Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: lnIhpqMrCwoHLW9pRvIhB7kQEwbadgYwnx5+GQbgBDA=
Subject key identifier: 66:B9:C3:A6:E6:97:96:AA:45:CA:2B:E3:F7:EF:E1:84:32:28:7B:DE
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 019D3A543EEBFB5FC3B3D2D56CA30C3F44C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0EAE
Signing time: Sun 29 Mar 2026 16:01:32 +0000
Manifest this update: Sun 29 Mar 2026 16:01:32 +0000
Manifest next update: Mon 30 Mar 2026 16:01:32 +0000
Files and hashes: 1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: dB8sUZCqt/iFK7So6rfXo/Fz92eSdxYoxTpULnvILJU=)
3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
4: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (hash: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:3e:eb:fb:5f:c3:b3:d2:d5:6c:a3:0c:3f:44:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Mar 29 16:01:32 2026 GMT
Not After : Mar 30 16:01:32 2026 GMT
Subject: CN=66b9c3a6e69796aa45ca2be3f7efe18432287bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:2e:8b:6a:d7:3a:c9:6f:77:1f:24:52:e3:
04:a1:24:d7:fd:44:87:76:24:ed:ef:fb:4f:4f:c4:
fd:e4:7b:33:b0:3a:74:f1:aa:e2:eb:67:81:6c:64:
0d:3b:c4:f3:e2:c4:13:9d:f7:e2:47:ef:ae:29:31:
1e:c5:31:c7:17:e3:99:3d:3f:f0:a5:7c:e2:5c:93:
2b:a0:53:7f:65:3f:01:4e:cd:7e:8c:49:63:a3:ab:
09:84:40:f9:93:5e:8b:75:3c:a9:cb:1b:d0:0c:82:
db:1e:53:9c:5e:e5:90:96:ad:a4:50:b6:88:e8:3c:
67:16:c3:37:b0:df:3d:e2:fc:46:ad:8b:0f:5e:c7:
6b:db:77:02:14:1f:e7:28:de:a6:8b:48:a3:86:58:
da:cb:98:fc:7d:92:36:57:80:b3:10:67:87:7b:18:
ab:72:7a:19:d8:68:88:8b:f8:2f:21:12:b1:8a:c0:
40:6d:c1:3f:5b:f0:59:13:fe:02:ae:49:30:a4:7c:
a7:b3:aa:30:12:30:9d:a2:fa:da:c2:b4:6c:8c:48:
ac:45:a8:c5:5b:52:1b:b5:c6:00:81:14:e7:be:5c:
ef:04:84:7d:59:1c:dd:b8:13:c2:f7:49:de:4e:02:
26:d2:d3:c3:58:51:25:a0:d1:7e:2e:19:a1:0d:9b:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B9:C3:A6:E6:97:96:AA:45:CA:2B:E3:F7:EF:E1:84:32:28:7B:DE
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:55:d3:68:52:5f:bc:a0:d4:16:3b:bd:74:19:4c:a1:40:
e3:40:a9:5c:7c:d2:b7:67:33:c1:e3:3a:2e:74:9c:8c:ca:67:
af:e3:ab:be:b6:1c:c6:c3:68:3f:b3:43:bb:8d:d4:e2:5e:d3:
3b:14:f8:04:58:95:a2:11:f3:fc:15:7b:f1:c3:ae:b7:41:78:
c4:67:1b:b2:ca:43:cb:0e:86:de:e9:c8:71:44:b9:a8:26:be:
5c:71:a5:9e:33:d3:04:b0:e0:ed:cd:20:9c:1b:44:96:ea:f1:
9f:da:a3:2d:11:27:b4:ea:b7:d9:36:01:0b:f9:32:20:53:be:
15:0a:26:df:b0:2e:7b:3f:8d:a3:df:b3:0d:72:43:73:da:e2:
91:b7:ce:3e:c2:a8:f3:e8:da:29:ac:8a:56:5a:e9:61:61:80:
2a:66:21:2c:cf:0d:d5:7e:3e:76:26:b8:3c:1a:3d:a0:66:0b:
19:44:a3:3c:1c:c8:97:fb:e2:9d:f2:96:a6:db:a7:5f:83:0d:
27:06:72:8b:35:80:a7:fb:f5:b5:bf:48:40:fa:4e:5f:11:dc:
cf:9a:aa:a6:82:b0:90:da:f1:19:f6:31:12:7b:bd:b6:fd:86:
f6:0b:5f:7f:85:ec:bf:b2:14:b7:a3:c1:dc:45:77:1f:f6:5e:
0f:80:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:51:32 2026 by rpki-client