Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: 2o8mghKIEgHf6IIp7OqPnboNvyvssHuUhOH4xIS32Bg=
Subject key identifier: AD:61:01:96:23:1F:CD:A2:7D:87:49:F8:86:8A:A4:A9:93:98:E3:5E
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019FA14DB02721C007194B9C68B697BA6F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0AA4
Signing time: Mon 27 Jul 2026 02:00:50 +0000
Manifest this update: Mon 27 Jul 2026 02:00:50 +0000
Manifest next update: Tue 28 Jul 2026 02:00:50 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: C2+DXV1Zzjmnq3mBq4zasK//bUe8EsCIHNi0dj7jgtA=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:b0:27:21:c0:07:19:4b:9c:68:b6:97:ba:6f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jul 27 02:00:50 2026 GMT
Not After : Jul 28 02:00:50 2026 GMT
Subject: CN=ad610196231fcda27d8749f8868aa4a99398e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:b0:d6:b6:c7:c3:08:b6:6d:1f:6c:d5:02:
a4:67:50:18:64:5c:4a:42:c2:4a:d9:27:95:a4:4e:
c3:8d:35:13:eb:c2:21:79:0c:63:10:0a:f3:c2:2d:
06:d5:3a:de:98:a6:ae:f9:62:b5:15:4e:06:c4:5c:
1a:33:03:f9:d7:30:39:65:93:cf:f6:39:e2:cf:ff:
8b:00:05:88:0b:db:90:73:90:4a:13:2a:f4:1f:af:
ac:8c:a7:a9:70:73:44:92:64:e2:2f:c5:51:d0:2d:
43:bb:b7:ad:1d:46:ba:2b:2b:95:08:99:a4:7e:46:
c5:49:b3:34:53:98:5a:39:ed:7c:8c:1a:ff:b0:ab:
ea:bc:d8:c7:83:44:8a:db:4e:fb:b2:85:ce:2d:fb:
5b:7e:b3:62:67:34:7e:4d:b4:46:ca:50:16:e6:39:
52:1a:0f:02:32:4f:bd:92:1e:51:3a:09:d8:62:32:
51:e8:c3:fe:34:53:35:29:70:25:37:d7:88:dd:2b:
48:50:1e:bf:23:fa:3b:41:57:c7:c1:48:ea:c8:09:
7b:f6:da:0c:cd:b6:f2:0f:a1:f9:ff:32:f7:4f:e9:
8c:77:c3:b5:07:62:12:cc:00:35:14:c3:39:c4:68:
59:21:52:93:5f:07:98:11:8b:bc:10:47:9d:a1:80:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:01:96:23:1F:CD:A2:7D:87:49:F8:86:8A:A4:A9:93:98:E3:5E
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7f:e6:29:f0:39:04:27:25:bc:c7:f7:7a:dd:0b:7f:1f:80:
53:eb:81:45:53:7c:49:a9:7e:77:ea:1b:22:87:60:c2:3e:dc:
e9:a2:31:b9:5c:6b:9f:97:37:0e:b8:19:93:eb:c9:c2:b5:43:
71:77:f9:63:e4:7f:24:39:2c:4c:c0:93:50:65:b1:e7:02:38:
aa:95:42:02:c3:37:2f:0b:5d:e1:35:4b:7c:20:93:3d:a0:6d:
83:63:38:7d:a2:0b:c8:45:71:e7:3f:23:11:63:15:cf:d1:c0:
d1:00:d8:1b:23:32:d6:73:4c:c7:e6:bf:99:c6:b6:51:10:5a:
b4:03:b6:7b:2c:2d:86:2d:29:01:54:91:1d:f6:43:f1:7a:73:
b9:4e:cb:4c:fc:df:75:b8:99:fd:31:17:f6:5c:16:9f:ff:03:
30:2d:f8:85:87:21:ce:26:51:6d:ad:24:7e:08:d6:2c:7a:67:
5d:d2:f9:f2:5d:f3:97:46:11:35:62:e1:6f:5f:f3:34:a0:cc:
5f:ea:3e:38:88:8f:d6:2c:72:42:c0:92:06:69:6d:8e:43:ba:
30:31:6e:58:7b:b2:ae:81:6f:0e:8d:46:80:bf:ba:98:95:2f:
bc:66:1c:8c:4d:b0:fd:c5:c2:3f:ec:b3:e9:78:11:40:68:a8:
c6:bb:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:25 2026 by rpki-client