Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: pm9k59ljD24l9faHl+YESxeGQwqUFQFVSOk3EiQvhZo=
Subject key identifier: EA:CA:C5:85:CD:1E:C0:B2:4C:36:BE:15:A8:D8:CC:79:61:2F:1F:46
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 019D27A8EFA99E96CC2A2624D11E36D51CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0F00
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: 80HhoeNPc5s53xhXVraqV6XD14j0tkwd91fM2Z9D5S4=)
2: olXqqQrFh2xVArtOsvn2MBA_a1Y.roa (hash: aPxQM0pZgD7GeT16zbXpiKlMDfDXjek/Ix/Gf5xSSjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ef:a9:9e:96:cc:2a:26:24:d1:1e:36:d5:1c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=eacac585cd1ec0b24c36be15a8d8cc79612f1f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:c1:1a:a2:ae:c4:fe:f4:d4:bb:e1:09:a6:
aa:68:5f:99:38:55:28:15:55:11:16:18:fb:f1:97:
97:82:56:36:1e:b6:93:ce:b9:1f:ee:a9:87:c6:2a:
7b:99:ad:94:08:ed:db:ac:96:6f:17:a8:41:47:3c:
b7:08:bc:fd:45:c0:82:f0:42:16:3e:da:4f:26:ae:
db:1a:72:5d:f0:03:3f:ec:6a:bc:1c:52:ac:c7:fc:
91:52:f7:e9:94:69:35:12:46:34:c3:c1:3c:1b:da:
ae:ac:39:3a:64:09:81:86:c4:9b:9a:b1:fc:f6:b1:
6e:31:f7:5c:00:09:cd:be:64:a8:be:ed:2f:03:85:
6f:78:be:58:0a:33:9a:aa:fa:66:fe:51:1e:76:cf:
49:31:91:f2:60:94:33:df:50:61:8d:cf:a1:50:80:
39:f4:c3:1a:0d:35:23:b6:d8:43:6f:f6:01:59:68:
2c:61:6e:8a:b9:0b:c0:06:b1:9d:44:61:4e:78:b1:
d8:e8:82:07:31:94:87:e3:d2:11:c0:53:a2:30:cc:
cb:89:af:67:a6:2e:92:64:8f:e0:66:59:51:0e:ed:
24:d1:d6:6f:f1:c9:65:de:e0:dc:6f:fe:a1:7c:45:
48:50:60:b3:e7:df:5b:48:c9:07:1b:61:af:fb:98:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:C5:85:CD:1E:C0:B2:4C:36:BE:15:A8:D8:CC:79:61:2F:1F:46
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:12:e9:56:73:70:be:0e:c6:6e:b2:b1:a1:e9:e9:de:b8:97:
55:ba:5e:5c:9c:9c:44:09:0b:28:44:a0:4e:f9:18:be:ad:a3:
07:76:ac:b7:4f:9d:a2:43:59:cb:d2:bb:ef:aa:53:39:2f:f0:
69:6b:22:a8:b9:b3:04:84:32:c1:69:74:3b:bc:38:63:0f:bc:
57:0f:34:ce:ed:2d:9e:c5:f2:5e:93:92:6c:3d:d3:d5:d1:2d:
8f:87:bb:6c:56:45:4b:22:e5:89:6e:32:b8:a5:42:6c:be:e9:
39:9d:87:2b:85:ab:d6:4e:80:17:cc:0b:db:5d:2d:66:7a:18:
a9:b8:b9:67:c5:a3:89:bc:52:7a:5d:3c:d9:1d:8e:7e:3c:78:
ad:6c:c8:19:84:1d:de:90:0d:e4:25:ee:f6:e9:09:4c:a1:1e:
14:a2:26:c4:9f:69:dd:9c:0f:f5:4f:88:15:62:43:96:2f:91:
88:09:21:7a:97:48:a2:7b:b2:2d:ff:50:79:9d:9d:28:7b:09:
a5:07:69:ac:e0:0e:8c:bd:4e:c8:c8:fd:24:f9:4e:4d:7f:2b:
d5:b2:cb:3f:1b:c0:02:dc:6b:11:10:2f:2b:b6:99:d3:f1:78:
0a:b8:e3:87:78:46:29:a4:99:51:6a:ae:2a:c2:d2:c1:5e:0e:
bf:ac:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:52 2026 by rpki-client