Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: SwxR+yzC2R4y/0O8PtZtH7g8IvJVLegIcPeIWlVDUtA=
Subject key identifier: 06:96:92:ED:17:35:BD:DE:59:07:4B:2B:6E:C1:6D:5B:74:74:F2:8D
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01A1212ECAA242F1FBD2E42046EC9AB3429B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 17DA
Signing time: Fri 09 Oct 2026 15:01:16 +0000
Manifest this update: Fri 09 Oct 2026 15:01:16 +0000
Manifest next update: Sat 10 Oct 2026 15:01:16 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 39KG8kC3KZXBa8KT5PO2IUmOWXGVH95AGzInVEwv2Gk=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (hash: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:ca:a2:42:f1:fb:d2:e4:20:46:ec:9a:b3:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Oct 9 15:01:16 2026 GMT
Not After : Oct 10 15:01:16 2026 GMT
Subject: CN=069692ed1735bdde59074b2b6ec16d5b7474f28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:b6:05:05:60:9b:22:bd:65:34:d5:e3:4a:
91:73:08:f9:e7:56:a4:e8:63:b0:02:26:85:48:5d:
59:20:7b:ec:8a:4a:a7:2e:43:d2:4c:ba:d4:ac:cb:
41:0f:88:ef:6e:46:9e:71:bf:cc:f5:48:26:0e:c1:
05:ca:55:a3:7f:74:b1:87:b1:0d:94:68:71:7f:e6:
ee:4c:9e:4b:f4:c0:7b:00:28:40:b6:82:36:d8:f5:
5d:36:a4:90:93:e9:eb:f5:85:9d:1e:0f:fa:c8:a5:
49:90:ed:7a:e8:0e:ac:76:95:f0:f2:9d:7d:64:c2:
52:4c:0d:80:12:d2:30:b5:b8:60:1e:dd:60:49:a9:
75:b8:ad:8f:ef:00:c0:1f:05:6b:0e:22:8a:75:18:
c1:ab:ec:b9:27:a3:42:59:f6:13:e4:e7:9f:3b:00:
ab:3a:bf:6d:12:8a:4b:bb:e1:9c:a6:b7:d1:d8:33:
f7:a7:69:23:5f:ef:0c:48:e1:6a:5c:5b:12:28:4a:
8b:f3:40:99:46:8d:5f:a1:2f:a3:a2:ad:27:40:ac:
fa:1d:a3:b9:17:55:1a:95:5b:14:ac:d7:68:ae:be:
a7:99:b6:b4:5b:47:49:b8:7c:de:0e:31:3b:f2:82:
a9:a0:5d:e8:5d:fa:f8:a3:a5:86:30:e7:09:1f:ae:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:96:92:ED:17:35:BD:DE:59:07:4B:2B:6E:C1:6D:5B:74:74:F2:8D
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:58:93:09:2c:78:22:26:bc:c9:e7:32:ad:ac:56:b4:b0:20:
83:3b:04:6c:29:9f:3a:43:f1:3e:3d:ae:79:91:fe:db:50:45:
ae:1a:22:06:34:3d:3c:6c:5d:c5:26:37:a3:ec:02:a9:65:e2:
1d:d0:52:6d:9d:fd:bf:2f:08:ab:e4:c4:13:f6:99:25:5b:de:
56:0d:c7:26:e9:d8:6d:13:0b:f1:8b:f9:26:44:22:53:f9:cd:
0d:19:07:03:69:08:c5:02:2b:31:26:5a:86:fb:78:c2:2c:71:
54:2b:4b:9b:c8:65:e6:e2:4c:59:21:34:68:02:f0:98:27:28:
cb:07:9f:ae:bc:cc:5d:0c:b6:71:dd:77:88:89:7f:8f:c3:b6:
89:29:21:91:07:98:29:54:27:e1:76:0a:97:b2:64:fb:ce:60:
88:45:f1:3a:e1:15:8d:dd:f0:fb:d5:21:6d:12:72:ef:d0:f8:
5a:07:26:9a:83:19:06:25:5d:ad:e4:7d:e3:b4:61:fd:62:2c:
cb:99:04:4b:12:91:78:4c:ca:4d:2a:a1:35:97:90:05:df:40:
5c:c1:ea:d8:ae:5b:3d:10:44:19:ef:ba:c5:ec:08:ca:df:15:
40:ff:f0:70:82:07:5e:f1:63:12:7d:7d:3e:bb:39:90:6d:a3:
b3:3f:8c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:03:28 2026 by rpki-client