Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: hjtu64za2/w0cLDDi9kaa3OQzn1xitw1+HfE6Vwp4x4=
Subject key identifier: A9:FC:23:F2:F1:C5:51:98:EC:1D:5E:B3:7D:D8:C2:E7:8F:65:5F:9B
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019D28F2916A3349B09A9FEDEF3562070E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0EA5
Signing time: Thu 26 Mar 2026 07:01:18 +0000
Manifest this update: Thu 26 Mar 2026 07:01:18 +0000
Manifest next update: Fri 27 Mar 2026 07:01:18 +0000
Files and hashes: 1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: EzysWKCQa6r287heOoJyTxlZd2yOpk2RZpZ/dUQ+oiI=)
3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
4: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (hash: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:91:6a:33:49:b0:9a:9f:ed:ef:35:62:07:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Mar 26 07:01:18 2026 GMT
Not After : Mar 27 07:01:18 2026 GMT
Subject: CN=a9fc23f2f1c55198ec1d5eb37dd8c2e78f655f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:0b:54:8e:34:ea:66:8a:01:85:3c:1a:e3:
22:a7:b1:f1:da:f6:46:86:c6:20:b5:67:64:04:78:
5f:bc:9c:65:4e:60:34:06:0c:a8:17:77:b8:0f:9e:
66:4a:4b:ae:34:d2:85:72:85:6c:a7:74:c9:9f:a2:
b0:7d:89:8f:50:63:5b:16:ca:0b:33:0d:f9:84:30:
6c:57:66:a0:7f:c1:23:e4:fc:7c:27:db:de:28:b8:
a3:ce:17:a4:20:41:8f:e7:bc:5b:9f:f9:7e:3c:a9:
a9:73:2f:7c:73:c7:48:01:42:71:28:5e:73:49:4a:
ce:4c:c3:71:b9:f2:6a:bf:c9:63:77:00:e5:6c:77:
fc:e8:13:5d:47:f0:c8:03:2e:97:11:cd:87:60:6c:
f3:ab:08:61:3d:c4:8f:8c:c8:f3:29:91:0f:dc:0c:
47:e7:b9:88:63:a2:eb:13:93:8b:41:25:8e:ad:00:
47:16:3f:66:32:6f:f5:5e:8a:30:53:dc:71:5e:32:
1f:8a:f6:d1:8f:4b:38:4c:16:14:be:4c:5a:ae:f7:
b4:5c:8d:5b:fd:c7:d8:fe:0d:23:d7:49:8c:ae:56:
ed:1c:31:0a:00:54:8a:32:16:fe:d0:70:24:2b:fa:
e7:53:7e:84:cc:fa:d9:bc:d8:6b:f8:16:6c:9a:f4:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:23:F2:F1:C5:51:98:EC:1D:5E:B3:7D:D8:C2:E7:8F:65:5F:9B
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:82:14:a2:6d:0b:63:8e:3b:b9:7b:9b:db:69:ec:b8:ca:ab:
18:74:ab:db:62:46:12:67:7e:69:00:17:8d:a2:de:be:6a:36:
7a:ac:56:58:dc:01:3d:64:de:10:fa:91:f8:10:37:6c:f8:b6:
01:5f:07:0f:d5:e3:11:64:da:93:07:e5:85:57:42:1c:26:c7:
ae:33:6c:1b:66:e4:4d:a8:c1:8d:69:53:ef:66:38:cd:ce:b2:
82:59:95:7e:6a:51:48:4e:11:66:ad:fc:8c:fb:53:a4:ef:a7:
f2:20:0c:ee:84:2b:e6:e0:d5:79:9d:9f:f4:d1:cf:7e:a0:40:
78:9a:0d:48:92:6a:9f:6b:b2:27:14:10:ce:c0:29:6f:97:c5:
3f:92:e4:c6:0e:98:22:95:08:03:6c:2a:83:9e:08:4d:2b:01:
c8:02:57:8d:b0:fc:b0:c1:1e:96:a6:d0:61:43:98:3d:b5:0f:
0a:1d:67:3c:c5:34:a8:8e:55:10:22:a3:49:a6:9a:ca:54:14:
56:b0:fe:8c:b1:77:f1:04:1f:0c:e4:ef:d8:75:43:d1:ff:8c:
37:07:6e:6c:47:cf:6f:84:24:7c:40:8a:74:50:61:af:b2:4d:
51:a6:71:ec:2b:26:b9:0e:6a:02:cb:e5:21:62:f3:24:25:9c:
bb:ab:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:54 2026 by rpki-client