Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: Jd0C7KKV+U/fU97BZHIerFlLVvKYFBIzafchRaM4oRs=
Subject key identifier: EB:B1:62:3A:1E:2E:E7:CD:EF:CF:C1:DA:93:C0:32:D6:78:94:A6:DF
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019D39AF528458D94FBD56E75F5FF41777F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 13:01:24 +0000
Manifest this update: Sun 29 Mar 2026 13:01:24 +0000
Manifest next update: Mon 30 Mar 2026 13:01:24 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: Jjlr5S7Og4WqhFJkjV9s8YujNZvUKkXTCwILPzGBwiI=)
2: qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa (hash: Nfcf0dxf81UBVMjoGjSg559+Hju5Dln2RKJKCrFeGVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:52:84:58:d9:4f:bd:56:e7:5f:5f:f4:17:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Mar 29 13:01:24 2026 GMT
Not After : Mar 30 13:01:24 2026 GMT
Subject: CN=ebb1623a1e2ee7cdefcfc1da93c032d67894a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:77:47:39:82:38:26:ad:2c:a4:00:8b:9f:
f2:4e:cc:bd:b9:02:c6:59:a8:02:7c:47:c7:8c:82:
6c:fe:86:c7:40:f6:c5:1b:7d:02:7f:a7:53:a5:88:
80:01:fa:ff:43:2b:1c:05:c1:d5:f2:38:fe:f0:52:
b5:93:d8:81:c8:e8:54:8c:75:52:47:c5:3f:c1:f5:
66:6b:3e:fb:3f:71:da:11:8f:1e:95:ac:51:f5:99:
1d:3f:9e:f1:45:1f:ef:04:2b:e9:53:b3:73:99:a8:
69:59:3c:23:96:12:07:e0:65:95:5a:cf:4c:9c:5e:
5e:0a:1c:6a:02:a9:0e:99:6e:b7:28:4c:e9:e7:03:
43:62:0e:8e:34:59:17:0a:b7:bc:9f:0d:a3:0e:d5:
8e:d6:d3:fa:30:d6:b8:e5:bd:df:d1:0a:c0:e6:c1:
36:10:ab:d9:55:84:a5:1c:b1:65:68:b9:30:57:9e:
32:13:62:c5:71:74:65:e0:56:9b:ea:68:59:de:2a:
a3:a7:fd:f9:09:b2:6a:bd:80:6c:27:7a:be:3e:17:
f9:23:df:65:e3:52:5c:53:a2:0c:3d:c2:3c:fd:6b:
de:dc:8d:04:31:a3:c3:e7:4f:a3:98:f0:a3:bf:8d:
35:13:fa:93:5a:d7:fc:38:f3:c3:e4:3a:38:a3:7c:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:62:3A:1E:2E:E7:CD:EF:CF:C1:DA:93:C0:32:D6:78:94:A6:DF
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bf:4d:ff:40:a1:9d:af:0e:2c:8d:6f:64:07:df:be:85:6e:
79:38:38:15:02:14:8e:f2:cf:27:5f:8e:90:8c:78:9d:a7:88:
2e:81:a9:06:61:d9:6c:0f:43:70:ad:31:26:7d:2e:9f:82:f6:
25:f2:d8:52:88:90:c5:24:30:c0:06:ac:6d:d3:68:a6:e4:f9:
32:26:a7:40:2e:47:ae:be:96:55:8d:0a:0f:01:a5:28:ab:a8:
e5:70:98:80:70:15:d4:1b:13:ea:66:43:cb:df:20:9a:a8:c3:
67:40:3a:90:14:a2:45:3e:74:e9:db:69:af:65:94:a6:32:ea:
10:5b:3c:c5:b8:86:06:47:97:d3:68:79:8e:bc:db:c1:3c:74:
ee:bf:14:ba:37:9a:54:cb:f7:0f:9c:ea:2c:d9:6a:cb:8a:ea:
57:10:38:17:9c:06:a6:88:a0:11:42:9c:81:23:0f:9d:b7:dc:
e3:ce:2d:37:a4:1d:36:02:8e:db:65:16:c2:03:52:12:3e:22:
1f:19:a0:ea:f6:04:b4:f8:58:4a:39:f1:4d:94:02:75:c4:83:
e9:05:58:9e:eb:15:93:07:04:ae:bf:b9:3c:e2:a6:a6:51:9a:
11:4b:25:f7:15:e5:0f:aa:6a:10:9b:cc:9a:e6:27:d4:d1:d9:
02:fc:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:45 2026 by rpki-client