Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: 7Z/GOpNSwm1RPyVOiSvD885fvP0ZVOdkf+xjzNDRjME=
Subject key identifier: AB:9F:5F:65:71:0E:30:BD:30:4A:3A:A3:78:2A:32:EF:23:44:35:CC
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019E1EA3C289313890ABF46D1DA362906780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: 01A3
Signing time: Wed 13 May 2026 00:01:49 +0000
Manifest this update: Wed 13 May 2026 00:01:49 +0000
Manifest next update: Thu 14 May 2026 00:01:49 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: EUf3xZZjd9kud9Med5IdJ/CPJ3siporP9sg+rf3BMec=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c2:89:31:38:90:ab:f4:6d:1d:a3:62:90:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: May 13 00:01:49 2026 GMT
Not After : May 14 00:01:49 2026 GMT
Subject: CN=ab9f5f65710e30bd304a3aa3782a32ef234435cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:d1:b6:5a:94:0a:ed:cf:d9:93:44:7f:00:
a7:b2:09:d2:c0:d4:64:df:c3:da:f1:ce:36:77:d4:
5a:f4:26:33:83:cf:d3:c1:53:e5:6f:a4:30:9a:45:
4d:6c:bd:3e:48:ff:f6:1b:bb:39:1d:b2:c4:9a:cd:
8c:82:d1:13:f7:ed:7e:2a:61:9f:86:88:e5:61:fb:
bd:8d:21:98:ec:f2:bc:ab:7f:91:5e:66:92:77:f0:
29:52:3d:62:5f:4c:e9:cb:44:d7:41:22:d3:7a:68:
b3:b2:f5:41:10:4c:58:00:41:b9:22:3c:b1:1b:30:
68:49:3a:54:56:c9:58:27:7d:e4:e8:eb:1f:4c:fb:
9f:8f:74:8e:1b:15:4a:94:93:ed:74:15:64:69:db:
36:75:eb:9a:a8:4d:2c:cd:74:f9:a8:69:92:6d:21:
47:fb:2a:a3:03:1d:e8:b1:5f:af:45:b4:1a:19:a0:
5f:45:fd:ed:e8:ac:3b:dd:b3:37:ae:06:e1:49:5d:
de:4a:c4:77:39:bd:56:96:ba:2f:8f:c7:d2:2d:60:
5f:62:fa:ae:e0:0a:58:c8:e1:6d:61:00:01:09:c3:
d7:c8:57:98:9b:e6:9b:38:e3:5a:74:46:58:81:40:
e9:9c:10:fb:f9:ed:76:02:58:19:b9:6f:34:83:25:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:5F:65:71:0E:30:BD:30:4A:3A:A3:78:2A:32:EF:23:44:35:CC
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:82:f1:03:e5:e9:ef:43:f1:69:48:42:72:a0:3c:f4:11:
88:e9:62:2e:52:b9:92:ad:d3:a7:89:ac:50:9d:cc:83:4a:c2:
da:44:e0:0c:b5:b0:21:a9:8a:ab:e2:0d:88:a1:03:2e:3b:3a:
ab:3c:21:90:2d:23:17:ba:9c:e4:87:97:dd:e6:04:44:46:ef:
6f:27:c8:94:52:67:7f:63:bd:e5:ef:b6:1e:7a:75:f9:8d:c9:
9c:40:28:ee:94:77:59:26:9d:f8:9f:9b:92:38:14:35:31:2f:
c1:6b:db:db:89:3f:bf:52:61:e6:98:c1:a8:f2:c5:3c:37:15:
30:9b:09:4f:10:83:94:cc:47:3e:67:55:47:c4:f4:6b:4c:0d:
bf:28:ee:a6:62:43:ec:9d:2c:01:83:81:cb:63:0e:f3:7e:9a:
19:44:04:da:c6:a3:69:ad:34:ca:25:13:87:9b:47:27:61:d4:
05:8a:c5:fd:17:82:36:b2:cd:c2:72:65:42:88:7b:e3:04:30:
19:5d:f0:3e:fb:30:1f:31:0a:79:ef:4c:60:0d:24:b4:6f:d0:
03:24:04:e0:a6:e4:7e:01:a2:c8:a2:1b:11:59:c3:32:67:5f:
a5:62:19:2c:80:73:be:81:ac:bd:91:35:44:7a:ba:5c:5a:ce:
b1:1f:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:10 2026 by rpki-client