Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: i/hNPRSZD/2ViZPcPSAs4xQgSIzxvUKF6MDAuThugW0=
Subject key identifier: 65:F9:64:B1:89:94:4D:D5:2D:B8:BC:76:5B:E8:90:54:8F:E7:15:22
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019E1D59D9F1A02D547DEAEA9BD19034B094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 18:01:28 +0000
Manifest this update: Tue 12 May 2026 18:01:28 +0000
Manifest next update: Wed 13 May 2026 18:01:28 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
3: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
4: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: h44qPDhcGy32XPDEeelpo4eAE9x0N5Kg60c61innwJM=)
6: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
7: Zem19jbYLY_TJOw1fhbbzQQpIrk.roa (hash: 4+yIb5TxfA9PdNX24aIAR4MgjiRqcH12CDhLB9IbWOk=)
8: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
9: x7z-ysQrqrlmh-6azxQlDFRLWOg.roa (hash: d9bh3aMeZoe5mLDSNkDPB2TdMDnFvgBW7tcxJb25w1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d9:f1:a0:2d:54:7d:ea:ea:9b:d1:90:34:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: May 12 18:01:28 2026 GMT
Not After : May 13 18:01:28 2026 GMT
Subject: CN=65f964b189944dd52db8bc765be890548fe71522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:1b:58:62:cf:b3:83:24:1e:03:e7:30:01:
24:3f:fd:66:44:14:99:06:97:d1:5c:1b:67:51:ab:
59:92:90:7d:4a:f4:a4:75:2b:c2:10:91:b8:03:2b:
e9:2e:9b:14:f4:f1:e3:42:74:38:35:58:cf:00:c2:
e5:f0:d1:2c:55:0b:0a:a4:e2:ce:47:86:67:c8:b6:
e5:f6:59:eb:65:84:f0:ac:78:41:a8:6a:8d:f2:ae:
82:21:83:a9:fb:7e:79:85:ca:11:2f:8b:a6:8f:33:
c4:e1:5c:62:30:d1:72:a7:e5:59:30:69:b1:18:19:
a1:f1:a4:a6:32:4f:d5:c6:77:bd:61:31:ae:64:d9:
01:77:76:f7:27:5a:e4:8c:bf:54:31:c9:21:b6:9a:
31:d3:77:a6:57:33:f4:96:9d:06:5a:6e:14:d8:91:
d3:f9:3c:2c:95:73:73:5a:cc:dc:cd:55:cb:64:f1:
b4:01:8d:a9:06:56:46:34:24:64:e6:a1:26:40:ee:
8f:f6:81:3a:7d:ca:40:a1:64:b7:f5:f8:76:f7:78:
48:97:5c:c9:09:66:70:d6:86:93:c9:aa:65:9c:c5:
fc:5f:b8:29:c4:78:38:df:80:a7:22:21:f1:7d:54:
0c:0a:7c:0f:b7:54:84:bb:58:02:04:8b:a1:7f:2c:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F9:64:B1:89:94:4D:D5:2D:B8:BC:76:5B:E8:90:54:8F:E7:15:22
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:14:58:38:92:fd:80:d3:5b:95:a3:94:a4:30:f4:af:86:
63:48:47:e9:b0:1e:11:0f:9c:80:f3:30:cd:08:67:c3:0f:85:
a0:71:73:70:df:9c:fe:0c:10:72:8a:ee:3f:e4:64:ba:d5:9b:
0b:82:42:72:bb:d1:d2:86:13:ee:c2:6a:e3:9a:99:b1:1b:69:
bb:16:ac:be:de:12:bf:07:a0:0e:9f:9a:19:2b:70:fb:4b:e7:
4c:87:c5:f5:98:23:dd:19:71:b8:43:d2:53:e5:08:a8:78:c8:
3e:d8:44:84:08:39:b0:d7:7d:6d:45:09:4f:b3:b2:56:92:89:
18:df:ef:1b:55:1c:78:14:ff:f2:c0:ac:27:48:55:e6:0b:d7:
0e:0d:3a:5d:52:ca:66:af:94:59:6f:d5:a3:f8:24:3b:cd:08:
7a:c9:1d:aa:25:24:2e:4a:88:39:3d:ee:8d:77:03:6e:bd:a3:
e1:5d:2d:f0:1d:d4:50:f3:ab:44:14:c0:7a:8a:32:4f:7f:ef:
33:27:57:df:3e:c2:21:05:85:81:f2:e4:58:65:9c:e7:58:b5:
dc:3a:d9:c6:3d:58:bb:80:a9:15:b7:02:54:d4:e5:a4:26:6a:
2a:07:dd:c8:6e:c5:2a:9b:92:0b:8d:2f:db:b2:70:41:bf:6d:
27:5f:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:15 2026 by rpki-client