Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: iJYFPHjaCKgbQcgGWBkFQyTfyNacY6rGHRMR3JVnNl0=
Subject key identifier: 3F:CE:A6:FA:8F:E6:F2:3E:13:B7:15:0C:CA:7C:8C:DD:ED:7E:11:45
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019D2A04F486C9CF24C4457FE52489D39D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 12:01:00 +0000
Manifest this update: Thu 26 Mar 2026 12:01:00 +0000
Manifest next update: Fri 27 Mar 2026 12:01:00 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
3: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
4: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: opYeFNpsT6NTNt/UtxS2qcXwfIU8nqzc5fFiwM+CVFY=)
6: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
7: Zem19jbYLY_TJOw1fhbbzQQpIrk.roa (hash: 4+yIb5TxfA9PdNX24aIAR4MgjiRqcH12CDhLB9IbWOk=)
8: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
9: x7z-ysQrqrlmh-6azxQlDFRLWOg.roa (hash: d9bh3aMeZoe5mLDSNkDPB2TdMDnFvgBW7tcxJb25w1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f4:86:c9:cf:24:c4:45:7f:e5:24:89:d3:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Mar 26 12:01:00 2026 GMT
Not After : Mar 27 12:01:00 2026 GMT
Subject: CN=3fcea6fa8fe6f23e13b7150cca7c8cdded7e1145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:0e:0f:47:c1:f5:85:d3:44:8c:6c:ca:53:
c7:6d:81:fe:23:a9:27:68:e7:bf:aa:5e:22:93:9e:
5e:79:c1:b9:54:7f:ce:28:34:e1:11:59:f2:7a:95:
a5:ea:8f:df:6d:3c:c4:d3:49:5a:20:b6:10:bb:97:
fb:56:88:e6:ff:13:1f:6c:3f:25:1c:0c:d0:d5:2c:
e9:cb:7a:db:2b:cc:45:60:59:63:91:79:94:32:e1:
3b:00:17:e0:7f:e6:4b:5e:e5:f7:76:73:f4:8e:ac:
b3:75:0e:8e:21:58:c1:ed:f2:22:6c:19:ab:57:23:
bb:31:ff:a4:5c:0b:21:e4:fd:50:9e:6a:8f:ef:f0:
96:2e:bd:8d:f9:d4:5e:45:db:17:60:ea:12:63:36:
51:cb:53:a4:81:60:b4:01:c0:d9:33:2e:ff:b2:db:
cc:8d:ec:ca:a0:54:63:7b:49:9d:ab:17:f4:b4:18:
e3:31:57:18:dd:f9:19:e2:20:98:d7:5a:7d:75:c2:
91:1d:04:02:ac:01:21:69:57:bc:2c:65:aa:c9:0f:
00:e5:87:f9:63:de:d1:19:eb:59:b4:fb:14:bb:c9:
ba:65:18:dd:a8:0c:88:76:a4:28:de:ea:b0:c9:51:
76:f5:9d:0b:e1:d2:b5:ed:14:1a:ba:71:71:3b:41:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:A6:FA:8F:E6:F2:3E:13:B7:15:0C:CA:7C:8C:DD:ED:7E:11:45
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ec:17:9e:84:9f:a0:c9:b4:f2:0f:ee:52:e2:a5:6a:5b:09:
ce:d9:38:82:5e:fc:e0:97:93:9b:55:47:3a:92:2f:86:47:4c:
4a:99:d6:99:03:43:46:60:e4:fa:22:ea:5c:77:bc:6b:e9:8e:
c8:ed:6b:ea:e4:b3:44:60:5b:b5:33:96:82:c4:d5:fc:29:63:
8f:8d:b4:3d:c3:3f:72:01:6c:33:73:88:04:d4:58:e7:68:b0:
81:53:a8:32:23:67:3c:b0:db:84:ef:c0:57:8e:d8:1d:51:1b:
c9:d5:8a:28:08:10:e2:78:4b:a1:a7:43:74:6d:50:8a:57:d5:
f5:c2:23:25:5e:86:da:39:d6:47:cc:40:67:24:d5:e0:58:be:
11:96:4a:36:b3:44:31:9e:f6:a1:11:01:04:7a:11:25:2a:a6:
67:b8:c1:0b:01:18:74:bd:2b:93:a0:8e:77:12:43:a5:82:fb:
d5:d0:5d:06:8b:66:84:9a:82:77:c4:3e:6a:4c:79:ed:86:51:
00:46:b3:54:49:d0:7a:b4:84:fc:41:c1:3c:67:08:43:a1:f9:
15:bb:f4:40:ff:fb:63:92:ed:26:09:12:0d:60:1f:19:ec:42:
11:32:01:a7:d2:e4:ab:71:c5:f5:4d:71:15:14:93:c5:49:72:
9f:8e:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:40:00 2026 by rpki-client