Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: bNNn3P4AwYwF1K5w/JoU00leTxzbrESE0lxVzP0IgAw=
Subject key identifier: 61:60:8D:DC:98:08:97:A5:56:82:60:BE:B2:CB:E8:18:6E:C5:70:F0
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01A10BEFF5F7B14C5EFE5FE18842B8F9C0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 17CF
Signing time: Mon 05 Oct 2026 12:00:37 +0000
Manifest this update: Mon 05 Oct 2026 12:00:37 +0000
Manifest next update: Tue 06 Oct 2026 12:00:37 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 1hhvl43t/EzehAJovFmGx/6c4b9sqRdj3xXb2D9n6bU=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (hash: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:ef:f5:f7:b1:4c:5e:fe:5f:e1:88:42:b8:f9:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Oct 5 12:00:37 2026 GMT
Not After : Oct 6 12:00:37 2026 GMT
Subject: CN=61608ddc980897a5568260beb2cbe8186ec570f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:a8:84:2e:e1:89:1c:a6:58:45:00:4a:26:
84:81:fb:77:e5:3f:cb:30:20:ce:b3:8b:3d:26:31:
48:d6:38:9c:0a:be:1a:3e:10:c2:65:47:96:35:59:
9d:0a:b5:36:2b:cf:f8:66:d1:26:af:1c:e7:58:63:
aa:6f:2b:d9:85:bb:ca:3b:93:fc:53:b2:50:00:d2:
74:89:6c:12:5d:96:0a:a0:10:e4:45:29:55:ee:48:
0e:3e:5e:16:8c:f3:5a:5b:22:46:b9:19:16:19:84:
9a:6c:bc:12:19:27:42:bb:26:8b:cb:c2:df:87:75:
fa:53:02:ea:1b:2c:be:13:b9:21:95:71:dd:87:86:
e8:9a:50:fb:84:8a:b1:cc:a6:05:f5:f1:28:a4:17:
d4:9d:c9:73:fc:29:6c:50:ab:93:25:60:89:15:5f:
c3:0c:13:cf:5c:5a:ce:f5:70:92:51:b7:5d:96:25:
82:28:82:d4:86:c5:c7:7d:15:16:79:d8:64:a9:63:
1e:a9:09:ba:25:8c:40:02:fe:ea:70:31:11:8a:f0:
b2:b9:51:08:c6:b9:b6:a2:ea:f5:af:48:59:66:c8:
57:79:fd:3f:46:bb:5e:57:f7:21:76:bc:63:a6:d6:
be:31:62:38:7d:01:98:0e:4b:b4:8f:cd:5c:2e:e2:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:8D:DC:98:08:97:A5:56:82:60:BE:B2:CB:E8:18:6E:C5:70:F0
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:41:05:7c:a8:5e:e5:15:92:de:89:dc:9a:71:16:5d:87:
7a:78:c8:62:25:82:29:dd:45:3e:90:f6:d0:2a:e9:be:b5:04:
cd:af:f8:09:c8:bd:e0:47:9b:fe:04:22:53:29:4f:fd:11:66:
c6:66:4f:26:f7:94:df:d7:cd:98:05:3c:f2:28:75:62:fb:7a:
be:69:d7:6a:ec:94:4f:9d:d7:41:58:4d:ea:c5:30:b8:94:3b:
3d:bf:a7:23:74:ae:41:93:f4:13:75:a4:49:a4:e5:f4:f4:3b:
27:f7:24:1e:ae:15:5f:e0:01:18:e2:4d:25:7a:fb:e2:20:69:
cc:d7:46:32:45:ac:c3:c0:75:28:69:d4:d6:bc:f5:76:64:fb:
93:d1:40:81:47:e5:06:44:93:74:07:04:2a:9b:15:31:24:59:
98:13:26:57:93:57:55:3c:2c:53:ef:83:bd:31:fb:6b:40:cb:
cf:95:4b:da:ea:e9:2b:86:27:5c:a6:61:60:b9:05:cc:89:e8:
ce:21:ee:a1:8c:31:ce:59:a5:39:6a:a8:d2:0e:48:8d:77:58:
af:67:bc:5a:85:9a:95:b5:28:76:88:c8:90:61:71:da:9f:90:
a0:39:3b:d5:d7:43:2c:45:00:57:af:61:15:ae:76:46:a1:c8:
b2:e6:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:24:10 2026 by rpki-client