Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: 4wDec+1FkDxjJM03sN+hg8jkNPyMmJWLffF0Bs8bVsc=
Subject key identifier: 2B:EF:96:9C:E5:F6:B6:01:D0:71:F0:4F:5D:11:CB:82:64:6D:ED:45
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01A001702E68DE60947EE253D994C2782C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 1745
Signing time: Fri 14 Aug 2026 18:02:04 +0000
Manifest this update: Fri 14 Aug 2026 18:02:04 +0000
Manifest next update: Sat 15 Aug 2026 18:02:04 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: +JdGctLoCjaFVPrIHnZmTcRqtnbsr2DCoB1PUr4GpAI=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (hash: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:2e:68:de:60:94:7e:e2:53:d9:94:c2:78:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Aug 14 18:02:04 2026 GMT
Not After : Aug 15 18:02:04 2026 GMT
Subject: CN=2bef969ce5f6b601d071f04f5d11cb82646ded45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:7b:e6:04:68:f9:79:a4:3f:c4:a2:38:58:
59:7a:e7:da:6f:ab:a4:1e:4f:1d:54:85:bf:1a:82:
33:f8:6d:0b:03:d0:f2:da:aa:33:c7:8c:95:ae:21:
3b:34:5f:2e:03:b4:c6:ea:e6:2d:f5:4e:95:87:e0:
b3:e4:ba:a6:77:6a:2f:5a:22:5c:75:2b:30:21:b8:
5e:8f:72:0c:f3:3c:66:5e:19:9d:1f:e8:9b:dc:02:
2b:3d:07:09:4f:2d:41:ee:f1:90:61:46:80:40:12:
f8:c6:14:d3:c9:c1:b9:e0:13:f2:54:75:43:52:03:
f2:e3:df:ca:0e:34:b6:42:f4:56:55:65:a3:3a:09:
e6:ab:24:49:3e:c0:bb:2a:24:db:93:04:4f:eb:d1:
a0:c7:d0:df:ff:8e:1f:57:a1:b7:c5:1a:e2:b7:8f:
a5:f2:ef:f9:ca:95:f6:24:be:1b:ee:20:7b:95:33:
74:13:b1:6d:97:a5:c2:cf:0d:b0:34:c2:ac:db:dd:
f8:1c:59:3e:43:e5:fb:f5:25:7c:9a:30:af:02:c4:
b8:99:ed:00:00:b0:b2:70:96:f1:96:cc:5c:f3:cd:
31:81:3f:3a:34:12:fe:eb:8f:4b:f2:60:2e:4e:c5:
a1:c4:37:cf:90:a0:bd:9f:fe:98:99:af:db:7c:c4:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:96:9C:E5:F6:B6:01:D0:71:F0:4F:5D:11:CB:82:64:6D:ED:45
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e1:7d:0e:27:c9:35:e4:0e:1f:d7:35:62:5b:bd:92:75:b3:
27:48:84:10:54:67:22:90:4d:2c:af:48:ed:97:6e:a1:c7:32:
6b:31:97:61:bc:45:3b:3d:cb:c5:07:14:6d:57:51:b6:52:6c:
c2:e3:a6:44:c8:e7:23:79:95:fc:b3:b2:42:13:1d:f2:39:1d:
ee:41:58:61:1d:a3:4f:a1:6e:7c:04:f3:a6:33:a4:ed:ad:fc:
ed:82:78:02:4d:c9:d1:00:3d:89:bd:f2:15:1c:2f:fa:2f:b9:
ef:06:38:1e:a4:67:ff:18:52:f4:68:2e:b0:f7:f9:39:fc:d1:
e6:e4:9f:ee:9d:55:57:1d:36:3f:d2:4b:c2:ac:b9:73:bc:d5:
6b:8c:c0:9d:30:2f:6f:cb:62:08:10:81:0d:8e:2f:89:c8:76:
db:84:d6:bb:c7:5d:e9:81:33:01:d7:83:14:da:8c:2f:01:6f:
24:6c:53:26:bf:b0:72:a4:9a:31:b7:85:66:c6:70:46:83:17:
70:66:e8:8c:01:b6:d1:f0:26:b6:8d:90:75:69:10:ee:ba:71:
16:f4:52:7d:ac:b2:45:30:61:f3:c9:20:04:07:75:7f:16:f4:
9a:af:36:49:36:52:18:77:06:26:91:f1:be:e9:1b:07:2d:ca:
c4:61:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:14 2026 by rpki-client