Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: LQ2IrBruk0UCfNH/LnYJuPp0oXToU0UexPRuQrxrsH4=
Subject key identifier: 3F:42:92:DD:F1:9E:6A:5C:C3:CF:AC:A3:B7:D9:6B:14:D9:5C:EC:44
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 019D33E3DBD811A85F0BD48C959D0AA52C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 148C
Signing time: Sat 28 Mar 2026 10:01:04 +0000
Manifest this update: Sat 28 Mar 2026 10:01:04 +0000
Manifest next update: Sun 29 Mar 2026 10:01:04 +0000
Files and hashes: 1: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: RGqjjG9/a/FhVdVz0ZZqjdF8TXdp83pFwlBtBuTRwJE=)
2: eHtaTNEahZIqEQ5NQhbqNOgkte8.roa (hash: MNC6u/UzUFisfjBXSx9RpaJq0ODx2gNTOpYSp6+HJcc=)
3: okRJ6Q4gK7t2XRanRtOTN5fhYCU.roa (hash: DLxr6CGIcuVxZVonr1XOEIfUiCddhAdND4Lz/E80A58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:db:d8:11:a8:5f:0b:d4:8c:95:9d:0a:a5:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Mar 28 10:01:04 2026 GMT
Not After : Mar 29 10:01:04 2026 GMT
Subject: CN=3f4292ddf19e6a5cc3cfaca3b7d96b14d95cec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:52:c0:60:7a:d9:88:72:c7:5c:40:c0:f2:
c9:ac:a7:5a:de:f1:59:54:e6:d4:10:53:df:38:ea:
e3:5e:c9:5c:a5:8b:11:db:6d:7b:57:69:c7:69:7a:
23:1f:33:e2:e4:40:c8:9e:b4:20:41:84:38:fe:8d:
fb:02:28:89:c1:3e:c4:ee:d5:97:bd:a1:61:f7:ac:
bc:56:fe:d8:00:de:2c:46:cd:4c:c2:41:dd:c4:aa:
1e:41:5c:2a:b5:c5:cc:45:ad:fe:1b:22:c4:04:e8:
e0:d1:96:61:29:35:8e:e0:92:73:8d:fb:d9:a8:9e:
d5:2f:6c:e1:64:e2:ea:17:a3:54:ce:32:9d:c4:97:
95:4e:d8:61:04:3f:b5:74:70:4e:3c:98:77:22:62:
a1:ff:3f:c8:92:1b:58:e0:35:f8:7e:dd:d7:6e:be:
28:81:35:68:1d:fa:e8:ea:1a:f1:4d:2c:8e:01:c8:
cc:96:e8:cf:17:5a:79:7a:25:10:2c:ab:e5:68:ab:
cf:1d:ed:4b:8e:5c:a8:e4:e3:80:94:22:b6:fa:1f:
dc:4a:ae:f3:ae:46:e8:86:ac:35:27:b8:ba:91:78:
25:9d:d3:1e:ef:18:52:50:1d:e9:36:8d:15:d4:f6:
6a:dc:87:8d:1a:66:8b:d3:d8:96:cb:f1:ae:10:85:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:42:92:DD:F1:9E:6A:5C:C3:CF:AC:A3:B7:D9:6B:14:D9:5C:EC:44
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8a:d8:5d:95:58:e0:d2:98:9e:55:f8:79:b7:d1:1b:af:23:
9c:73:a8:4b:f7:0c:aa:5f:bd:b6:9a:65:03:90:15:05:87:41:
23:96:3f:26:71:5a:15:a1:e1:fa:82:15:3c:23:85:a7:9e:d3:
d0:b5:2e:65:5e:ea:31:be:ca:6c:b2:60:a3:de:48:4c:e6:f3:
d5:10:4b:9a:59:bb:b9:c7:1e:4b:1e:88:b1:4e:06:d0:f0:96:
59:16:ae:4e:c1:17:a0:7f:48:63:b7:87:5d:7f:c2:ef:6f:31:
81:2f:20:21:ef:23:32:df:7d:af:a2:f8:46:ea:9b:80:8e:2e:
e0:aa:1d:2b:85:64:4e:7e:3f:4e:5e:75:16:7e:3b:d5:3f:d3:
1d:7f:dc:74:eb:ad:51:07:51:33:d4:98:68:65:5b:4a:f1:41:
84:5b:47:d0:be:6c:e7:4b:3a:79:39:1e:7b:69:7d:f0:1c:42:
6f:76:50:3b:15:5d:6c:73:34:73:fd:70:dc:cd:8a:7f:a6:34:
59:a9:21:cd:f0:04:24:71:3c:97:46:3f:ae:96:ea:87:bf:9a:
8d:bf:45:b0:f7:ae:0d:14:13:5d:b4:86:48:61:4a:5c:03:b6:
ab:d5:04:0c:1d:23:f5:67:72:34:91:e6:d7:ed:30:06:c2:05:
a2:82:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:09 2026 by rpki-client