Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: mblZXcQHngqNj/v0X3Ak8EFppIEWEhr1JgOrXdcWeIE=
Subject key identifier: B0:7B:33:81:3F:2E:7A:94:43:41:77:BF:92:0B:DA:45:35:1F:0F:72
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 019D069D900B44CA71DE3254E427BB18E44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 0452
Signing time: Thu 19 Mar 2026 15:01:22 +0000
Manifest this update: Thu 19 Mar 2026 15:01:22 +0000
Manifest next update: Fri 20 Mar 2026 15:01:22 +0000
Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=)
2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: a93Tb8hJgJf5glwha4tADns0dKwcbgi+vble5z920co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:9d:90:0b:44:ca:71:de:32:54:e4:27:bb:18:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Mar 19 15:01:22 2026 GMT
Not After : Mar 20 15:01:22 2026 GMT
Subject: CN=b07b33813f2e7a94434177bf920bda45351f0f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:b1:40:36:d7:c2:c5:63:71:00:63:f3:69:
9b:c2:2e:fa:f0:41:c1:8c:ce:ad:be:fd:c0:a9:e0:
64:59:3c:2b:f9:37:52:a6:ba:a4:e3:df:bc:f6:28:
06:b4:62:de:b2:b5:e3:b3:47:cd:73:af:63:6f:b1:
51:71:7c:7c:e0:78:03:05:5b:b7:57:f5:5b:31:8a:
c7:3f:bf:3b:09:45:a6:64:d7:68:1e:a2:ee:a6:e5:
cf:d6:9b:17:12:d2:c8:c8:f9:25:31:db:47:84:5d:
82:17:35:73:9b:b3:35:be:c3:96:dd:00:82:2f:85:
d1:81:1e:3c:8b:aa:2a:02:53:5d:cb:9a:3e:8f:40:
71:ad:7d:39:54:d2:1c:2c:e3:95:ce:c9:c8:be:40:
c7:e5:d7:b7:ff:02:3e:47:aa:5d:52:81:2a:0c:35:
6c:43:db:bb:69:5d:76:92:b3:9f:ba:7d:e4:36:d9:
da:5d:da:df:56:68:48:f0:56:e5:d7:85:7e:9b:26:
ab:e2:0f:42:0c:6d:3a:c5:d4:48:b4:e6:5e:e4:53:
86:90:05:61:b0:6d:56:e7:0a:01:76:cd:06:d6:38:
4d:15:e9:be:bf:c5:00:a9:0e:8d:49:26:a9:35:c2:
3b:cf:2d:83:50:25:86:81:bd:30:d7:d1:3a:70:bc:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7B:33:81:3F:2E:7A:94:43:41:77:BF:92:0B:DA:45:35:1F:0F:72
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3a:3c:52:e5:17:59:19:f8:3d:cb:96:07:ae:a1:c5:c6:6b:
86:29:05:c2:51:22:f3:e2:83:ea:06:b9:94:ee:50:a4:3e:c2:
8d:cd:fe:3c:4d:71:9a:8d:9a:3f:6e:ac:65:33:89:1f:7d:88:
b3:ca:47:e4:46:0a:04:6e:96:60:94:6e:ad:64:bb:b4:52:9f:
03:c4:f3:04:a8:78:74:8a:51:44:43:03:e7:9d:a5:36:89:00:
2f:f1:7d:74:9f:e9:f4:04:15:ed:56:36:cb:c8:86:7e:2d:b1:
43:72:e2:14:30:6a:c6:fd:e4:d4:a9:89:40:c8:88:27:42:bb:
f7:fd:59:2d:c1:6e:55:a2:e2:7a:b9:88:19:1a:f5:77:46:8a:
7c:60:2d:5c:f1:52:6c:1a:23:e7:3c:d3:99:04:ae:0c:8b:b7:
2e:6b:de:6e:6b:01:92:05:18:f6:3f:60:9d:d9:af:bf:60:17:
41:05:08:bc:e3:42:36:68:b0:20:3b:ab:10:6c:cd:fb:9d:5b:
5f:b4:8a:bc:a4:74:89:81:f2:0a:99:88:23:72:49:18:d5:c9:
12:c2:b1:1b:dd:71:6d:28:7a:b9:26:de:9c:23:98:15:0b:2c:
33:97:07:02:f2:c2:03:96:73:84:fa:aa:48:51:dc:19:a6:b1:
39:9a:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 20:26:12 2026 by rpki-client