Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: YBcNo0uJGtrCCeBCJe1DWk56jsIHVYI5NKGFs3HQBjw=
Subject key identifier: B1:5D:ED:76:38:4A:41:2E:B3:09:7C:DB:FF:ED:2E:B3:AE:76:DA:34
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01A08CE8BA27D72B68A45BBEA4B16067374A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0B1E
Signing time: Thu 10 Sep 2026 20:00:57 +0000
Manifest this update: Thu 10 Sep 2026 20:00:57 +0000
Manifest next update: Fri 11 Sep 2026 20:00:57 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: 03tB8gnNJgCgeQ8lsCUQ6LbmfB1pgEQNXumFDKCbRsQ=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:ba:27:d7:2b:68:a4:5b:be:a4:b1:60:67:37:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Sep 10 20:00:57 2026 GMT
Not After : Sep 11 20:00:57 2026 GMT
Subject: CN=b15ded76384a412eb3097cdbffed2eb3ae76da34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:f9:fa:04:4a:3f:a7:e6:5e:83:2d:29:04:
64:f7:c4:79:55:28:10:17:10:b7:7b:42:ad:13:53:
f4:6f:0d:03:0c:43:a2:a5:df:09:ec:e1:69:37:fd:
13:de:02:14:07:43:25:56:b0:f6:7d:d9:17:a6:b9:
fc:dc:58:b4:b9:7a:e6:9b:73:bc:c7:37:b9:cc:10:
f2:47:a4:2b:18:5b:57:7b:d6:c2:5f:9e:1f:74:f8:
5b:06:0a:40:5d:06:56:cb:bc:bd:c4:46:41:8d:4a:
f1:04:07:ca:2a:10:50:e6:a2:2b:1d:bc:30:9a:23:
c2:e1:f0:35:11:73:96:1c:0a:71:ff:c4:50:f8:dc:
b0:bc:ee:88:18:34:90:3e:4b:d0:c2:a1:a2:f9:cd:
ca:67:f7:2a:65:20:63:fd:94:8a:97:cb:ed:3b:45:
49:6a:d3:b4:6f:e3:68:22:0a:6b:5d:9d:2c:16:18:
41:35:93:ed:91:d1:13:03:0e:31:a9:25:62:a0:e8:
95:39:fd:c1:3c:1d:54:7d:bc:d3:0e:2e:cc:b9:48:
7c:77:ac:2b:d7:2b:dc:cc:fe:c5:da:e2:b0:92:e5:
41:87:80:7b:42:93:07:e1:fc:72:43:6c:8b:44:78:
30:f5:6e:a6:63:0d:22:20:01:4c:22:c4:ef:d7:9e:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:ED:76:38:4A:41:2E:B3:09:7C:DB:FF:ED:2E:B3:AE:76:DA:34
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:97:ae:07:de:6f:99:50:06:e8:e4:cb:9d:92:4b:62:ac:f3:
b1:e1:7d:d6:bc:27:17:d3:c9:88:d4:12:b0:12:6b:16:71:e1:
f9:88:25:45:e5:a6:43:e0:ec:79:5a:44:86:e5:d7:00:05:f7:
a2:91:b0:e4:d5:a7:be:89:47:b8:9c:be:37:87:ad:d5:69:e1:
1f:9d:a2:4c:cf:14:7b:35:f1:ec:a4:d6:e9:87:40:8a:05:9d:
0c:06:39:b5:76:b3:3a:1e:52:8c:6e:d5:f4:b5:9b:d7:e5:a7:
b5:28:99:13:d9:9b:76:52:74:23:85:14:8f:80:63:f8:e3:8f:
8a:e6:a6:85:b4:3b:b7:58:35:5e:fb:5e:49:03:c1:71:70:e6:
07:fd:02:58:4c:13:97:2f:6c:d3:cb:f6:ec:ed:cc:3c:c8:73:
9b:82:b8:27:4e:c1:ce:2f:e4:01:5a:14:f0:f3:b8:a1:38:e7:
f6:1e:57:03:56:77:bc:2a:db:c3:2a:92:45:50:0a:ca:ba:bb:
07:cc:6e:0d:0c:53:ba:26:5e:86:08:f1:84:db:83:1e:1b:24:
a1:09:3e:81:84:83:e6:a6:bb:e8:fc:03:b5:14:ff:b6:fb:48:
fc:8d:14:5e:46:fd:fe:b9:d9:b0:c5:fe:e8:8b:32:7c:f4:1d:
2b:75:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:06 2026 by rpki-client