Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: qih2YWZsTfFa1PDDMy5az6Hs8vVQM4aFOBE6Ak3JZdg=
Subject key identifier: 4E:6A:15:81:67:64:5D:83:7F:3C:FC:C3:29:D6:BD:23:B5:76:43:3D
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 019D2B4E164DE46C4C9C24A042187535F29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 0465
Signing time: Thu 26 Mar 2026 18:00:30 +0000
Manifest this update: Thu 26 Mar 2026 18:00:30 +0000
Manifest next update: Fri 27 Mar 2026 18:00:30 +0000
Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: RvRJi7E3HYbp1uQ7R4GDL+0Obv9lBZT6QMZcRkeVPRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:16:4d:e4:6c:4c:9c:24:a0:42:18:75:35:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Mar 26 18:00:30 2026 GMT
Not After : Mar 27 18:00:30 2026 GMT
Subject: CN=4e6a158167645d837f3cfcc329d6bd23b576433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:98:e2:17:64:1d:d8:11:bd:9b:75:7a:c8:
3b:ee:0c:d0:be:4c:09:0f:a0:f6:cc:19:9e:cc:61:
0a:e4:6d:d5:d2:1a:b9:18:9d:32:c5:3e:d8:5c:eb:
c3:11:f6:1b:ab:47:d5:f8:27:8d:bf:c0:f5:e6:f9:
a1:7e:43:4d:d4:f2:54:54:c3:f3:4c:08:7c:6d:7a:
69:4e:c2:11:b0:83:65:e9:f5:d2:56:b0:8a:70:9d:
47:63:e7:04:54:5c:d1:a8:85:4a:6e:39:7a:6e:b3:
d5:7a:4f:3a:97:d6:dd:ae:a6:f5:77:d5:c0:25:26:
b9:78:d1:14:38:be:e0:67:f0:a0:b0:d0:6c:27:13:
5f:b0:04:f0:ce:30:fe:14:42:c6:7f:0c:fc:9b:c8:
24:dc:ef:5b:79:b6:ec:43:fb:10:38:d5:53:85:19:
b9:b5:9b:d8:a4:1c:ba:6b:c3:93:df:3c:16:8a:50:
fd:96:b2:0c:59:5f:2d:c0:4c:93:a7:59:12:8a:76:
52:44:71:8f:27:36:67:94:57:c2:e0:b7:b6:36:35:
30:14:71:8a:d5:08:1e:ed:6e:6d:0d:7e:92:02:c1:
95:6e:07:2b:82:1b:89:58:d6:18:1f:ef:80:db:e9:
e7:ad:3a:a8:25:54:37:03:76:33:ed:bf:d9:c2:d9:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:15:81:67:64:5D:83:7F:3C:FC:C3:29:D6:BD:23:B5:76:43:3D
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:9f:58:25:fa:ce:5a:f4:04:c8:f9:15:06:db:cf:8f:d8:
67:ef:c7:cd:79:ba:e0:e0:43:e1:95:37:1d:29:3f:88:7c:8d:
37:89:06:7c:5a:b1:cd:49:df:0d:ce:e5:f3:de:9e:4f:e1:87:
e0:0b:fa:b0:31:4d:0f:94:06:0e:29:2a:32:1d:b8:92:d4:af:
27:2b:a7:73:ca:1d:98:8a:f0:63:aa:07:1f:00:23:5d:e8:91:
5d:3a:8e:e2:d4:05:61:a7:d4:95:e9:87:3d:0e:26:fa:4e:09:
d4:a7:18:36:76:a2:6b:cf:26:61:e9:d0:26:98:a8:21:5e:60:
82:12:e1:43:60:bd:6c:4e:04:0a:8d:6c:4e:9b:3f:ba:ec:33:
f8:6c:fa:c2:89:22:69:c0:74:0d:27:1a:6c:e4:e0:b1:a9:fc:
9d:46:10:68:82:11:fe:88:c9:ae:ff:2f:89:ff:2f:b3:01:13:
8b:59:86:f9:ff:9d:4e:ac:19:6e:2a:f5:c4:8e:95:89:5d:22:
0a:68:1f:a6:1d:eb:51:ac:69:e0:f5:c0:88:02:bd:f3:ad:a4:
ff:8c:30:f4:30:25:99:80:84:92:4b:44:1b:07:82:1b:04:7c:
dd:1b:6e:33:6b:dc:ba:93:54:1d:c2:8f:68:56:71:48:a2:65:
aa:a5:b4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:59 2026 by rpki-client