Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: k9j98QLa+zj9YGRUdjPBkOXv0jl6ghjkpikdcoJwmSs=
Subject key identifier: B5:4C:C5:33:68:AA:88:F8:40:ED:22:A5:F8:68:F8:B8:A4:B2:1B:82
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019D39419FB6C57846038EF7730650F2EB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0965
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: vGvGwU2r1Cn398siGW+gxhz/MS2xy5NBY9zdoFobuiA=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9f:b6:c5:78:46:03:8e:f7:73:06:50:f2:eb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=b54cc53368aa88f840ed22a5f868f8b8a4b21b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:9e:57:c8:3f:ea:2a:fb:38:ff:74:1b:4b:
30:7e:9b:cd:4c:ec:e1:02:e3:de:d8:7f:aa:58:11:
ac:3b:dd:01:01:46:e5:9a:cd:f8:95:fc:f6:b0:58:
ca:d2:9f:73:b1:c8:64:08:d4:09:2e:8f:0c:a1:21:
d8:96:de:56:c3:75:e0:20:04:e4:6c:52:b1:2a:d4:
65:97:61:b8:97:20:22:93:e5:d5:58:98:a7:2e:14:
ee:ab:d8:74:e2:9e:8f:32:74:81:68:98:90:9c:54:
ec:c5:45:90:b4:cf:17:c9:89:3b:ee:b0:46:71:29:
a1:ef:ca:51:38:05:5a:08:e1:cd:87:0a:39:71:ca:
2b:b9:37:0c:6c:66:45:a2:2a:95:e3:4e:27:0c:fc:
06:1b:b0:1f:da:4c:23:cb:a3:30:67:20:b0:66:2c:
90:07:35:18:f9:ae:19:85:ae:68:cd:ff:17:88:de:
10:22:f1:95:d2:8f:8f:1b:55:7d:6b:ab:33:8f:9a:
6a:b0:49:fc:15:f5:ad:70:ec:74:22:42:e5:32:5a:
95:aa:58:f6:d4:98:03:66:fe:0f:24:07:00:e9:dd:
51:a7:7f:7e:b8:a8:e5:a3:1e:c1:2d:21:b5:3b:26:
5f:98:c3:97:49:50:90:f7:d0:1b:19:0a:23:62:79:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:C5:33:68:AA:88:F8:40:ED:22:A5:F8:68:F8:B8:A4:B2:1B:82
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:0f:73:f5:37:6e:dd:0f:84:8e:ff:a4:37:bb:2e:d7:a5:
ae:38:3c:6b:89:ab:90:57:cf:a8:f6:48:63:39:61:69:7a:fc:
8a:8f:56:0a:49:3a:3d:66:de:6a:56:1f:68:dc:26:0f:29:33:
b2:48:b0:a6:db:4b:a9:6e:39:ad:91:db:fb:2c:13:44:d1:ef:
0e:95:00:42:d1:24:0a:82:61:83:4c:09:e8:e9:48:20:e7:d1:
09:df:24:38:50:89:43:04:ab:5d:ab:f9:03:60:60:d7:d5:18:
93:e9:48:b3:de:7d:50:62:41:1e:1b:36:5d:a0:39:cf:bf:d4:
bb:f2:19:9c:76:00:1f:21:fc:32:f5:f1:69:5d:62:1c:ce:9a:
b1:8f:cc:d0:f0:c6:ea:85:d5:82:f7:b7:92:90:a1:bf:e5:47:
cb:37:2c:42:9c:83:9e:6f:5b:b2:c9:43:81:a4:9b:c6:78:81:
bd:86:cb:1c:25:dc:f6:d2:02:ca:9d:ee:40:6c:61:08:37:d2:
4b:53:bf:7b:fc:0f:42:95:c7:e8:50:63:5d:48:62:c5:58:67:
cc:96:3d:8a:ff:82:ff:62:61:98:b7:7b:ff:34:2a:97:76:0a:
39:92:9d:34:ee:75:0b:dc:76:fd:8a:f9:3e:6e:3c:dd:f6:c0:
1a:6e:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:15 2026 by rpki-client