Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: I2Ioj8k7B44LzRWYXyoL+7UwPPgBS1m0wmjoSkXT/JY=
Subject key identifier: 26:30:D6:12:9B:88:78:CC:D0:DB:56:BD:1D:9D:84:12:75:DB:D7:7D
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 019D24DEEF0B478F1ACC02366A42A111B626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 1785
Signing time: Wed 25 Mar 2026 12:01:23 +0000
Manifest this update: Wed 25 Mar 2026 12:01:23 +0000
Manifest next update: Thu 26 Mar 2026 12:01:23 +0000
Files and hashes: 1: 6RH4Xhf3454zmP7SfNkGXBdyqVs.asa (hash: aTVDJZG9k3QRu4E3b31eQbxAuvRrjFaFwYD4QvfkoTc=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: 7Ra++o0zI2LMQLmuu8UtAXe/d8l5ODxGj0Y6yG+Dqa0=)
3: bxJSZ4QkpRqkCuO8un8htf7K_EA.roa (hash: aY6Tszvn+tw4UURnCsUt8otQUMfjQJy4b3YJ7wRT6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:ef:0b:47:8f:1a:cc:02:36:6a:42:a1:11:b6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Mar 25 12:01:23 2026 GMT
Not After : Mar 26 12:01:23 2026 GMT
Subject: CN=2630d6129b8878ccd0db56bd1d9d841275dbd77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:60:30:5f:52:5e:1c:0f:cb:9b:67:0f:4d:
b3:d4:f3:ba:2c:03:c7:ef:f4:31:70:cf:af:73:2d:
39:9f:79:0a:10:15:bc:29:23:39:ea:20:a9:bf:af:
ad:51:50:35:96:78:a5:10:a8:4e:3f:bc:12:20:11:
b3:2f:37:23:b7:ab:82:cf:d2:b4:0e:2b:9d:64:d5:
a4:84:8f:c4:31:e5:1b:03:47:ed:af:e5:7d:8a:d9:
a1:14:ad:fb:b5:70:06:91:d7:37:4a:86:81:5b:c5:
da:a1:ab:27:b2:44:d4:ab:d2:55:ee:2b:6d:0d:83:
23:35:bb:13:20:5c:3e:d8:3f:4d:a7:07:c0:cf:3f:
ad:6c:c4:fc:39:83:7a:c6:ce:8e:06:fe:06:06:5f:
6b:8b:9f:b8:89:a4:9f:94:5a:0e:32:bb:98:02:93:
a9:0c:ad:b2:2c:9e:49:45:2e:5a:40:58:32:69:32:
7e:0f:a5:10:b2:b5:ae:47:59:b6:14:2b:8c:c8:10:
0c:a4:0e:9e:95:30:26:7a:fc:54:c8:fe:0d:e7:81:
a9:00:a9:79:28:e5:fa:7b:1e:0d:41:f5:5e:99:99:
86:59:b4:d9:fa:7f:dc:90:40:df:50:1e:69:f3:60:
29:25:f8:c1:9f:23:12:a4:58:5e:02:3d:0d:62:ce:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:D6:12:9B:88:78:CC:D0:DB:56:BD:1D:9D:84:12:75:DB:D7:7D
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7e:58:e7:5f:2a:40:4c:f6:3d:9f:07:07:20:5f:79:ca:e1:
56:87:b6:8e:9c:07:43:4b:76:e2:7f:34:db:e7:bb:81:4c:7c:
d2:f0:34:fb:44:0f:d9:fa:05:40:27:34:17:9a:80:35:19:0a:
61:a0:c6:91:32:d4:17:70:c5:ba:e4:93:26:71:bd:47:bd:d9:
77:d4:f0:53:15:7c:bd:cf:77:71:74:a3:e7:02:36:72:01:6f:
d2:8e:1c:76:b6:0d:42:15:88:cb:a5:03:5b:39:54:2f:7c:be:
2b:6c:fa:4e:1f:ed:e2:1a:76:d2:d4:68:c5:47:1c:55:67:cd:
72:c1:be:77:b3:48:30:78:98:11:d2:42:11:7c:a4:4b:75:45:
76:da:db:78:f7:3f:57:00:47:2e:2b:c1:68:df:23:1b:27:bb:
aa:73:0c:09:71:16:77:95:1f:a0:4e:55:23:85:01:6b:e6:14:
0e:c9:9d:dd:85:1c:29:c4:15:4d:4f:89:93:da:a0:a9:71:5c:
a3:f1:85:c3:80:3e:77:1a:e9:1e:ff:19:6d:47:8d:cf:a6:21:
c3:82:28:e6:3d:9c:98:95:1c:bc:88:e3:6c:98:b8:fa:39:f7:
51:11:0c:30:b0:91:2e:ea:8b:38:9d:1f:ca:61:ec:e1:51:cc:
1a:6e:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:26 2026 by rpki-client