Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: zsM15Mhyh5gXK3drv4y3rzfArN46L7hMPlf3dKBNU10=
Subject key identifier: 64:15:47:8F:5E:44:36:AF:3E:F3:80:50:6E:1D:BA:EF:FF:3B:B5:1E
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 019D37C08603D1233A4F4A8C0AFB3DAE0746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 15C1
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: uDCLZ6P6KzETeX7Tsm2saMu3ZKQTPyFUIGChtuwK9aA=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: aASlAO3ULJvYcCaFwZuTImiJ--8.roa (hash: 3IcV0cUF4DbrPmFVcmO8nyEBwkVXv6EWYEXI+8Y8SiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:86:03:d1:23:3a:4f:4a:8c:0a:fb:3d:ae:07:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=6415478f5e4436af3ef380506e1dbaefff3bb51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:82:ac:17:5b:0e:a7:18:04:e8:ea:02:18:
43:d1:cb:6f:47:88:11:ab:e2:31:3e:11:c1:fa:75:
c8:37:29:a2:db:00:47:4a:3b:6f:fa:13:c3:5c:8a:
fe:ae:ed:3b:84:ae:e7:ce:00:6a:76:d7:74:dd:de:
72:85:46:68:2f:8f:e9:66:6f:d6:7c:62:ea:1f:ee:
40:9a:e4:e8:6e:9f:ea:44:6b:61:4a:a5:14:2f:e1:
08:2b:87:96:03:22:f2:c4:f4:43:a4:70:4f:1b:82:
8b:02:b4:fc:24:84:c0:94:c8:93:bd:aa:7b:a8:35:
3d:a2:51:8b:2e:53:f4:51:73:14:a9:65:50:b3:f0:
55:23:4f:02:82:cf:5b:7c:cb:c3:44:a1:e3:c3:d0:
ad:0d:68:54:59:06:d4:ca:d4:e6:b0:b7:8c:ac:de:
08:92:18:2e:96:be:06:5b:e4:cd:f3:2e:ef:b0:6d:
71:33:b1:5e:c8:1c:34:b6:94:4c:8b:8a:33:d3:0a:
43:f6:3c:84:81:3d:1a:3e:9f:c3:c7:da:46:4f:ed:
55:46:d9:bb:84:80:7f:f3:01:65:5a:ea:5e:b3:55:
bb:92:30:c2:2c:f1:4e:4b:0a:cc:aa:4a:c6:74:33:
38:11:b4:4d:2d:34:4a:60:67:bd:48:2a:7a:09:d3:
62:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:15:47:8F:5E:44:36:AF:3E:F3:80:50:6E:1D:BA:EF:FF:3B:B5:1E
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:ed:b3:32:39:9c:dc:07:47:4b:ee:2d:08:78:19:5a:c5:
a3:1e:7a:61:6a:cb:25:72:d0:73:e3:44:38:60:02:5f:8b:38:
31:84:be:d2:03:6c:c2:0e:77:19:ae:40:18:d1:7f:af:27:8b:
aa:06:16:a3:35:10:f5:44:94:c8:b3:26:02:4f:2f:18:2f:78:
3a:7e:63:78:35:e8:c9:34:a2:24:54:49:6e:51:20:c3:04:49:
b0:01:0b:28:38:c4:ee:21:6d:76:d5:6d:c0:a3:61:28:62:33:
be:ca:51:65:c4:f4:00:1b:43:65:4e:64:37:b3:19:9a:02:04:
06:16:36:e3:3a:f7:d6:58:d4:79:76:aa:fc:2c:1e:65:7d:7d:
21:45:be:32:bc:83:d0:40:b1:8d:8f:bb:87:29:58:31:82:bf:
79:2e:ee:f9:70:17:e4:cd:81:72:91:d2:b8:90:c0:fb:ac:10:
11:92:ea:50:28:b3:78:bc:06:82:cd:b2:f3:84:c8:4a:50:86:
68:7b:f3:c6:5b:c1:58:6c:2a:98:50:82:dd:d1:97:38:88:9b:
0f:fd:3c:61:1d:53:d4:da:7c:b0:b5:65:9e:e7:0e:62:20:d9:
ac:48:44:45:ca:67:6b:ae:14:48:cd:30:35:59:06:81:8f:f8:
b5:79:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:04 2026 by rpki-client