Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/419d9d-7cb9-420c-b4e1-84212513b444/1/Mbw5H4HzyrHsmkc03ROT81cMfSk.mft
File: Mbw5H4HzyrHsmkc03ROT81cMfSk.mft (raw, json)
Hash identifier: KumaUg9pTdLgCq3yE8Ka/7T+lx3A7r5TYtkgWdIj3NE=
Subject key identifier: D7:16:BD:19:C1:40:7F:E6:B6:0C:82:57:8F:43:EA:E5:F1:7A:8F:D2
Authority key identifier: 31:BC:39:1F:81:F3:CA:B1:EC:9A:47:34:DD:13:93:F3:57:0C:7D:29
Certificate issuer: /CN=31bc391f81f3cab1ec9a4734dd1393f3570c7d29
Certificate serial: 01A10E4C58C3B3B1C176928611B67F63EE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mbw5H4HzyrHsmkc03ROT81cMfSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/419d9d-7cb9-420c-b4e1-84212513b444/1/Mbw5H4HzyrHsmkc03ROT81cMfSk.mft
Manifest number: 01E3
Signing time: Mon 05 Oct 2026 23:00:46 +0000
Manifest this update: Mon 05 Oct 2026 23:00:46 +0000
Manifest next update: Tue 06 Oct 2026 23:00:46 +0000
Files and hashes: 1: Mbw5H4HzyrHsmkc03ROT81cMfSk.crl (hash: yK/NrtBd6ZEUounRB0hO28n+5Au6w4/391X0DxF7HrI=)
2: hEKwHInqxZDxOY8_VK9ITgxyWvo.roa (hash: WX9el2WK55TcavpbwykK6PxtP2KUMIWkih57BuNbQZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/419d9d-7cb9-420c-b4e1-84212513b444/1/Mbw5H4HzyrHsmkc03ROT81cMfSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/419d9d-7cb9-420c-b4e1-84212513b444/1/Mbw5H4HzyrHsmkc03ROT81cMfSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mbw5H4HzyrHsmkc03ROT81cMfSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:58:c3:b3:b1:c1:76:92:86:11:b6:7f:63:ee:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bc391f81f3cab1ec9a4734dd1393f3570c7d29
Validity
Not Before: Oct 5 23:00:46 2026 GMT
Not After : Oct 6 23:00:46 2026 GMT
Subject: CN=d716bd19c1407fe6b60c82578f43eae5f17a8fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:6d:f6:d3:58:37:00:d3:ad:2f:d7:cc:82:
a7:d1:70:39:29:82:e7:e2:83:65:b6:34:30:ce:5f:
0b:31:de:84:5c:99:67:b9:20:7e:59:3f:4b:48:c4:
11:ad:a9:3e:20:55:fe:e9:31:c8:80:05:0c:f6:e8:
81:ab:20:b2:aa:ce:f9:75:8d:63:a8:6c:b9:16:a2:
f7:fd:48:3a:56:58:30:cb:b8:4b:ab:3b:a4:99:7b:
7b:5a:f6:1d:9d:e5:97:28:8c:4c:df:f6:24:ac:6f:
68:32:32:39:76:8b:a3:39:5c:4b:d7:97:68:08:0c:
c1:86:b0:be:05:84:43:90:c5:a2:88:d4:78:50:9a:
3e:29:39:fb:64:fc:78:d8:e6:25:fb:a3:0e:6f:1a:
4b:9e:cc:dd:32:7a:a6:dd:ae:39:e2:73:7f:2f:bf:
91:ec:fb:02:1c:54:00:d2:cd:ba:a8:f8:2f:e4:fa:
7f:34:74:31:ea:0e:8c:41:ae:06:6e:d5:47:b7:5b:
6d:5a:0a:97:85:d1:a1:74:73:2b:1f:ec:01:2c:7c:
47:6b:a5:53:55:e6:68:b3:40:2a:96:2b:b4:2a:35:
a6:56:8d:d8:45:3c:3d:a6:cf:25:ae:29:2a:9e:b9:
c4:b5:43:50:7a:8e:02:df:a6:cc:36:93:38:ae:30:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:16:BD:19:C1:40:7F:E6:B6:0C:82:57:8F:43:EA:E5:F1:7A:8F:D2
X509v3 Authority Key Identifier:
keyid:31:BC:39:1F:81:F3:CA:B1:EC:9A:47:34:DD:13:93:F3:57:0C:7D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mbw5H4HzyrHsmkc03ROT81cMfSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/419d9d-7cb9-420c-b4e1-84212513b444/1/Mbw5H4HzyrHsmkc03ROT81cMfSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/419d9d-7cb9-420c-b4e1-84212513b444/1/Mbw5H4HzyrHsmkc03ROT81cMfSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:44:e7:a4:a3:40:1d:28:74:57:c3:e4:c9:a8:c8:22:78:14:
26:17:15:74:e0:4d:bf:fb:e3:36:be:d8:2d:09:80:18:3b:02:
37:d9:69:d7:1b:f6:40:e9:31:ae:2a:ad:de:dd:e0:e5:a5:7d:
df:81:53:49:ad:78:27:67:0f:f0:da:35:8a:13:cd:92:39:4f:
cc:54:7a:82:ef:52:91:4b:a1:a9:47:17:db:87:ec:6d:9e:85:
cd:44:dd:d1:e4:02:a7:32:a4:9a:83:87:d5:d0:fe:d5:7d:1f:
34:dd:a6:44:9f:b2:8b:7e:74:0b:29:44:ca:99:98:6e:25:f7:
5d:f0:fd:87:c6:30:9f:f8:a8:dd:d4:47:48:af:2c:81:95:3a:
a8:28:28:c0:f8:be:da:fe:2e:a8:65:7e:40:ab:b2:99:9e:34:
33:21:df:72:f9:bf:b6:22:2f:ba:5c:3f:3f:69:2a:6d:65:a7:
c4:e8:e0:01:66:bb:c1:b2:f6:e4:4b:90:85:f8:df:c8:32:4e:
89:8a:6c:7b:a0:79:31:3b:a9:64:97:65:c8:42:a2:1d:45:92:
fb:ce:b1:cf:93:5a:f8:a0:c0:10:0c:34:7b:f4:e5:e5:f8:69:
09:9f:58:fb:91:46:53:83:99:7d:40:74:f7:70:99:23:a5:00:
fd:e9:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:41:03 2026 by rpki-client