Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: kF5LLujcvPRI3Z+/v3wbYEtpuVYI4zSUUsIxdoMMNCw=
Subject key identifier: E3:45:90:1B:8C:FB:8B:2F:3C:70:E1:9A:0A:3B:A1:FE:19:F2:D4:33
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 019D26CD831359B78C1F7E2E558BED281128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 1786
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: 6RH4Xhf3454zmP7SfNkGXBdyqVs.asa (hash: aTVDJZG9k3QRu4E3b31eQbxAuvRrjFaFwYD4QvfkoTc=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: yAkGb49B/bP0iav87EXitVFJ64OnelwsIAu0D0vJU48=)
3: bxJSZ4QkpRqkCuO8un8htf7K_EA.roa (hash: aY6Tszvn+tw4UURnCsUt8otQUMfjQJy4b3YJ7wRT6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:83:13:59:b7:8c:1f:7e:2e:55:8b:ed:28:11:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=e345901b8cfb8b2f3c70e19a0a3ba1fe19f2d433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:f7:69:5e:f1:b4:9a:ab:0b:ed:d1:37:e4:
1e:72:81:30:18:f5:03:de:93:69:38:87:23:f6:be:
b5:64:84:85:76:db:d9:97:c4:16:1a:9a:83:03:44:
24:b1:58:f3:5c:26:75:71:6b:50:30:a2:4a:05:0e:
56:0e:9d:dd:08:60:a9:09:b9:03:50:e0:ca:5f:95:
53:be:63:fd:8c:26:0f:05:37:f8:5c:71:c0:02:a8:
31:08:14:87:e2:d8:4c:8d:a5:51:5a:f2:c1:c7:d0:
c2:bc:7f:c6:ec:87:f8:c5:35:ae:1e:13:57:d6:b5:
d2:c5:37:dc:90:78:4b:b5:4c:9c:35:db:e1:3d:ad:
3b:0e:9b:77:1d:29:4f:21:21:0b:3e:f8:2f:4f:54:
3d:b4:ff:b8:3d:a4:f7:42:28:24:29:29:4d:ae:5c:
cd:3e:a8:9f:db:0f:36:7e:d2:79:32:6d:c6:a0:d2:
4e:72:f2:05:c1:b8:3e:b7:6f:b7:93:01:39:a1:08:
c3:51:b6:15:c1:9a:29:d4:9c:dc:1b:13:3c:58:05:
d2:0a:28:61:94:a3:f0:1b:2e:dc:f9:76:98:28:5f:
ff:87:f2:cc:0d:42:d3:30:62:cc:88:ce:54:fb:19:
e4:8b:19:ca:31:84:db:55:50:c2:50:d4:e9:93:1a:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:90:1B:8C:FB:8B:2F:3C:70:E1:9A:0A:3B:A1:FE:19:F2:D4:33
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:d7:d3:02:17:3f:fc:38:41:4a:a7:d4:1e:d1:a4:bd:92:
c6:17:39:88:ac:cc:c9:67:08:fe:ed:05:1f:40:53:5f:e8:71:
e6:d0:01:b9:fe:a8:41:5a:9b:c2:be:d9:c6:a7:00:d4:c5:10:
e0:66:67:04:65:a3:ec:b2:18:e3:97:bd:5b:3b:17:de:51:2e:
12:e6:4b:53:d7:9b:3e:cc:b0:4b:6b:b0:ca:c3:70:e7:a7:c4:
46:a9:b3:0d:09:3e:b8:f5:39:91:65:48:ca:47:1e:0b:bd:58:
9d:b8:57:a3:b8:01:da:be:4b:c8:47:a7:70:8b:d8:59:3f:cd:
bc:03:e4:3f:85:fd:33:00:96:e1:de:70:6e:eb:b3:81:04:f8:
b6:ab:64:67:a2:39:87:75:99:13:ec:af:65:87:73:34:ac:6c:
34:f5:ee:ff:26:45:f8:18:24:b2:4f:e1:c1:bc:81:6d:2c:a2:
df:5b:e5:0b:e7:72:08:32:69:ea:71:e1:38:7f:be:47:8f:82:
3e:6d:e0:85:5f:eb:97:b3:28:cb:6e:33:c3:cb:42:41:c0:10:
cf:3d:0f:9c:71:c7:f1:a4:7f:31:b2:fc:7c:78:c5:b2:47:46:
6d:f4:c4:cb:0f:48:13:02:01:09:95:dc:29:d6:75:fd:25:4c:
5d:4a:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:53 2026 by rpki-client