Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: Cazxk8XosmIEiDaTKXegQyecCT3sbyomRY5X++VWKP0=
Subject key identifier: CF:03:15:C1:58:0C:4F:1D:0E:47:CF:BB:22:D9:1D:C5:02:3E:36:37
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 019E1D908003D002E11C278FA7ACE9AC4318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 1638
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: DHjjDXndLC/uXn2Q76yGl/9QAzuxuH2/A7Oh051FYfY=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: aASlAO3ULJvYcCaFwZuTImiJ--8.roa (hash: 3IcV0cUF4DbrPmFVcmO8nyEBwkVXv6EWYEXI+8Y8SiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:80:03:d0:02:e1:1c:27:8f:a7:ac:e9:ac:43:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=cf0315c1580c4f1d0e47cfbb22d91dc5023e3637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:e3:bc:9c:4c:83:39:5e:2c:1c:1b:a1:92:
67:28:6e:a2:df:eb:f3:8a:ce:33:69:ff:be:46:51:
ed:19:bd:34:b2:10:55:ef:e9:82:83:d1:2e:4e:3e:
5a:10:28:4d:12:ca:34:95:6b:b3:89:49:04:4b:96:
9c:f0:c2:da:15:ab:68:d9:95:9a:1b:7a:2c:81:0f:
2b:31:f6:cd:7d:36:6e:22:71:5b:ff:bd:31:32:8a:
6c:82:14:47:1c:c1:3c:b0:e6:ff:d4:25:0e:9b:a5:
12:1d:42:d5:5b:9d:50:70:f2:75:76:d4:c2:f8:6d:
c1:22:6c:c5:c9:23:5c:6d:b9:dd:9a:79:a2:0b:25:
87:2b:81:df:33:18:6c:a1:75:49:cb:32:fa:8d:2d:
19:ad:3e:e0:ac:eb:30:e1:7a:5f:85:34:50:01:53:
7a:2b:0f:b4:fa:5c:ea:30:a4:59:ce:62:a7:53:5a:
a2:7a:19:7e:fd:06:65:ec:d4:1a:b0:72:31:74:fa:
48:fe:57:ad:dc:e9:8f:aa:c3:ba:c0:60:98:ec:e2:
1e:74:88:14:90:3e:a6:e3:33:01:47:e3:1b:46:dc:
9b:42:ef:17:b8:dd:f0:46:f3:bd:95:56:87:d6:4c:
75:7e:d9:ce:db:56:de:8a:1e:5e:03:af:45:ef:6b:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:15:C1:58:0C:4F:1D:0E:47:CF:BB:22:D9:1D:C5:02:3E:36:37
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3a:c6:f2:25:d4:82:03:ff:7a:29:34:18:74:05:c2:69:57:
b9:df:da:fe:04:91:23:f6:94:88:e1:17:07:e3:da:dd:67:9d:
50:d2:eb:2e:e0:bf:db:68:64:93:65:cc:38:40:0f:c0:28:89:
12:7b:f4:bd:b6:96:f0:e0:3b:60:2a:ba:46:ee:11:87:83:49:
46:38:f8:6c:aa:b1:8e:8e:9e:15:ce:a7:ae:e5:ab:4b:00:31:
ba:e3:08:e1:b0:96:66:dd:41:56:33:5f:d9:75:f3:f4:d8:ec:
49:bb:c1:92:c4:81:1b:2a:70:ef:02:71:3d:a5:e5:f1:e4:84:
ae:88:eb:de:b5:fb:9a:19:f6:28:27:36:23:f7:16:ee:73:12:
a5:11:42:b8:5f:c8:0a:3b:11:ae:ce:d0:c4:e9:7c:d4:ba:9e:
cf:84:41:8a:20:23:71:6c:fa:e0:8d:8b:3b:9d:aa:7b:ef:46:
e3:3b:87:6e:8d:dd:bb:41:af:4c:36:30:a0:52:10:57:c5:f4:
a9:23:68:cf:76:79:5d:88:38:d9:81:fa:68:e4:4f:3e:0c:96:
f0:d8:ae:6c:7a:68:77:98:04:0e:62:ec:7a:16:7d:7d:2f:1b:
bd:17:cd:c2:05:f8:1a:fd:d6:3a:f7:90:a5:48:7a:89:51:91:
8a:60:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:38 2026 by rpki-client