Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: WpekhK0Uv7bNyHtMDRA1RTFx53AbXImuUUlIO+9fDbE=
Subject key identifier: F1:C8:6C:DE:17:C0:23:19:3A:53:0C:27:39:AC:56:2B:F3:AF:57:10
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 019D28F1F9B63FB3116D1D2D0BB12E6D8896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:00:39 +0000
Manifest this update: Thu 26 Mar 2026 07:00:39 +0000
Manifest next update: Fri 27 Mar 2026 07:00:39 +0000
Files and hashes: 1: JNVmnWdv3U8OEx9BDgmXjGN44l4.roa (hash: Uit/JT9xGXAaaHemsQzbnstd/JbudEL8hArIWWQ4/xA=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: dHtcAc73QI+xvDaO9Y86OI8uceYxUDgARlLVcpVUD48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:f9:b6:3f:b3:11:6d:1d:2d:0b:b1:2e:6d:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Mar 26 07:00:39 2026 GMT
Not After : Mar 27 07:00:39 2026 GMT
Subject: CN=f1c86cde17c023193a530c2739ac562bf3af5710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:b8:c8:9d:59:96:26:2c:8c:05:ea:59:18:
3a:66:f6:de:15:e6:ba:db:0b:54:b9:f5:6f:64:3e:
db:10:b8:fe:25:ed:2f:a2:21:30:db:90:4a:98:40:
5b:af:df:eb:b5:35:53:8f:9b:6b:23:d3:2f:48:c2:
52:fb:6e:3b:1d:4f:8a:75:91:9d:be:1e:01:71:e5:
51:db:9d:a0:10:34:ae:5b:e9:8c:88:53:1e:ad:92:
77:0d:ce:1e:11:cc:54:f4:4f:1b:a0:d5:d3:c9:27:
0c:4c:d9:7e:51:fe:9a:4d:eb:51:62:05:af:c4:04:
42:7a:6d:c5:3f:d1:aa:d7:33:a1:a0:19:d3:9c:fc:
6f:e7:cd:0c:2b:8a:db:8f:1f:d1:3f:21:30:af:aa:
23:8e:70:86:0e:f6:a1:e3:bf:bc:0a:46:c2:dd:51:
21:27:20:ee:2c:ee:42:0c:d0:9a:39:d5:56:f0:86:
26:03:1d:f1:31:8d:7a:e2:e1:30:ca:0d:d6:70:59:
26:58:60:99:31:32:1c:d0:1c:6d:7b:6d:0f:2a:90:
f7:ac:22:eb:a9:0c:83:8a:d0:e6:fe:73:69:47:a7:
ad:64:0a:13:68:ec:49:cd:d6:fe:83:76:d7:5c:e1:
f8:2a:55:cd:24:8f:ef:6b:f2:79:a4:6e:29:ce:aa:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:6C:DE:17:C0:23:19:3A:53:0C:27:39:AC:56:2B:F3:AF:57:10
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:56:7e:d1:ce:38:68:af:19:b2:5f:f8:2e:e7:a7:3c:e2:bf:
c9:5f:a3:fc:f4:ab:dd:2a:f1:44:4b:06:24:81:8f:04:5c:bf:
60:d4:ec:6a:45:0c:b3:26:e8:ed:f9:f5:27:4e:8d:fa:ff:2f:
1e:3e:00:57:c3:0e:00:6c:25:f1:12:24:92:61:00:f4:c4:9c:
15:24:5c:ef:f2:7d:83:23:a5:50:04:ec:07:95:ad:d4:38:f6:
30:63:36:5a:fe:ed:9e:80:fb:3b:55:5f:4a:c9:b9:a5:ca:f2:
e1:ce:d1:e2:ea:0b:c0:18:3c:a3:83:d6:45:91:02:fa:04:2c:
1c:e2:79:5d:c5:14:90:9f:ce:b8:85:49:5d:09:ce:ff:8c:70:
7a:87:9f:b3:23:9d:14:68:dd:bf:9d:81:be:0e:8a:c4:fb:59:
57:e9:9e:d4:5c:df:f6:77:33:18:e8:07:a8:81:16:cb:aa:74:
96:05:10:ad:55:27:1d:51:c6:91:8a:ec:86:09:7e:20:91:fb:
71:bc:76:5a:20:38:81:b7:51:a7:65:9d:f2:77:50:87:9a:22:
b8:b4:78:39:be:f5:14:9f:bd:2e:d3:1b:4d:53:12:42:e0:bb:
d5:f8:d7:71:66:25:19:3c:7f:e1:d1:1a:5b:bd:80:78:6c:b3:
32:37:e9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:41 2026 by rpki-client