Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: rGDabJW6S9nzjD+b3mP04hmuN9uzQmlJ0sTh9sDCkrk=
Subject key identifier: 7B:DC:5A:58:D0:50:AC:97:5F:C8:B5:D5:59:FB:5A:B9:C8:FC:29:84
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 01A0EC659A297C7B2FDF730C0E89A54F2D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 16F6
Signing time: Tue 29 Sep 2026 09:01:16 +0000
Manifest this update: Tue 29 Sep 2026 09:01:16 +0000
Manifest next update: Wed 30 Sep 2026 09:01:16 +0000
Files and hashes: 1: DhcFXZ6jMW_ZqkOv151bguX3i0I.roa (hash: cM3wDGiyN6kWav0oguQAqHZtevePQDWeyk5utIPq1I4=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: w25xfJkMSKaXkK7NtgUGUt1BffFMcyjuf0KLCJqY2bg=)
3: MlIeXeRVXTH0Bn_Rq1iG-Rx6-_s.roa (hash: NRgb0MGgfzBWFBof4r2izggT9Z1fC6BBQ+XR13b9aoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:9a:29:7c:7b:2f:df:73:0c:0e:89:a5:4f:2d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Sep 29 09:01:16 2026 GMT
Not After : Sep 30 09:01:16 2026 GMT
Subject: CN=7bdc5a58d050ac975fc8b5d559fb5ab9c8fc2984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:3d:34:80:53:9a:a2:c6:51:ff:bd:10:b6:
ab:b7:7d:04:e8:b2:4c:72:87:d5:3d:8f:35:80:11:
66:48:c8:9b:57:49:81:2e:2c:94:14:f0:e4:01:65:
7e:53:e2:00:c0:49:2f:0a:46:4e:4d:97:5a:aa:b3:
f0:4a:cd:f4:2d:1d:a3:0d:e7:2a:ef:28:ce:dc:04:
24:a5:7a:96:77:fd:24:18:c2:f6:65:38:68:a5:fd:
cf:7b:c4:84:53:ac:1f:96:92:b3:4b:64:aa:45:e3:
d3:a1:f7:8c:66:62:86:41:0f:25:bf:29:74:38:85:
9e:e5:a7:3b:d6:92:40:f2:35:d4:56:84:4f:c0:31:
f1:8d:1e:1d:26:a5:c5:bb:41:56:18:7b:0a:04:1a:
2a:d4:c7:09:8b:71:a4:f0:e7:c6:65:b0:b3:d1:c7:
1f:1b:af:8f:24:d9:af:fd:23:2f:9e:28:97:06:a1:
13:4a:ac:f1:83:88:8d:1c:43:0d:ca:e6:1e:e7:d9:
10:76:2a:5c:89:98:0b:8f:32:d6:60:b8:f1:94:fd:
f1:4d:5e:b0:6a:7c:ad:dd:99:09:ac:f0:7e:ef:80:
74:ff:7b:60:27:b8:16:ff:b3:30:b2:52:8b:63:2e:
c6:2f:b0:31:73:75:2b:a8:c1:a3:50:43:2a:fd:93:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:5A:58:D0:50:AC:97:5F:C8:B5:D5:59:FB:5A:B9:C8:FC:29:84
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:35:0d:e8:9c:ea:b0:f7:cb:86:08:8d:80:d7:ee:22:81:1a:
55:ff:56:ce:76:02:a0:84:b9:da:80:b9:ca:a7:ce:6a:74:c4:
36:bb:bf:d6:7c:3a:22:b1:3f:cf:99:df:d5:a6:54:94:af:1a:
5e:45:40:74:2b:47:00:05:65:04:7a:c0:a6:b1:af:3e:f6:4e:
f4:76:90:0c:da:ff:6d:44:42:7b:df:7f:f6:cf:3e:c5:e8:d2:
12:a6:b8:8c:00:78:82:c3:48:ec:c6:b5:3b:d9:77:94:11:ee:
c3:f4:ac:75:16:1a:fb:c4:ee:44:8c:91:37:18:91:de:09:9c:
d4:13:38:ff:d9:7b:6f:2a:7a:e9:58:29:9b:65:86:87:5b:02:
0f:90:cb:a4:6e:48:34:0c:9b:00:21:98:19:b4:b6:8b:01:d1:
a9:ec:80:6c:0c:e1:e7:1b:93:85:7f:60:f9:fa:25:39:2f:db:
2d:2b:6a:a6:af:8a:78:20:bc:d4:65:69:bd:ce:ae:1e:ec:57:
6e:a4:a6:ed:3d:76:11:e0:fb:78:cb:13:51:c7:4a:e1:4d:cb:
f8:b0:47:71:49:5c:f7:23:4c:93:16:62:03:f4:78:37:87:b2:
9a:a3:f0:f2:8d:58:35:fa:35:ef:88:c8:99:89:ac:d7:02:33:
3b:c2:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:51 2026 by rpki-client