Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: OCDlzB43Hr9o3wbywGAoMhP8Nrj9TrZWXAF3SBW5ovs=
Subject key identifier: 01:C5:BE:2C:41:C4:D1:7A:50:E4:04:67:28:0A:E5:04:3D:AD:83:25
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019D2884AB8A0079F9F699D938BD5CD2CA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 1502
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa (hash: 0zA+P2Wj4q6cydJzTfe4tmDc4sztqJccFJv0Zen4ddc=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: YiDveDFYW0T4VVUWlj+b6b+S3fgChk1hD9c4hFfHzDY=)
3: PfIfsUmHCecT0quWuMMLRmwtU_o.roa (hash: 1Lg6Rrqt3IOywh0QJkAE12er2k2miVzqT2LnmDFzGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ab:8a:00:79:f9:f6:99:d9:38:bd:5c:d2:ca:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=01c5be2c41c4d17a50e40467280ae5043dad8325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:93:10:72:c5:02:43:02:fc:ce:16:63:f9:
43:04:97:9d:63:a7:a5:6a:7e:c5:86:bc:a9:cc:d5:
29:f9:f8:95:0e:8a:83:56:7f:91:9d:65:e9:21:01:
6d:75:b8:bd:f8:e3:8b:21:c8:b6:0f:4d:25:3d:56:
ce:fb:64:46:c8:50:1b:a0:31:4d:e9:08:81:cb:65:
05:1e:d6:46:f0:77:5d:bc:03:d7:8e:ed:4e:1a:46:
ea:1d:48:7f:b0:96:46:55:7c:f5:6a:7d:5e:1b:49:
14:47:29:df:57:8e:2f:f6:7b:0c:f7:75:26:85:18:
95:42:59:18:67:4d:54:ea:96:b2:3f:ad:ce:72:1d:
63:58:28:a9:65:d6:e8:71:54:02:64:ad:f8:f3:e7:
f7:81:1e:81:11:09:83:ff:55:b1:d4:88:0e:c6:bd:
93:b8:f7:7d:c4:ac:49:dc:56:77:d8:39:0b:3f:12:
98:0d:e3:4e:97:f1:77:11:c4:fa:76:5f:f8:a3:65:
10:5c:f2:88:6d:4a:d8:2e:48:c2:67:ca:14:5a:31:
58:01:85:70:4d:27:31:10:29:24:1f:b8:3a:32:57:
b2:aa:f8:0d:81:0d:26:d0:16:3d:51:1a:c7:82:92:
59:2e:68:2b:84:8f:d7:4d:25:2b:17:1f:b8:85:a3:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:BE:2C:41:C4:D1:7A:50:E4:04:67:28:0A:E5:04:3D:AD:83:25
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2d:b8:5c:a1:1d:1b:f9:e8:a0:e7:c7:84:0b:46:3a:2b:7e:
46:72:15:77:46:03:a6:d6:3f:e8:81:0c:c8:a7:64:93:90:93:
89:55:61:5b:86:55:6e:10:a5:e2:d8:43:aa:8e:8f:af:5c:a6:
40:64:6c:36:82:f0:f9:70:53:90:73:a1:ca:af:ac:73:7e:15:
8b:5f:fb:68:42:5f:9e:71:2a:60:ad:49:af:c2:14:e6:0f:f2:
56:fd:23:e6:8e:3c:7d:30:33:17:22:b9:1b:8a:7b:88:d9:17:
f3:50:2e:e6:12:ac:e7:0c:6d:18:64:ab:58:cb:b0:ff:76:fd:
a9:78:ce:fc:64:4b:5b:c8:80:fe:1c:87:99:db:60:ce:d5:a8:
b3:06:5c:6a:8b:9b:ef:69:95:1a:1f:cd:c1:e7:1a:a3:a1:b7:
0f:ee:7b:04:dd:00:b1:19:af:e5:55:ef:d0:a0:c2:ba:af:8d:
0d:63:cb:6a:b0:9e:9c:0d:95:29:15:f6:3f:25:59:40:f8:36:
87:b4:6d:4d:71:40:87:b6:b7:64:e3:a2:96:d0:5e:f5:fb:f6:
ea:89:ee:f8:85:83:a5:7a:f7:86:79:d8:74:bd:ef:fa:50:23:
a5:2d:6b:79:10:97:2d:69:5c:00:74:55:91:0c:f2:30:da:7a:
e1:3a:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:05 2026 by rpki-client