Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: di+g3YT2oRDFckBFDnT30Hd04ayLv3KD4dqFv5c9PeA=
Subject key identifier: C6:A5:17:29:DC:70:17:BF:D7:DB:5A:CC:F2:25:24:0B:49:29:58:ED
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019D277284FAC3763581ACA7528CD25A6775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: 0123
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: 4tiA9e81YOdHbyyPI7Ch8U/jN1JhNNCIc03lgJtieIY=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:84:fa:c3:76:35:81:ac:a7:52:8c:d2:5a:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=c6a51729dc7017bfd7db5accf225240b492958ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:c3:10:08:d1:cb:4b:7d:ca:68:a3:2e:e8:
42:ee:3e:b5:c2:bf:0a:ab:e6:9f:78:6a:c4:63:2d:
52:fa:b6:98:bb:0b:5c:75:ee:e1:fc:81:43:88:47:
48:bd:a5:e6:85:ae:4e:f9:d1:a5:67:69:ad:a7:5d:
5b:2b:1d:73:c7:00:0d:05:d8:6b:ee:c8:f8:3c:d9:
7b:aa:ac:56:3c:d6:ae:48:99:7f:90:77:67:43:11:
8c:ef:e4:70:79:47:6a:5d:98:3e:e0:3a:88:d5:dd:
22:38:f4:b7:43:09:2f:0a:7c:95:72:f2:ca:be:11:
d1:02:eb:6e:31:1d:46:53:5b:60:16:39:86:ea:9e:
30:82:f2:55:55:57:90:e2:f6:9b:05:55:ac:15:9f:
66:e3:a2:bd:d1:bd:6c:1a:e6:86:3a:a1:15:f0:f2:
6d:76:79:cd:d7:5c:b8:23:eb:76:28:02:36:42:7f:
13:e3:32:82:ae:e8:27:a2:5d:2c:91:10:bf:49:78:
6b:d5:4b:cf:ca:a3:8d:08:57:9c:e2:4a:ba:5f:86:
da:05:d3:ab:3c:3c:a1:a7:56:4a:c2:cc:fa:49:32:
32:63:52:76:bf:5a:b3:31:61:fe:02:f8:7b:a7:15:
97:9e:15:a4:1e:18:11:a0:9c:2c:ad:42:8a:29:12:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A5:17:29:DC:70:17:BF:D7:DB:5A:CC:F2:25:24:0B:49:29:58:ED
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:66:8d:6f:ed:be:6a:ab:86:d8:2d:ac:80:d3:3f:36:2c:
d1:30:a5:f9:fb:01:1e:30:41:c6:3e:dc:9c:ee:1b:ce:e7:b5:
0f:f0:d3:c9:30:6a:bb:c1:94:a4:d3:4a:63:de:25:3c:ec:a5:
18:48:e5:48:72:20:f3:0b:4b:7e:2f:ea:af:2d:3c:83:4b:ad:
39:97:3f:84:6b:f4:14:20:d1:85:e0:bf:a1:60:66:4b:2b:a7:
d3:91:40:ee:9b:3c:93:00:63:35:d7:93:67:1c:dc:d6:c2:44:
c9:2f:26:2d:fe:de:c2:16:61:60:5b:3c:30:f8:d2:3b:3a:94:
de:8f:89:b5:90:0b:e9:86:fc:b4:9a:ca:16:c2:72:a6:8e:6e:
5a:03:4f:a1:d0:1d:25:44:1e:b6:f3:f4:c1:c4:d1:9b:d3:90:
ee:af:74:02:86:b1:bf:3f:c1:f9:38:3b:d1:33:3c:27:b4:1f:
16:6f:79:64:a2:f6:8a:ea:b3:39:08:14:25:69:ec:c4:4a:34:
e1:8a:82:e4:0f:58:ba:23:8b:97:69:54:08:ef:90:cf:58:60:
6e:77:8a:9d:45:3d:4f:48:70:d3:a7:c4:88:b4:6b:41:0c:51:
f8:a8:0a:36:a2:56:86:e4:4e:6f:e9:3a:2c:6b:b6:c1:a4:e1:
fd:b1:5b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncoT6w3Y1gaynUozSWmd1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDMxZWNjNTRiOTBlOWRmZjI0NDJiOTA1MWFhOTU2OGYz
MDZlNzgwHhcNMjYwMzI2MDAwMTQ5WhcNMjYwMzI3MDAwMTQ5WjAzMTEwLwYDVQQD
EyhjNmE1MTcyOWRjNzAxN2JmZDdkYjVhY2NmMjI1MjQwYjQ5Mjk1OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15nDEAjRy0t9ymijLuhC7j61wr8K
q+afeGrEYy1S+raYuwtcde7h/IFDiEdIvaXmha5O+dGlZ2mtp11bKx1zxwANBdhr
7sj4PNl7qqxWPNauSJl/kHdnQxGM7+RweUdqXZg+4DqI1d0iOPS3QwkvCnyVcvLK
vhHRAutuMR1GU1tgFjmG6p4wgvJVVVeQ4vabBVWsFZ9m46K90b1sGuaGOqEV8PJt
dnnN11y4I+t2KAI2Qn8T4zKCrugnol0skRC/SXhr1UvPyqONCFec4kq6X4baBdOr
PDyhp1ZKwsz6STIyY1J2v1qzMWH+Avh7pxWXnhWkHhgRoJwsrUKKKRJ/qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMalFynccBe/19tazPIlJAtJKVjtMB8GA1UdIwQY
MBaAFDHTHsxUuQ6d/yRCuQUaqVaPMG54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0Nzct
MGRhODdiNTFmZmFjLzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0NzctMGRhODdiNTFmZmFj
LzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon9mjW/t
vmqrhtgtrIDTPzYs0TCl+fsBHjBBxj7cnO4bzue1D/DTyTBqu8GUpNNKY94lPOyl
GEjlSHIg8wtLfi/qry08g0utOZc/hGv0FCDRheC/oWBmSyun05FA7ps8kwBjNdeT
Zxzc1sJEyS8mLf7ewhZhYFs8MPjSOzqU3o+JtZAL6Yb8tJrKFsJypo5uWgNPodAd
JUQetvP0wcTRm9OQ7q90Aoaxvz/B+Tg70TM8J7QfFm95ZKL2iuqzOQgUJWnsxEo0
4YqC5A9YuiOLl2lUCO+Qz1hgbneKnUU9T0hw06fEiLRrQQxR+KgKNqJWhuROb+k6
LGu2waTh/bFbPQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:57 2026 by rpki-client