Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: fJz3VG8t49FNjvAezjrBVYGBMLrLMTcqblgwfuuN0ek=
Subject key identifier: 5E:78:55:05:D1:5B:AC:C6:E4:E5:5B:C6:3B:F1:6B:EA:3A:58:2B:86
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019D296173B7DAB954612371EF0F3A150742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 13DA
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: syV8bNBjgJt2H6QuCuWo6mq5KHiRUZqorCjI5lbBeWk=)
2: ZmJGOpycOIq2lh2DhvW8htu0jB8.roa (hash: +ARlxopxtUjU1sytN/8Otep5qO7EJAgLyVgrFdmK0Rs=)
3: oEJd0BVsW2fwuqjY3Y6ze5isQfE.roa (hash: +n+CDK7Y745a+xc3pPOkB9KVNRlgLlgagHreMZ7nr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:73:b7:da:b9:54:61:23:71:ef:0f:3a:15:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=5e785505d15bacc6e4e55bc63bf16bea3a582b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:6d:04:eb:ea:1e:89:36:ce:1f:54:fe:ae:
78:22:86:97:ee:09:45:bb:7e:2d:f0:b2:31:9f:aa:
6a:d9:79:63:17:ef:3c:94:7e:09:65:d8:88:1d:87:
92:7b:b1:10:01:e1:54:ba:13:17:0b:62:c1:72:27:
d2:d5:95:4c:0e:11:51:7d:96:ef:57:70:9e:49:a6:
85:43:f1:93:20:fd:cd:06:9b:d9:bb:2c:9f:3e:c5:
8f:e4:20:7b:23:57:cd:b5:ec:4e:31:a7:c9:b7:d6:
d5:06:77:91:8e:ff:a3:7c:aa:a0:15:0a:44:43:5e:
96:c3:08:cf:1e:79:ee:13:8f:4d:0d:78:5e:c0:68:
cc:30:f2:06:8e:96:17:50:0b:ab:c5:fa:56:fe:d6:
a4:a0:32:42:ae:3b:6f:3d:04:65:fc:9e:cf:ce:11:
f2:21:c3:41:c8:d8:74:da:0b:01:d6:44:9b:2f:bb:
fe:71:58:ee:a3:f4:f8:3b:a8:6b:1e:6e:0f:9a:f0:
a6:51:b4:63:73:12:60:05:6f:5d:90:57:c9:f1:92:
d8:54:5f:81:04:07:c8:3d:af:14:4c:35:37:de:1c:
9e:82:e5:c9:72:2c:21:4e:12:90:36:9b:49:4c:a0:
46:79:1a:b2:d2:f9:04:cf:74:6a:a5:ad:53:be:8c:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:55:05:D1:5B:AC:C6:E4:E5:5B:C6:3B:F1:6B:EA:3A:58:2B:86
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5d:ec:04:85:2d:46:a1:f6:74:a1:dc:9c:e0:49:6f:65:b2:
f8:fd:d6:40:e8:1e:c0:9f:23:f1:ac:e7:1b:7a:3a:7d:5d:e5:
1f:4a:1c:60:b1:a5:3d:d2:e1:4d:e6:11:36:4e:be:b3:c9:5c:
d5:a6:d5:19:79:00:3b:1b:49:80:dc:15:16:e6:62:be:41:e3:
f3:7d:28:e6:97:f0:75:15:cd:bd:17:75:97:cf:ca:41:2f:b8:
84:e4:22:12:82:b1:21:02:f5:d3:fd:3f:d9:29:60:75:54:f2:
b5:dc:50:0a:4e:75:4d:8d:f3:39:b2:17:86:01:ae:dd:bf:35:
f3:68:bf:4c:9b:d5:2f:fc:c2:64:48:37:25:0a:a4:6f:4a:02:
68:71:ff:f7:10:d5:7b:5b:72:dd:4e:ae:46:c5:7c:dc:30:51:
f6:18:d7:91:59:31:ee:f8:bc:54:1d:12:f7:c4:94:ad:f7:21:
a8:c3:04:32:a1:e7:12:67:7c:e0:e4:ee:2e:8c:da:58:cf:27:
3d:25:d2:4e:31:c3:a1:20:bd:f0:1c:df:a4:c7:b7:09:60:d8:
6c:cd:e6:43:ac:60:ae:67:d5:55:00:40:fa:20:b7:ac:cc:d4:
83:48:32:30:ba:8a:5d:82:e8:10:8e:3a:e3:9c:0b:4e:9e:b3:
bc:2e:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:33 2026 by rpki-client