Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: oXUwXQX+0WF7WakSg9HyE1OJzCm+RqyOM7jhhgfo9QQ=
Subject key identifier: E0:6F:53:0E:47:A6:B6:E0:38:D3:9E:01:DD:63:62:7B:6E:BC:33:64
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 019D284DA0F3C9930EE5ADDDC615B22CD69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 15B9
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: jJzmF6KbbZAY2n75ANuV5cEU81dp+r5jpIs5EfRkLpQ=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: aASlAO3ULJvYcCaFwZuTImiJ--8.roa (hash: 3IcV0cUF4DbrPmFVcmO8nyEBwkVXv6EWYEXI+8Y8SiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a0:f3:c9:93:0e:e5:ad:dd:c6:15:b2:2c:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=e06f530e47a6b6e038d39e01dd63627b6ebc3364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:6d:8b:06:cc:32:20:58:96:89:f1:b3:32:
c3:d7:a6:37:54:28:03:7a:be:79:17:54:b0:d2:24:
12:66:7a:ea:33:79:97:cd:2b:9a:7e:85:ba:ca:a9:
81:80:57:83:b6:54:be:08:48:64:25:d4:55:73:ac:
15:ee:73:3d:c9:d8:35:90:0a:43:17:00:37:6b:23:
09:7e:6f:7b:69:b5:2b:09:da:70:c0:78:2a:0b:98:
69:3c:3f:78:3d:6d:99:ca:8b:c7:73:92:28:11:b0:
9c:12:de:59:b9:7f:06:f9:0d:26:0c:cf:b9:a8:07:
06:2a:27:07:07:04:ac:ab:fa:99:4a:02:b2:66:dd:
e8:e7:49:1f:23:72:4e:e8:48:84:05:b6:dd:f0:4b:
a7:fa:03:b0:f0:b4:ec:3b:5b:a9:12:3b:0e:54:18:
89:73:f4:c5:7d:7e:f8:5b:b3:23:38:63:52:fd:15:
eb:ab:2e:34:6f:40:fc:34:c0:19:22:90:6c:4f:ad:
cd:7b:af:f8:8c:74:b2:6a:81:95:a7:bd:36:9a:3c:
15:ab:f4:d3:0b:59:a2:fe:f7:0b:ac:9c:5f:db:48:
3e:3c:5c:16:a4:a3:cc:43:32:00:86:74:4d:f1:a8:
85:3a:86:55:09:02:24:3b:7a:6e:96:87:b4:d3:8a:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:53:0E:47:A6:B6:E0:38:D3:9E:01:DD:63:62:7B:6E:BC:33:64
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e2:9c:1e:f9:58:00:7f:fd:d9:12:b1:08:fe:08:3e:e1:a6:
7d:85:b2:9d:00:ce:e4:94:c0:1f:b6:31:a1:6d:62:a7:27:b8:
70:89:49:36:7c:e1:13:66:32:18:8e:75:01:8b:ed:54:67:4a:
b1:f4:54:d8:76:c0:3a:f5:2e:f7:a0:0a:04:5b:98:bf:73:c5:
b1:7c:99:0b:7e:16:8f:74:ab:12:36:e9:70:f2:ba:17:df:57:
8a:ee:f5:a5:bd:f7:70:16:9c:f8:be:85:77:36:08:2c:2e:9b:
b1:ea:74:ba:b5:19:61:6f:30:75:6e:25:d0:18:71:3a:22:f2:
43:f9:25:d3:24:40:ee:36:a2:2f:9a:3a:f2:29:46:6b:41:1f:
95:a6:7a:8f:38:e2:f1:16:26:ed:a1:52:e5:ba:93:6d:5f:cc:
c6:fe:0a:09:16:12:30:b7:64:e8:71:80:3c:52:99:7f:b7:a1:
34:a0:4f:2f:7c:21:fd:3c:09:9a:09:0f:39:9b:e4:6b:da:38:
b9:a6:63:ad:df:8b:30:98:fc:30:27:8a:e9:13:90:f7:cd:37:
c5:0e:eb:5a:93:0b:78:28:8b:ea:12:39:bf:76:36:cd:6a:9b:
44:03:5f:3b:79:52:2f:d9:3f:12:2f:03:56:55:73:59:4d:bc:
54:36:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:56 2026 by rpki-client