Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: YbA+pPAR12h8lrQ0QzkQMRnVrYlbX+Q8MNaFrLXRo+U=
Subject key identifier: E1:6E:2C:2B:3F:A4:12:CB:62:86:FD:A0:2D:10:BB:15:F8:AB:C0:DD
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 019F935B42F505BBEEBA746DD3949A406B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 170C
Signing time: Fri 24 Jul 2026 09:00:59 +0000
Manifest this update: Fri 24 Jul 2026 09:00:59 +0000
Manifest next update: Sat 25 Jul 2026 09:00:59 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: CwRLgsrX9FefQsieoR0OxHP6AailPDlKEnmbYAXDm9c=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (hash: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:42:f5:05:bb:ee:ba:74:6d:d3:94:9a:40:6b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Jul 24 09:00:59 2026 GMT
Not After : Jul 25 09:00:59 2026 GMT
Subject: CN=e16e2c2b3fa412cb6286fda02d10bb15f8abc0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:85:03:da:0c:ac:f7:f2:24:e9:df:5d:b9:
ed:28:ed:42:b4:20:b8:00:02:b6:79:5d:59:8d:f2:
d0:6c:0b:c5:58:3c:8e:cf:87:dc:ea:79:9b:5c:2d:
76:f1:8f:c8:2c:b8:46:fd:49:17:bf:df:94:4c:99:
7e:b8:35:b3:91:c3:19:51:a1:a3:28:2a:ae:8e:f9:
8a:f9:5b:a8:05:e1:4b:e0:9c:7e:35:c9:6d:01:66:
94:08:41:6d:ea:40:33:86:10:d3:9d:b2:16:a1:7a:
37:94:21:a8:4e:80:d0:90:2a:be:83:ab:d2:ce:73:
37:e5:49:09:86:05:bc:1c:4d:32:5c:82:9f:7c:51:
bd:c5:06:a4:a8:7c:88:09:1c:6e:9d:26:75:98:da:
8b:f2:74:3c:d5:77:26:1a:81:a6:0a:44:0c:d8:b4:
ed:3a:c7:ef:8f:00:93:34:2f:ff:11:df:94:f2:c4:
eb:7a:b7:6c:9d:5c:3e:a4:e5:45:ba:4e:ce:e2:18:
26:e5:52:9d:3a:16:63:20:15:30:66:cb:6c:63:b6:
ff:31:d8:cc:e4:a0:f4:44:82:e3:ae:22:57:73:01:
dd:da:38:75:49:aa:c6:d8:6e:28:61:a2:09:57:dc:
64:06:25:a5:ce:2c:72:9e:00:a5:3b:9d:d3:eb:ce:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:2C:2B:3F:A4:12:CB:62:86:FD:A0:2D:10:BB:15:F8:AB:C0:DD
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:48:b8:11:aa:38:89:d5:6e:e7:1e:98:97:45:0d:10:d7:7e:
92:cc:45:d0:59:bf:aa:fe:16:ab:27:fb:62:dd:8a:b0:1a:8e:
b8:fd:d6:3b:29:b1:15:59:fe:9d:e2:83:5a:af:f6:a2:96:dd:
49:a3:46:00:a3:03:70:24:9b:dd:43:15:2f:c4:23:e6:7a:e4:
5b:5e:18:8b:b3:f5:10:86:60:9b:78:87:60:44:74:33:a4:ec:
22:de:8e:b9:e5:a3:ef:ab:93:67:4c:11:1e:b3:1a:14:cb:03:
85:3e:1e:4e:f9:aa:56:c8:03:92:e7:c5:67:73:4f:61:84:e4:
78:31:92:7d:d9:47:47:c5:25:40:e3:56:9f:b7:d9:d9:94:6a:
02:97:22:7f:c5:39:aa:96:3c:18:3f:1e:35:6c:07:d8:91:78:
3c:71:ed:6e:4d:75:bd:42:e7:52:56:01:f6:10:ac:c4:2e:e5:
89:b5:35:1f:88:6b:54:be:bb:c6:a6:fa:de:4f:49:21:db:03:
cf:7f:0a:81:1e:c0:c2:64:fe:dc:f8:cd:64:3c:27:f5:61:ea:
e1:87:7b:82:93:e2:f6:62:dd:ff:50:b7:c2:78:bf:ad:47:7b:
78:85:1b:6c:1d:bf:52:8b:b2:3c:be:01:3b:d1:6e:4c:d6:88:
de:0e:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:11 2026 by rpki-client