0f:6a:db:e5:5b:cf:6a:d1:16:3b:dd:6d:ba:d7:01:86:92:
e8:bb:ae:62:e0:a9:6e:b7:39:3a:88:54:d2:fa:64:1b:cc:c2:
88:20:73:d5:c6:db:92:8a:11:d4:dc:c8:2f:e3:65:10:0c:09:
f4:60:66:9b:92:82:92:1a:83:37:e5:bc:cf:4e:81:49:13:c9:
90:09:e1:3b:6f:dc:63:6b:e2:b4:f4:3f:29:33:b5:9a:9c:ce:
55:f3:16:5a:23:29:57:00:73:32:b3:3f:0e:e3:08:6b:27:1d:
d3:d0:e4:05:c6:98:a7:15:38:88:1c:ab:c4:62:3b:89:1e:53:
8b:3c:e7:ff:f7:c5:c8:dd:e9:dd:95:cb:e0:1c:71:c9:5e:a7:
88:13:f7:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf9B3DD/f0NqGAd+wONMCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz
MTRlMzYwHhcNMjYwOTI2MjMwMTUyWhcNMjYwOTI3MjMwMTUyWjAzMTEwLwYDVQQD
Eyg3Yjk4NDIxZmI4MDdlOGEzMGM0ZDg5ODc4MzY3MWE1ZTZhNDYwNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix1G9kHBmEX6IWQ71QdCRTeOmELH
mJIDxA4ub9z2u40yvgAOqYnKm1WHJUkCNvHsgVUOokyZRV939u0X8e3kXnRNxXoB
bUFK77JEEICBqHrYIe94a+yzU3iifTwkiDb9DnEUtwMU9vbSp0gT1BxQByhvrygk
0aToja7KldHzNmipQn/x9ptaPefVn3aMiroMl9bMxMbAWOqlE7sLnzoOGlvDdaRC
KraHKtooRJjM8bMtqd31I0y566w0BqL+hyC4dMYjsOjMLbe9v8V/asbwu6cSr32+
KabUX+Lhcl9yq7P5TyV8P8DYlzY1THaSlootLb8m0SLFUoRLFQJqTvQOVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuYQh+4B+ijDE2Jh4NnGl5qRgaeMB8GA1UdIwQY
MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt
ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4
LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSZMFgLz
alDCnevGjj57DH+kbQzig+395B4JQRTCuWnYHPQd2OwCRKDmTy9FiX3C4lBUd48V
3TzYBUMJwjxPttfGqj1iMPHH6qn5T3Ii4zcvyLO1iO1wfaNB2RK9Z4Ds0Ce0ZVcd
IgNj5lrdtg9q2+Vbz2rRFjvdbbrXAYaS6LuuYuCpbrc5OohU0vpkG8zCiCBz1cbb
kooR1NzIL+NlEAwJ9GBmm5KCkhqDN+W8z06BSRPJkAnhO2/cY2vitPQ/KTO1mpzO
VfMWWiMpVwBzMrM/DuMIaycd09DkBcaYpxU4iByrxGI7iR5Tizzn//fFyN3p3ZXL
4BxxyV6niBP3PQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:04:48 2026 by rpki-client