Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: TpYIabjPqAPn2vKD2gEJ8gULz4dUlZ9kvi8XaQeQiSI=
Subject key identifier: FB:DF:92:84:D8:DE:06:23:C1:DB:23:C7:D8:65:2C:C9:E4:E0:C1:E6
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019D284E1BAFB397AAEC74A1FC2E4875F42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: Gy+EDm+MaU1qLyxOKSUpW5DLGpPMzlTYp8BCYSMCbPE=)
2: qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa (hash: Nfcf0dxf81UBVMjoGjSg559+Hju5Dln2RKJKCrFeGVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1b:af:b3:97:aa:ec:74:a1:fc:2e:48:75:f4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=fbdf9284d8de0623c1db23c7d8652cc9e4e0c1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:ed:59:38:21:d6:1c:42:86:ea:a8:26:5f:
41:9c:16:67:9d:36:3c:db:f1:39:88:b0:22:ff:50:
fc:12:9f:22:8b:6c:b0:af:bf:6d:e0:6c:e3:b9:92:
68:22:68:00:a2:2b:41:ef:f7:c6:86:73:ea:26:28:
ba:09:cb:e2:90:7d:81:ff:06:86:f2:da:81:79:af:
4a:6a:a7:cd:4c:15:14:bc:0f:40:25:af:5e:d7:4a:
cd:07:de:89:3e:67:7f:f6:84:86:c3:37:b4:d7:2e:
5c:ec:c7:a6:66:8a:eb:ed:48:88:0f:e4:7d:4b:0c:
f8:26:8c:df:66:ee:41:4d:61:72:3a:8a:02:7b:cb:
72:5f:fd:f9:ce:43:9d:a0:fd:94:17:32:b7:cb:96:
0d:48:cc:a7:28:ca:2f:0b:92:11:28:4a:bc:57:d3:
ab:f1:48:bc:8e:80:e2:09:31:c1:4e:74:54:ac:75:
2d:62:06:db:7a:d8:cb:75:a2:6e:b2:cd:a4:31:c4:
44:38:8d:4d:ee:0e:8c:16:05:b9:9a:aa:07:ac:2a:
6b:04:57:85:79:82:11:aa:49:08:a8:00:20:6a:ed:
8b:b3:22:7e:c8:d3:6d:ad:72:7b:d9:2d:01:d1:3d:
d6:53:eb:93:f3:d4:39:85:f5:5a:e9:3e:16:9f:9c:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DF:92:84:D8:DE:06:23:C1:DB:23:C7:D8:65:2C:C9:E4:E0:C1:E6
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b9:cb:65:6f:ba:36:2c:b8:be:e3:53:a7:71:d6:28:43:ad:
e6:dc:6c:a5:8c:1e:3a:e1:a7:87:d7:3f:bf:f1:12:89:30:b8:
48:a3:12:45:c3:bd:ad:50:ce:e7:fa:d9:7d:bf:35:27:8f:08:
a9:e1:4f:46:8b:06:98:29:f1:8f:5f:ec:34:29:30:6c:94:48:
4a:ef:13:59:c1:a3:82:68:7f:cd:7d:d5:9c:54:5a:44:3d:7f:
cb:a5:55:76:2a:ce:49:29:b5:fa:35:26:5e:ec:23:98:f4:1d:
bc:99:ab:61:b9:cc:66:50:46:d2:28:a1:50:9f:7d:88:ae:f0:
d6:04:f2:76:ad:aa:ae:c9:a1:9f:dc:30:a7:16:a5:da:10:c8:
ea:47:d6:a1:12:92:05:f7:02:db:9d:bd:d0:22:16:4b:07:2b:
c1:8c:8a:d4:5c:b3:6b:21:16:9e:c5:8c:b3:95:25:80:2c:d6:
ac:42:f8:fd:4a:d5:e9:44:57:84:91:e3:3c:27:64:14:be:a6:
d2:73:06:dc:47:3b:ff:f9:82:f6:55:59:f9:03:e8:a1:71:a3:
a7:b2:99:a5:83:0a:d1:ba:07:92:67:f1:be:5e:92:bb:10:f9:
cf:86:ce:a4:ff:14:15:c6:f7:60:40:c9:da:c4:6d:e4:21:90:
7d:28:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:17 2026 by rpki-client