Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: idCnN3Wb0NfvRcrzTohA1u+KRWcGXXhA29u+8FznqJU=
Subject key identifier: 98:DD:A0:28:A6:1E:76:96:81:CE:2F:66:50:38:7A:CC:11:77:D0:33
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 019D2771EE653054A6AE05651ADEA9C858C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 0A31
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: 9zzg/2mZsDYEzKUi94/uIanKN8wGfSWQNVyjWQ298vs=)
2: bY4WY1iKxzvuOL6bmkVqfpfooVA.roa (hash: Ph+QZYyi/7d0WLmkOSuDFC4tOnaIRjljQNdRjvbGpWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ee:65:30:54:a6:ae:05:65:1a:de:a9:c8:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=98dda028a61e769681ce2f6650387acc1177d033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:52:1b:63:68:13:06:ba:9a:1e:cc:36:e9:
d7:ad:3e:0f:d3:f4:ad:ec:26:4c:37:b1:f0:e6:e7:
6e:76:06:f7:9e:41:40:2c:d4:41:3b:09:e0:5d:a1:
e3:b3:17:9d:78:e7:61:e0:65:cb:7b:81:05:48:b4:
c9:33:cc:b6:2a:49:4c:84:e7:ce:20:f5:a9:99:08:
65:4b:6c:ae:59:eb:fe:ba:1a:5c:57:61:8a:36:15:
f2:e0:82:58:f4:01:86:d0:e1:7a:c6:f8:29:f4:4d:
db:9e:92:d1:3c:9e:82:b4:2f:da:e3:ec:06:e2:bd:
6e:cd:9a:4b:47:0c:03:84:00:17:a2:aa:5a:ed:45:
a6:a8:3a:e6:19:ec:7b:57:4f:96:e8:67:e2:0e:ce:
69:6f:8a:3c:63:b9:ac:17:73:ae:86:2a:ca:c7:10:
ed:f6:b3:07:43:81:79:ca:f9:ab:9c:55:d1:a9:de:
22:53:ca:e7:8d:6b:d5:ee:85:a6:a1:59:bc:81:7e:
5c:aa:b2:24:5d:12:45:e9:69:f1:c6:72:df:d8:69:
9f:b1:6c:3a:b8:28:25:50:95:f3:7f:39:03:65:d2:
e7:71:c6:ef:19:f1:6a:61:8e:12:8f:58:59:b7:73:
79:56:7c:f2:67:27:be:d0:e5:8c:55:a0:33:d6:3c:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:A0:28:A6:1E:76:96:81:CE:2F:66:50:38:7A:CC:11:77:D0:33
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:fd:8a:9d:fc:6f:9f:f8:17:26:ad:a3:53:fc:98:ae:cb:
2b:6a:5d:0c:aa:14:70:d9:22:f2:a1:d4:4f:11:b1:a2:c3:2b:
5e:f7:14:9c:a7:65:b5:8a:fc:8a:db:91:38:7e:4a:4b:c1:ae:
37:5f:c6:50:6d:a4:b2:55:79:16:3c:1e:04:de:2d:82:7b:97:
78:46:21:bb:1f:c9:c2:94:89:31:20:6f:30:8f:a0:fb:e1:99:
8e:08:c5:8f:50:e4:61:75:05:dd:65:31:72:90:46:22:cc:ce:
99:0c:4b:e3:72:8f:82:d4:8f:90:ff:d8:8e:3d:ba:b8:28:74:
3e:36:10:bf:26:67:68:d6:45:82:8e:82:fb:3d:fb:54:91:2c:
5f:9f:b9:c3:e2:d5:f2:15:32:0b:e2:a9:c3:bb:1b:da:12:72:
1d:68:45:86:10:64:f7:3e:44:a9:22:33:3b:70:44:03:6b:b8:
50:d2:8b:75:04:04:02:d0:57:68:6c:40:4c:88:1b:f5:35:31:
88:d7:c7:6b:1e:83:d5:5b:17:d3:fb:2f:38:d9:ce:77:36:95:
42:2e:c0:3e:07:15:82:55:ef:e1:af:09:27:b8:4e:76:eb:45:
84:08:08:7d:8f:a6:42:ce:ee:ff:3c:09:bf:68:a5:a1:19:f5:
38:93:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:39 2026 by rpki-client