Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: t1T96N3KHPCTZfozXaTAA6PEL0u+zDla9T9mtbOjdM4=
Subject key identifier: F3:65:E2:E0:9A:65:1C:A4:74:E2:9F:B5:86:06:99:96:2C:2B:A7:5A
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01A17C60A91578B48A07F85935BFBC396BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0B9A
Signing time: Tue 27 Oct 2026 08:01:11 +0000
Manifest this update: Tue 27 Oct 2026 08:01:11 +0000
Manifest next update: Wed 28 Oct 2026 08:01:11 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: 95VVbERbRkdMn4ktqkYRoOJJ0frt6ELptGrIXV1tSk8=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:a9:15:78:b4:8a:07:f8:59:35:bf:bc:39:6b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Oct 27 08:01:11 2026 GMT
Not After : Oct 28 08:01:11 2026 GMT
Subject: CN=f365e2e09a651ca474e29fb5860699962c2ba75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:9a:91:52:0d:ac:03:ca:4b:ec:d7:05:2e:
63:86:11:2c:20:77:c1:19:80:11:89:59:79:1d:99:
ce:78:c9:7a:90:eb:13:b9:f3:83:9d:7c:4e:18:47:
bd:23:4e:70:3b:04:2c:bd:6e:c1:d6:d7:db:f0:b4:
97:56:f1:fe:ec:b9:32:0e:94:4f:8d:bb:f0:cd:81:
41:50:bd:3f:66:9c:fe:a2:89:e9:92:0a:75:23:22:
c9:fe:f5:06:86:8a:f7:f5:3b:7b:61:f8:83:5d:a5:
c7:48:69:25:0d:74:30:df:38:0e:5c:20:c5:fc:55:
58:bd:ea:64:8b:15:59:ca:3f:61:1f:85:90:46:41:
8f:9b:0b:70:7b:56:a5:05:7b:c7:37:da:59:35:86:
66:d6:e9:47:7a:41:8c:fa:de:27:2f:94:d3:6a:bb:
87:93:84:ca:fc:ce:5b:79:35:eb:b3:ba:f6:9b:96:
aa:8e:83:48:37:6d:50:8c:d2:c2:2d:c2:ef:0c:d1:
23:f1:90:77:98:32:be:4b:e1:6c:03:0e:5d:89:a4:
c8:3c:43:8c:ac:19:06:3d:59:86:b7:2e:cf:8c:cd:
62:6b:dc:7b:4f:e6:bc:f0:f6:6e:cd:18:0a:9e:2d:
96:75:44:04:ba:7c:61:1d:fa:22:fa:90:4f:75:ab:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:65:E2:E0:9A:65:1C:A4:74:E2:9F:B5:86:06:99:96:2C:2B:A7:5A
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2e:e1:3b:c3:9e:43:39:fb:ea:e4:d9:14:48:d2:f9:51:e8:
ac:43:e2:5a:34:d3:d5:c6:c5:07:43:e6:7e:de:d1:b3:29:7d:
19:5e:4e:f3:48:bd:58:8a:df:09:80:0f:07:a4:6f:33:cc:95:
4c:75:fa:96:96:3e:09:cd:1f:d1:85:23:7f:b3:4d:a9:12:86:
5b:34:01:23:df:0c:5c:6c:2f:72:76:40:96:80:80:a2:4e:e2:
74:cd:70:e6:0b:18:7a:83:a5:fb:f0:ec:72:87:9a:72:61:d8:
98:e3:aa:f2:9f:9a:33:d8:65:48:8c:4a:a6:80:d9:12:fd:55:
e5:a1:d4:92:f1:a1:24:5d:b7:2a:10:60:f9:40:db:66:e7:d4:
56:b4:a5:24:ba:1d:ec:b2:3c:53:02:0f:30:b5:f5:6b:a2:1a:
0c:b1:cd:9e:fa:4d:74:2f:e3:8c:b4:80:1b:84:6b:ba:a6:c9:
e0:41:04:e9:a6:d0:04:e2:b3:69:63:52:ba:75:6d:32:98:4f:
28:89:f6:24:49:f8:b6:2f:83:44:ae:d7:29:6b:e5:09:e3:55:
40:23:9c:bf:b1:14:8a:9d:36:8b:c3:5b:81:de:99:5b:4f:92:
cc:b2:57:c6:61:84:e6:9c:7e:43:e4:d1:a3:76:0c:72:a0:c7:
e2:71:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:19:44 2026 by rpki-client