Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: eLmu/LRJs9OhOM+B8pAqKQhD3CvhJiEbG0QacDXtS7c=
Subject key identifier: 9D:39:CD:3D:F3:0C:62:5A:53:AD:7D:B2:65:2F:3B:E1:27:5C:9C:7B
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 019D281677E8363FA89D05CFDC354CDB2421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 15B1
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa (hash: tm/NB5wzRW6Hwa1rWNFA/fkC7eMyH/xDfSrejkXoTro=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: /SZ4kUfmoQvO3Y0SwwCn1f/SkRfzN8TCt5lMGz/pTMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:77:e8:36:3f:a8:9d:05:cf:dc:35:4c:db:24:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=9d39cd3df30c625a53ad7db2652f3be1275c9c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:91:ed:40:f7:52:83:26:74:59:40:fc:f0:
5b:69:a6:6d:0a:63:32:cf:df:60:04:65:49:c2:dc:
ba:8c:68:60:e2:27:81:67:83:62:af:6d:9c:cf:5d:
be:1c:65:c7:f5:f4:09:e4:66:76:61:33:86:40:47:
ca:7c:7b:1b:dc:ed:5d:f4:44:a7:0f:cd:a9:d9:89:
3d:d7:4a:b1:17:3d:00:66:58:fb:35:a1:19:12:a0:
91:a1:de:59:c9:48:41:88:75:84:0a:3b:b1:a4:1c:
2a:fb:a5:85:4d:84:c3:c2:0a:a6:11:8f:b2:cb:13:
c7:6c:14:83:24:22:a4:e3:3e:eb:49:d0:27:f2:37:
9f:2a:c6:bd:ae:56:60:86:2f:e9:c5:3b:81:94:e8:
91:47:4a:13:f1:83:fa:c8:f5:e1:9d:e9:0d:75:d4:
f1:f9:1a:ef:6b:9f:2d:95:31:9c:e4:9c:94:d6:0c:
01:af:0f:1b:3a:c5:7e:6c:e6:94:c7:92:a7:c3:03:
84:c8:d4:ba:02:0b:35:81:b2:0b:f8:e1:7a:97:9d:
00:06:67:d8:bf:50:22:60:7b:a5:99:3d:ec:02:63:
b4:66:46:6a:d2:ba:e2:b7:6a:7c:ba:fb:95:96:aa:
59:fe:99:79:6c:df:b6:b1:95:a6:2b:21:b2:47:49:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:CD:3D:F3:0C:62:5A:53:AD:7D:B2:65:2F:3B:E1:27:5C:9C:7B
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:26:b1:c6:6c:62:d5:4d:88:cd:bb:a7:f0:72:0f:88:3b:14:
04:0d:e2:47:fb:66:34:21:64:1d:2f:24:db:36:ef:5b:97:7e:
e4:d7:b5:97:f6:05:fe:7e:9f:f8:d3:02:ef:64:9a:bb:a9:2e:
3b:5b:ed:65:6f:6a:f0:9e:92:58:76:b1:65:d7:f9:53:91:f0:
3c:3e:73:5a:b6:a9:30:1a:a0:03:a0:cf:13:23:78:fe:2a:75:
c7:67:26:07:75:b8:a5:d0:b8:31:d0:3a:a0:70:50:16:ae:6d:
91:56:01:1b:d9:75:53:83:c6:c8:ab:61:80:c3:e9:e8:3e:c5:
d6:48:03:3a:51:9d:56:b0:58:91:21:4a:e4:be:c7:6a:5a:01:
7e:2e:7b:c5:f8:3c:c4:09:c7:61:4b:d2:73:d0:54:6c:3f:84:
b7:88:b7:a0:62:44:23:5c:a8:fa:fe:2d:d5:85:1c:98:ec:b5:
f8:d5:fd:cd:f6:75:86:75:e2:22:92:e6:22:3a:90:3f:d4:fe:
f1:8c:2d:9d:ef:83:5d:77:c2:40:02:9d:89:80:bd:59:72:15:
b7:86:79:a5:48:8d:75:75:1f:bd:2e:38:69:a2:ed:8f:f9:6e:
33:94:8a:f9:2b:86:13:8e:9f:80:dc:50:8c:62:68:1d:06:78:
38:18:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:38 2026 by rpki-client