Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
File: Mr-31eND3M5zBuKyXdm1b64-u3Q.mft (raw, json)
Hash identifier: UdfQRZdsgPvxaQDZ6uUk8i0aQ6Ap+pDaDxL73MqUp1I=
Subject key identifier: 81:09:50:8C:0B:EB:36:63:10:F2:93:4C:92:FF:31:6F:80:9D:67:1F
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 01A17DE1A0D666A225C63682E178D8253FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:41 +0000
Manifest this update: Tue 27 Oct 2026 15:01:41 +0000
Manifest next update: Wed 28 Oct 2026 15:01:41 +0000
Files and hashes: 1: FcPMIoPmzJT6cYZN45zD03JmVpY.roa (hash: CvF65WWlzyWCGwqsSywdtwSS7TvZPtBrP2enkrOcLNg=)
2: Mr-31eND3M5zBuKyXdm1b64-u3Q.crl (hash: GSQZotlOiAQm/AVvO6m8Cw4HrkS4zvLlcVFRlPXgAVg=)
3: OscYL73h55Z0B61noFD4qYrrbGI.roa (hash: Ooxyna65i+JPE2g1xtm5Wvgl6Sqy4X/WFD6fBLaXenQ=)
4: VzuCMamxcLksT-c8ez03Zz3UtuU.roa (hash: RfEdIxFmEpELeLDfYcseA+CWkgdvpHjnwGWtik3G0Bg=)
5: dxz2oUPeADKtK52unfiT89vX5pQ.roa (hash: 7XE8Qjjg65fe2gUYJJrV1UUTDMRNQRh6r1HRYFcpsu4=)
6: hmsBFz-YyzRBrLpumBRqasGjH8o.roa (hash: NrbNQ2GHKlPvD7HcfJk7MKBkUFu/QcXxwsZqxbA7gWE=)
7: leOu66pCcimC66Ne7uBGrPecCwE.roa (hash: a2Bg6IsECRkTthTeRBGOiVOCxSJ1nYMpEQHgiLkn2Vg=)
8: nACgEvzk8fUHLTFU1R4PsTADQ54.roa (hash: AU8R28XoB0eNxbBjK92nnxmDyXYvP8BzgFGcUZGqGDc=)
9: uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa (hash: xUsnHAqc45PDBJI9W1Q0WWyWxZ/wh0Cqvc+48QO7JKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:a0:d6:66:a2:25:c6:36:82:e1:78:d8:25:3f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Oct 27 15:01:41 2026 GMT
Not After : Oct 28 15:01:41 2026 GMT
Subject: CN=8109508c0beb366310f2934c92ff316f809d671f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:95:76:ca:de:8f:2e:19:e1:bf:be:f6:62:
50:c6:03:6d:16:59:20:d9:0e:e6:18:7c:13:b5:08:
3c:a3:e9:06:4d:c7:84:58:0e:24:72:bb:04:9c:ec:
45:e3:18:4d:d6:60:8a:87:10:55:7e:47:12:73:4e:
35:cc:82:08:13:9f:d4:91:f7:c5:6d:e5:a4:91:3b:
34:18:95:62:57:0d:01:52:d4:0e:9b:b4:a2:1c:69:
0b:77:c6:ab:8a:64:40:d2:76:e6:b1:2e:96:a7:5f:
05:74:79:7c:ca:fb:ce:93:f6:19:7d:5c:ed:4d:b2:
07:5f:d0:db:35:63:58:ae:47:57:e7:6d:98:f1:a6:
5e:76:d7:77:b4:a3:2c:e8:ef:08:4d:ae:11:aa:48:
53:d1:e0:b3:e9:bf:5d:84:32:a5:ba:a8:09:9c:cf:
19:1f:d3:8d:5d:83:33:1f:83:c0:cf:f3:85:57:1d:
a9:03:35:a5:a4:7a:9f:27:11:88:1e:25:b7:a2:cd:
cf:cf:68:09:02:de:94:c7:e1:c9:cd:52:74:4a:8e:
06:96:0a:5a:88:9a:0d:96:aa:a6:e0:a9:a9:f0:bc:
be:96:fd:ff:76:37:77:71:7f:09:89:36:62:2e:e9:
18:d5:28:97:f9:0e:93:d0:f4:77:79:76:58:cb:b8:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:50:8C:0B:EB:36:63:10:F2:93:4C:92:FF:31:6F:80:9D:67:1F
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ea:8e:b3:08:8c:90:42:04:77:84:c6:8f:19:82:05:62:ac:
4f:a0:d6:f3:99:aa:ae:0c:83:37:b6:cc:4b:ad:f8:9d:11:ba:
04:3a:78:40:19:30:e2:62:91:95:ca:23:42:a6:28:ef:89:c6:
d0:99:b6:1a:82:e3:df:7e:16:4a:98:95:f0:6b:fd:4e:9a:68:
89:49:34:7c:79:e5:cd:5d:eb:3c:6f:22:b9:32:38:09:d5:70:
5e:3a:57:b7:be:f4:98:7a:45:bb:91:b0:d0:6f:1c:83:ca:f7:
4c:0c:82:a1:11:99:cd:ac:4b:96:e8:fc:45:49:bf:1e:d7:35:
e8:fd:dd:83:dc:16:e2:e2:64:74:ad:67:ce:01:68:69:c1:03:
b3:20:c7:a9:b8:0a:bd:fe:41:9e:0e:aa:14:4d:45:b8:a1:6c:
75:80:52:1c:aa:5c:79:d5:1c:94:50:1d:55:e4:67:d3:aa:0a:
61:2d:7b:6d:52:ab:76:23:42:c0:6d:95:fd:0e:b8:48:82:d1:
65:76:2e:e4:b2:95:b1:c0:64:1b:54:15:a0:43:d1:cc:88:9d:
ab:cd:29:47:6f:7d:fe:1b:c4:07:33:e0:8c:95:9a:72:ec:b4:
1c:e6:ff:a4:f4:7e:34:0f:96:4e:23:3f:d6:eb:fe:86:6f:8d:
3a:37:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:48:13 2026 by rpki-client