Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: sJNmS+/lN9CD+eanfjyoD0w/z/tNvH9eKfqO4bHIQ18=
Subject key identifier: 3B:B7:C1:6F:D9:14:AC:A7:93:52:A9:A9:B2:3A:C5:A9:1B:98:11:D8
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019EB7A09DCA0F089B55AE7431340AF8E25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0A2B
Signing time: Thu 11 Jun 2026 17:00:17 +0000
Manifest this update: Thu 11 Jun 2026 17:00:17 +0000
Manifest next update: Fri 12 Jun 2026 17:00:17 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: vOlvC570tuPurXunfLY2hdNH0zn1phpfZFC8lGwga2c=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:9d:ca:0f:08:9b:55:ae:74:31:34:0a:f8:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jun 11 17:00:17 2026 GMT
Not After : Jun 12 17:00:17 2026 GMT
Subject: CN=3bb7c16fd914aca79352a9a9b23ac5a91b9811d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:b8:80:5d:bf:b2:d1:c3:65:25:61:88:fe:
ce:1c:62:06:ce:1b:3f:d8:b1:55:b0:7c:40:4e:5c:
a2:28:92:7e:56:5d:e4:f3:10:46:44:ab:77:1a:0f:
d0:d9:e2:8a:e3:00:35:34:6d:7d:8e:1a:3c:e2:c1:
ec:c8:61:6c:fa:2e:fc:22:63:21:38:66:2a:af:da:
22:ab:87:49:e0:3b:7d:d9:24:6e:d6:5b:25:15:1b:
ea:22:82:2b:b4:c4:e3:da:6c:7c:7b:0f:1f:d8:fd:
5f:31:6f:93:82:b6:32:a6:ab:5e:50:3a:bb:0c:aa:
3b:9b:39:82:e5:b0:72:22:99:fc:f0:35:0b:c2:4e:
15:5a:87:00:4b:bc:18:0a:d8:12:b6:e0:8c:c9:01:
13:1c:ae:31:d3:34:a8:f7:0d:a6:b0:8e:86:7f:ae:
ef:95:c5:ca:7c:ec:b2:da:b8:1f:da:66:00:71:47:
16:27:b9:d8:6f:ab:2b:80:e6:9b:c8:7c:5b:f7:b3:
77:43:d7:f1:e3:12:b6:44:7c:66:b4:31:10:55:62:
80:05:47:f4:3c:24:da:2d:78:e1:1a:7b:df:79:6b:
a1:aa:98:68:89:12:40:c1:8a:00:a9:94:7e:55:56:
bd:77:52:37:3c:fa:2d:f4:8e:d5:31:73:a9:17:42:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B7:C1:6F:D9:14:AC:A7:93:52:A9:A9:B2:3A:C5:A9:1B:98:11:D8
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:02:7b:75:87:76:a9:fa:15:f8:53:cf:a0:0e:99:ee:bf:0c:
8f:f7:9c:85:ee:7d:2f:b2:f6:94:11:b4:c7:54:c9:c5:04:3d:
ef:ee:2c:5b:51:0f:2f:ff:68:3c:5b:be:8b:e3:d6:53:9d:04:
51:04:57:08:99:04:56:c5:97:95:ae:b3:b0:3d:89:d9:df:0a:
d1:62:bc:9f:2b:eb:0e:9d:89:34:6c:79:ef:7e:e5:75:9a:7d:
d1:6c:bd:e4:74:95:9a:6f:e5:22:c3:28:e4:cf:51:bc:4d:2e:
2d:a3:a8:5b:87:0b:d0:d6:e5:d1:35:0b:b1:ea:40:5b:f1:52:
54:2b:37:b1:c3:db:ed:24:fb:39:29:a5:75:ae:d1:ca:ed:9c:
1a:33:d7:9c:1f:fa:01:25:33:77:27:ce:a2:8d:f6:bb:20:38:
6e:39:f6:ed:a3:2d:65:60:bd:54:46:4f:5f:44:5f:1f:2e:ba:
33:fa:75:17:6f:f3:6c:d8:d8:a0:58:4b:0b:a6:64:ac:6b:b6:
e5:9e:27:c8:1e:44:34:2d:eb:b7:c8:12:d7:66:1d:17:de:e6:
eb:13:f9:33:91:41:fb:c1:ed:70:e8:e2:1c:3a:95:5e:5d:f4:
8e:26:91:3b:be:30:e0:cf:05:70:83:d9:e5:fa:67:61:b8:2d:
f5:11:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:58 2026 by rpki-client