Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: xSqJeItf/O05anWcKDWf2hjEvqPyGnz+uvFi+jj83FA=
Subject key identifier: 8D:EA:F3:1C:B0:DB:98:10:90:64:23:8F:36:16:16:DC:83:9E:26:DD
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 019E1EA39E6B1EBAAC80C3D490C1ED44F604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 04E3
Signing time: Wed 13 May 2026 00:01:39 +0000
Manifest this update: Wed 13 May 2026 00:01:39 +0000
Manifest next update: Thu 14 May 2026 00:01:39 +0000
Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: q8WTrEqgHU/bor95NRjiMngTRg8Atb4jGe1qEHNa+HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:9e:6b:1e:ba:ac:80:c3:d4:90:c1:ed:44:f6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: May 13 00:01:39 2026 GMT
Not After : May 14 00:01:39 2026 GMT
Subject: CN=8deaf31cb0db98109064238f361616dc839e26dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:66:bd:b7:f7:d8:17:88:94:d5:f9:e5:9d:
01:06:f1:55:56:fc:69:28:d0:a2:a5:6f:2a:4b:e9:
23:4d:f2:0e:ae:33:57:55:ce:f2:10:99:8d:13:d2:
03:57:16:27:12:3e:76:8b:d2:41:82:e2:6c:f0:b3:
ed:09:fd:96:c0:96:9f:8e:0e:1c:7c:7e:32:0a:c1:
56:83:2f:7e:75:a1:f2:61:cc:e9:f1:12:18:29:b5:
a4:96:60:3b:39:33:be:83:74:01:28:9b:03:75:84:
48:0e:50:9f:a8:b3:86:81:fd:a2:d4:a0:d4:b5:96:
f5:36:12:49:30:7c:62:a6:a1:2b:90:7c:aa:8d:23:
f5:0b:be:24:95:19:a2:42:b1:0f:a4:b1:5c:ba:9d:
92:d5:1e:94:6b:ba:c4:20:e2:5c:56:4a:5f:c1:98:
c3:6b:5e:f3:a2:09:80:96:36:bd:7a:cc:e1:1b:63:
66:32:0a:c4:77:a9:78:15:89:f0:8b:1a:0f:a4:55:
1e:eb:b0:1f:d4:42:36:0d:e1:c7:e3:ec:68:f2:8d:
9a:7f:62:89:a4:c8:4b:64:28:9f:da:21:63:65:d0:
bd:38:6b:35:54:df:6d:cd:60:41:99:a8:25:93:29:
5a:4e:1f:09:eb:f4:51:2d:62:88:66:5c:f1:8d:e2:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:F3:1C:B0:DB:98:10:90:64:23:8F:36:16:16:DC:83:9E:26:DD
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5c:c5:e1:d3:bb:a1:0d:c9:0e:33:2c:af:85:95:68:b0:12:
1a:5e:9b:20:9b:59:f2:b1:fb:79:e1:60:5b:aa:dd:a8:b5:96:
8e:b8:bb:64:31:40:e7:a0:75:f5:ff:6c:47:16:34:e3:04:49:
7a:db:a2:60:92:24:be:cf:e2:14:46:39:74:59:0d:4f:bc:77:
79:b2:89:83:e0:8c:5f:8a:f8:84:31:f5:cf:ff:09:af:af:5f:
05:03:cc:3d:c1:63:b2:48:d3:85:05:a6:51:1c:a8:eb:33:f0:
29:32:4d:0a:13:ec:42:9a:2b:78:15:55:14:89:da:ad:70:e3:
6d:f7:17:d9:3b:0e:92:5c:c3:96:85:02:7d:29:63:7a:64:04:
18:d6:3e:68:c2:66:3b:5d:db:3f:bb:71:64:48:bc:b7:c6:3c:
f8:7c:2a:56:32:30:bd:5b:e9:e2:c7:4b:ae:e1:aa:c2:72:7a:
85:4e:f1:79:a3:b9:8a:89:05:95:8b:cd:f8:59:08:9a:a9:e2:
11:b7:50:60:75:c6:2d:00:16:c7:3d:b9:c4:c1:7a:2e:ad:d4:
a7:d2:93:3a:3c:77:ff:6b:77:c0:3a:6f:d6:8f:1e:25:c9:02:
e3:cf:bb:25:d6:60:6b:9e:95:1a:93:85:ad:53:36:bb:4a:9b:
55:4c:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:55 2026 by rpki-client