Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: kthqV5+PZp3aLJtdyQySaJgU+1xAMAVZgTooUm0P9OI=
Subject key identifier: DD:07:32:64:BD:97:32:8F:1E:9C:AB:BF:D5:C2:CF:45:FD:34:9F:76
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019D27DFDDA9AC116BD90482C8AF2DE2DFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 095C
Signing time: Thu 26 Mar 2026 02:01:15 +0000
Manifest this update: Thu 26 Mar 2026 02:01:15 +0000
Manifest next update: Fri 27 Mar 2026 02:01:15 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: HSWaHcKE0mJkKqzMZk6g8t9PZZs0NNGn4HJS5HKp8fo=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:dd:a9:ac:11:6b:d9:04:82:c8:af:2d:e2:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Mar 26 02:01:15 2026 GMT
Not After : Mar 27 02:01:15 2026 GMT
Subject: CN=dd073264bd97328f1e9cabbfd5c2cf45fd349f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:bd:6f:de:18:bb:fe:ff:2d:6f:ef:7f:76:
3b:98:e9:0b:65:d2:81:b4:5e:75:69:61:3a:b2:68:
2f:d0:83:8e:2b:79:7e:e9:1b:fc:b4:0a:c4:c1:f6:
30:c4:12:3c:9f:3b:77:38:b2:e8:c1:91:4c:e0:8e:
0c:aa:53:1f:b9:1d:9d:2c:7b:c1:55:18:78:fb:d5:
68:ce:1c:a1:49:35:13:54:77:e6:f2:3c:28:6c:43:
fd:97:2f:f3:f1:35:01:5e:a6:5c:cb:b5:6d:af:50:
bf:03:9b:5e:69:eb:9f:93:77:5d:83:1f:f8:7b:c0:
39:e3:3c:b8:fc:aa:12:9d:0a:71:ec:e0:11:04:75:
77:e4:26:90:ce:22:56:b6:b9:63:23:71:85:55:bc:
30:d7:c9:94:2f:46:b2:77:6e:8c:b3:6b:27:33:34:
43:96:d4:48:9a:f1:c3:e0:26:9b:8f:70:20:81:7d:
95:d2:46:43:7c:f2:e7:54:9b:a4:55:f6:f4:cb:41:
bb:79:ff:53:af:6a:8b:10:3e:39:a2:3c:c3:1f:36:
1a:12:27:d8:b1:5c:41:af:11:b5:75:58:bb:f2:14:
2b:5f:91:51:28:f9:2d:5c:c1:62:31:7c:ad:2b:75:
8e:e7:b5:7e:79:1a:62:74:e0:36:ba:dd:6d:24:73:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:07:32:64:BD:97:32:8F:1E:9C:AB:BF:D5:C2:CF:45:FD:34:9F:76
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4a:e2:24:fc:4a:dd:71:ae:29:4f:ff:f5:dd:49:10:b4:bb:
56:2b:2d:72:cf:70:39:1e:16:55:9b:41:ee:69:14:d2:c3:50:
e2:01:d0:77:ad:f7:6b:82:eb:58:52:aa:ed:15:e7:c9:27:0d:
94:8f:94:01:3f:5c:d5:d2:07:38:b2:81:cd:a0:2e:6f:10:b0:
d4:8f:f0:69:76:32:42:41:ce:77:a2:ec:ed:29:6c:06:0d:a3:
d1:65:e3:96:1d:54:45:23:f1:1e:c7:3b:4d:dd:dd:41:52:e0:
f1:d1:7d:8a:d8:76:fe:bc:6a:f3:01:8a:6f:f8:7e:11:26:ac:
8a:0e:c3:5c:9e:70:d9:45:a6:22:0b:3a:09:55:1b:2c:d4:23:
9b:b7:09:06:44:d7:65:af:27:2f:97:0c:2c:c9:54:51:4a:e5:
0a:2b:47:9a:41:58:c9:a6:f1:ff:fc:5a:49:32:91:7c:e6:67:
b6:81:f6:94:8b:42:87:1a:38:80:34:e7:fc:ed:3d:d8:8a:db:
be:9d:79:33:2f:05:a5:7d:58:91:58:25:1d:3f:bf:33:67:18:
88:48:03:3e:8c:b4:b6:ef:dc:a4:79:59:4d:6e:1e:f5:b7:9c:
32:55:4f:18:64:ae:78:39:15:c9:4e:c4:6d:1a:e4:42:d1:78:
89:f0:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:31 2026 by rpki-client