Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: WRTfN+BeLE6Qc07EjfRHgDGptfsolwXdXy8cgbt4yas=
Subject key identifier: 5A:71:92:DE:4C:61:34:CB:1B:67:01:E6:28:94:E6:67:B2:A2:D0:4A
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019CC3AA9A675FE6A2C34F2AA7D54C53F936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 185E
Signing time: Fri 06 Mar 2026 15:01:03 +0000
Manifest this update: Fri 06 Mar 2026 15:01:03 +0000
Manifest next update: Sat 07 Mar 2026 15:01:03 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
3: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
4: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: R0qwLVdOVcOldJk1UqMQPeSbKx0Sk4/Ze2vvxaTA87E=)
6: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
7: Zem19jbYLY_TJOw1fhbbzQQpIrk.roa (hash: 4+yIb5TxfA9PdNX24aIAR4MgjiRqcH12CDhLB9IbWOk=)
8: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
9: x7z-ysQrqrlmh-6azxQlDFRLWOg.roa (hash: d9bh3aMeZoe5mLDSNkDPB2TdMDnFvgBW7tcxJb25w1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:aa:9a:67:5f:e6:a2:c3:4f:2a:a7:d5:4c:53:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Mar 6 15:01:03 2026 GMT
Not After : Mar 7 15:01:03 2026 GMT
Subject: CN=5a7192de4c6134cb1b6701e62894e667b2a2d04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:02:fd:1e:03:69:4f:dc:fe:9f:f2:26:f3:
2c:38:0d:4f:0b:27:9e:d8:7e:88:36:e6:11:a3:8a:
20:9b:58:2c:f5:1d:1c:70:f7:f3:e3:5e:5c:36:56:
5f:a5:fd:cf:b6:25:08:17:55:e5:03:3d:22:be:7d:
b5:bb:f7:6e:8d:d9:6e:3b:8d:13:51:41:c9:bb:d1:
87:b3:9e:33:24:76:d3:24:e3:c2:c1:e7:5a:ee:ff:
78:91:2c:ab:a9:67:ee:d7:13:4a:eb:8e:e8:d4:68:
22:ec:c0:65:48:97:60:43:46:cd:66:7d:0e:37:d8:
5f:d5:61:fe:6e:a8:72:3c:96:64:e7:61:21:3b:04:
fe:96:79:a9:94:2f:32:49:52:1e:12:8e:df:08:01:
76:1d:65:0e:34:94:79:e6:1a:3d:de:9f:ff:a2:e7:
b9:c0:ed:8d:75:8e:a5:5e:e5:6f:c4:aa:08:c9:29:
12:a5:33:bf:39:8d:1e:bf:1f:f0:1e:94:e6:48:e3:
c2:da:9f:cd:10:28:0a:43:84:06:fb:52:bd:f9:82:
9c:21:b7:5b:ad:06:30:76:8d:93:e1:9c:90:0d:16:
af:48:71:b4:4c:1a:cc:12:43:77:8c:fe:e0:91:c7:
e0:cd:c2:80:6b:96:56:c3:d5:4c:d9:16:34:e2:2e:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:92:DE:4C:61:34:CB:1B:67:01:E6:28:94:E6:67:B2:A2:D0:4A
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a8:17:bc:a0:59:43:00:24:09:40:20:e0:cb:88:26:75:97:
3d:55:f8:76:fd:52:5d:0d:75:40:6f:11:2d:92:d6:4f:d2:04:
cf:ea:5e:b1:bb:76:dc:26:e6:62:ab:7e:23:3d:a4:9b:7a:a0:
85:ad:f6:02:3a:12:98:c3:77:0d:c7:02:9a:30:d2:f6:8e:e8:
f7:83:62:39:9e:d5:a1:7c:8b:ea:34:39:46:32:f2:9c:33:e2:
89:84:e4:7a:b5:6c:7a:96:0f:a4:d6:dd:79:89:d6:4a:29:de:
5a:6d:9e:3e:38:b0:06:fc:2c:cd:a8:64:5f:dd:cd:a9:cc:e2:
89:18:2f:5b:d2:29:16:53:bb:0b:0e:97:d6:c0:1b:e8:70:c0:
36:ee:96:e6:85:f8:c8:4c:fe:ea:dd:0e:f0:dd:b2:8e:c1:11:
9f:e9:27:d0:b9:10:65:46:2b:d3:c1:ca:e1:f7:b7:93:47:7e:
a6:f4:6f:b4:d8:86:ef:6d:0e:fe:e8:98:3b:d8:5e:8a:0f:4c:
a6:73:db:86:ce:d6:cd:4f:1a:b2:3f:ec:b5:ee:14:f8:80:a1:
58:9c:b3:10:1d:00:f9:62:8c:4b:78:fd:60:c9:d5:f0:d2:1d:
31:b4:8b:fd:e4:c2:1a:9d:41:f8:6d:1d:87:27:2f:50:57:cf:
59:bd:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 21:48:13 2026 by rpki-client