
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: uD/sU/h8aOkbx27KAf8s8GYUHrjZHllnjDlEiG1d9jo=
Subject key identifier: 5E:63:80:B3:3B:4C:A0:52:A0:4A:46:60:C8:A2:18:9A:76:00:C0:1E
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019DDD9E8F17009D18A5573C30B3BB74FFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 18F0
Signing time: Thu 30 Apr 2026 09:00:49 +0000
Manifest this update: Thu 30 Apr 2026 09:00:49 +0000
Manifest next update: Fri 01 May 2026 09:00:49 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
3: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
4: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: WPAK+MSvF1APeZiG4yKDw72bQCynPrNV2Oa4Z+w953U=)
6: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
7: Zem19jbYLY_TJOw1fhbbzQQpIrk.roa (hash: 4+yIb5TxfA9PdNX24aIAR4MgjiRqcH12CDhLB9IbWOk=)
8: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
9: x7z-ysQrqrlmh-6azxQlDFRLWOg.roa (hash: d9bh3aMeZoe5mLDSNkDPB2TdMDnFvgBW7tcxJb25w1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:8f:17:00:9d:18:a5:57:3c:30:b3:bb:74:ff:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Apr 30 09:00:49 2026 GMT
Not After : May 1 09:00:49 2026 GMT
Subject: CN=5e6380b33b4ca052a04a4660c8a2189a7600c01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:61:de:65:e7:d3:f5:a3:ce:8e:9c:1f:c4:
ad:44:fa:b8:13:40:48:ac:13:cb:25:7f:25:88:5d:
49:64:c1:4a:41:8c:2f:59:58:6f:2c:25:c8:29:eb:
f7:81:dd:7f:ff:6d:57:f2:2e:be:c6:25:2f:aa:6e:
77:df:0d:80:47:8b:17:e3:18:cd:de:76:71:b3:f7:
af:a1:6d:db:71:02:71:86:89:1c:fa:96:46:b6:f0:
00:74:44:1e:49:6c:ef:3b:d4:62:ec:77:44:87:f8:
37:1a:25:57:92:85:f1:47:9d:1b:9d:d1:ec:18:c7:
69:53:6f:03:b6:b0:ab:48:ee:de:28:fa:43:f7:f8:
fc:2c:dc:f6:e0:b7:33:a0:7c:89:10:12:a2:13:f7:
f4:ba:11:fc:c0:3f:30:00:67:e9:c7:7c:f9:ba:42:
cb:44:f8:9d:4e:98:93:ce:f1:24:b9:04:c3:f0:5a:
86:5a:87:af:71:6a:6f:04:0f:19:63:56:2f:ee:2a:
2f:16:64:f9:e1:dd:23:cc:ae:6d:67:33:27:9b:29:
72:20:02:b5:ff:9d:49:60:05:0c:dc:79:d3:b1:cf:
68:bd:9d:66:7f:3c:c7:9f:b6:3c:33:9e:df:6d:8f:
ca:0a:08:5b:55:42:f9:9c:9b:bf:47:84:9c:db:d9:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:63:80:B3:3B:4C:A0:52:A0:4A:46:60:C8:A2:18:9A:76:00:C0:1E
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:d7:f2:41:83:5d:df:e2:46:c2:8d:79:4d:a4:70:f5:3d:
18:9e:ed:85:c0:48:57:cb:c9:ac:f1:31:5e:5c:ca:cb:88:9c:
2c:0e:e4:bb:dd:6b:9d:f0:b6:48:d0:a5:74:f9:9f:63:1d:d5:
26:92:f6:f5:a8:ee:f9:7e:35:5e:db:81:4b:9c:5a:ad:52:0e:
3f:39:ee:f2:ed:de:ea:cf:dd:56:d7:ea:46:d9:8c:59:d8:30:
c0:9b:b8:59:a6:57:47:a8:86:c5:75:50:e3:cb:db:c9:14:41:
e4:34:be:d9:7f:d5:16:61:79:88:5c:c7:97:5b:b2:bb:ee:5e:
12:84:35:36:e7:66:76:92:c5:18:21:11:42:ca:ed:d1:97:2e:
de:60:cc:e1:57:fd:de:52:82:32:1e:3d:b7:1f:1b:2a:2e:df:
12:7c:04:6f:aa:14:f0:1e:66:fc:c4:f6:0c:01:d6:93:51:c5:
da:4f:13:dc:3e:0b:dc:ed:1f:5b:f0:b4:7c:9a:c0:0f:cc:c7:
7d:c3:dc:2b:70:f4:14:89:85:f9:18:a6:7a:bf:f6:7c:d5:91:
32:c3:98:d2:08:0b:ea:4d:eb:e4:71:85:b5:b4:9c:f5:d0:70:
bd:27:7e:f6:77:0d:3d:82:9b:af:66:11:84:94:c3:dc:86:37:
ea:00:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:03 2026 by rpki-client