Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier: lLQnGIUIyAE02vGzNxgPg6yngkHFQCmkf3AN4D39+P8=
Subject key identifier: 1B:F8:D1:A1:17:FD:E8:6D:27:DA:89:DC:6E:F1:49:7C:1B:1E:B8:64
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer: /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial: 019D39AF72D998727D974E8AF2EEA90CB3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 13:01:32 +0000
Manifest this update: Sun 29 Mar 2026 13:01:32 +0000
Manifest next update: Mon 30 Mar 2026 13:01:32 +0000
Files and hashes: 1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: MpZG79hPzRHzvCgkSnnQQ1Bd0dfRRLMqeGnSWunKWrc=)
2: B6oPSrYFOETzVfi_jkgsVldlvlw.roa (hash: FWuUjlvViSPVZ3tuWXOR6u2UkqfS1LDdyg1epfi2EcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:72:d9:98:72:7d:97:4e:8a:f2:ee:a9:0c:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
Validity
Not Before: Mar 29 13:01:32 2026 GMT
Not After : Mar 30 13:01:32 2026 GMT
Subject: CN=1bf8d1a117fde86d27da89dc6ef1497c1b1eb864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:e3:a3:a0:2b:10:57:7c:44:8b:10:6a:da:
b9:8e:88:28:f6:c8:9b:66:1c:60:ba:e3:d6:72:2a:
28:8c:53:23:fe:40:d4:9d:70:75:82:c4:f6:30:a5:
53:f3:3a:69:ea:f8:3a:c0:1d:95:2b:e7:37:96:32:
38:e2:45:45:81:67:c8:85:28:dc:f6:6f:75:a6:12:
0e:08:93:ca:40:54:7d:5c:fa:f1:dd:a1:f7:d2:1b:
70:61:6d:47:8f:17:f5:bc:ab:a6:a1:01:a3:1c:74:
d6:49:ed:40:6c:78:de:9e:01:66:a4:c0:16:4a:00:
c2:25:c6:1e:4d:f2:05:43:df:65:7c:94:71:4b:90:
5a:70:57:0e:ef:ae:50:9a:61:b3:a3:05:2b:ed:4c:
ba:6a:ac:c4:de:71:cd:86:8d:6f:29:51:38:ed:d5:
65:1e:74:e9:f8:4a:7c:cb:b3:d4:2e:a4:10:23:e3:
1d:a7:ab:53:59:51:8e:d3:1b:fe:9b:45:94:a3:71:
d2:d9:20:e9:65:d7:0b:82:6e:44:64:d7:0e:06:cd:
17:bf:d0:20:bc:98:60:93:41:39:e8:22:7b:ca:06:
14:e6:cc:1e:fb:16:f0:32:dc:a4:97:5a:b6:09:c9:
f4:c0:b8:aa:ca:a6:77:13:73:d1:8d:b9:ca:9a:53:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:D1:A1:17:FD:E8:6D:27:DA:89:DC:6E:F1:49:7C:1B:1E:B8:64
X509v3 Authority Key Identifier:
keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e7:ad:9c:e2:58:5b:af:ab:3d:2c:64:19:ef:ab:83:01:74:
73:40:89:23:0b:c1:03:b5:00:f0:7a:00:9a:16:6e:e2:24:99:
d9:06:15:3d:c0:d5:f2:bb:2a:04:0e:43:0e:33:15:35:a9:ce:
26:26:13:d9:40:57:ba:58:10:59:01:c4:a6:cb:99:3c:02:8b:
e3:dd:bd:8a:e1:61:4d:99:56:b5:8f:01:61:bf:61:71:67:37:
fe:5a:b2:4a:77:83:4f:50:da:37:ea:a7:e0:14:26:f2:61:38:
5d:7d:18:0d:57:93:dd:2b:c0:f5:6a:df:ef:95:c8:a7:bb:e8:
90:94:e9:b6:6d:46:db:0f:83:47:a7:b6:cf:38:a0:27:02:94:
5d:52:fc:c6:f6:46:53:3c:8f:3f:96:d1:96:6e:e3:61:d8:fa:
e5:40:71:1e:f0:c6:42:7d:f0:d8:b1:23:2c:11:f5:f7:8c:cb:
5d:19:7d:3b:a9:86:f0:9c:fa:77:f6:73:df:c1:d5:3e:82:17:
b6:f9:8c:b2:d7:bd:67:ae:cc:9c:22:61:f5:96:7d:16:3c:b2:
87:80:63:d6:7c:c1:f0:f4:d2:ef:9b:36:27:42:93:f5:8d:cf:
b9:16:a4:63:60:47:65:e8:c8:91:95:88:13:70:30:12:42:b4:
b8:dd:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:08:00 2026 by rpki-client