Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: gGjGagweg/KwckE454DqiEmHds+/CBBcLO47C7hekGk=
Subject key identifier: 53:CD:98:B1:DE:30:2D:50:BE:C6:7A:E5:C2:A2:44:35:E6:44:1A:8B
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019D37F7AD6F83E761DC5BB5DCD9AE51FB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 150A
Signing time: Sun 29 Mar 2026 05:01:11 +0000
Manifest this update: Sun 29 Mar 2026 05:01:11 +0000
Manifest next update: Mon 30 Mar 2026 05:01:11 +0000
Files and hashes: 1: HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa (hash: 0zA+P2Wj4q6cydJzTfe4tmDc4sztqJccFJv0Zen4ddc=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: O4KzyFFp5LzVExYpZ2NqQdgEeVWOiGkKqZy7XzW9Lus=)
3: PfIfsUmHCecT0quWuMMLRmwtU_o.roa (hash: 1Lg6Rrqt3IOywh0QJkAE12er2k2miVzqT2LnmDFzGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:ad:6f:83:e7:61:dc:5b:b5:dc:d9:ae:51:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Mar 29 05:01:11 2026 GMT
Not After : Mar 30 05:01:11 2026 GMT
Subject: CN=53cd98b1de302d50bec67ae5c2a24435e6441a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:86:5f:e1:90:75:53:25:f9:55:da:41:3c:
58:ea:e0:5c:bd:db:21:0d:78:43:4a:ad:48:40:fe:
32:9c:8d:7f:1d:35:0a:d2:b5:4a:35:6a:31:77:32:
2e:8e:6c:36:4c:d9:b4:4c:5a:9a:c4:a7:72:90:8b:
ca:13:26:6a:40:65:91:74:45:3a:e4:eb:bb:87:79:
19:c3:42:09:95:43:de:c0:68:cc:3f:e8:3b:6b:ab:
7b:10:c8:a4:ed:11:0a:1e:8f:ac:cc:6b:1b:09:9c:
b5:b0:39:75:42:46:65:bb:81:62:e9:f5:2e:26:6d:
12:0d:6c:b5:5a:54:e4:da:37:ce:09:d6:01:64:eb:
52:55:71:d7:4c:0d:2d:81:d5:f7:b7:82:6c:26:a0:
fc:a6:a1:44:23:3d:6c:8b:e2:ad:8e:74:2a:d1:2d:
b7:48:09:51:91:a1:33:60:5b:d7:a0:54:e7:c0:e5:
62:a1:c3:d7:12:1d:21:83:96:a5:2d:db:ce:89:f5:
c9:2e:38:6c:71:9b:90:bf:fd:4e:6d:f5:c4:a1:2b:
c9:a9:2a:f7:a6:d0:f1:2f:de:22:9f:9c:b0:ce:f6:
a7:10:4a:d9:05:50:21:d6:11:ee:ad:30:1a:44:78:
8a:b5:41:bf:26:4d:3c:63:ac:12:01:80:91:09:c3:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CD:98:B1:DE:30:2D:50:BE:C6:7A:E5:C2:A2:44:35:E6:44:1A:8B
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:84:8e:95:65:8f:39:a5:bc:74:3f:e2:e4:55:da:34:0c:
b4:03:e5:da:cd:66:f0:30:25:98:47:91:41:07:ba:73:2e:20:
38:8e:67:f9:a9:5f:89:7b:9b:37:26:cb:6f:38:f4:d1:ba:f2:
96:25:ae:d3:12:06:f7:42:b5:f0:03:7e:e1:5d:bb:78:7c:c1:
09:b8:6a:d5:25:59:06:c4:d3:10:25:c9:8a:32:bc:8d:44:5b:
37:c1:86:cb:93:c9:40:2e:e8:41:d1:b2:05:0e:a8:ad:24:a5:
ea:e0:c3:dc:21:d0:06:a3:ed:78:2e:83:cb:75:d7:fd:e7:dd:
6b:4b:04:7a:ad:45:4e:8c:75:0a:74:8c:07:b4:32:f4:f1:83:
33:3f:ee:6a:81:ab:bf:5c:47:a5:d0:15:1f:ff:01:34:64:fe:
db:c5:66:4e:a8:44:39:9e:da:3c:38:3f:01:cd:02:c4:00:6e:
ab:f9:d0:39:38:ae:e6:0f:55:ae:a6:2b:1d:f5:12:1b:35:9e:
30:98:5a:d6:71:d4:49:fc:fb:21:c5:8a:d4:07:a1:13:7c:56:
f4:1f:59:21:f5:23:b4:dd:1f:a9:c8:75:0b:c0:90:5e:d3:bb:
d3:d8:c0:49:90:f0:17:22:7d:8d:f3:73:71:ce:0f:79:ff:97:
e2:31:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:12 2026 by rpki-client