Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
File: Mr-31eND3M5zBuKyXdm1b64-u3Q.mft (raw, json)
Hash identifier: aBlYEZ13s3pWgzBJ93iH6PYsvnScNmf/cZ8fKMkTiXE=
Subject key identifier: 86:E5:CE:60:F6:AB:EE:C6:E4:42:82:50:CF:E4:74:17:36:8C:88:93
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 01A06F843121C16780920BEAED88ADCDFF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:02:09 +0000
Manifest this update: Sat 05 Sep 2026 03:02:09 +0000
Manifest next update: Sun 06 Sep 2026 03:02:09 +0000
Files and hashes: 1: FcPMIoPmzJT6cYZN45zD03JmVpY.roa (hash: CvF65WWlzyWCGwqsSywdtwSS7TvZPtBrP2enkrOcLNg=)
2: Mr-31eND3M5zBuKyXdm1b64-u3Q.crl (hash: S9BuUIBd07KMPUPFF6kvK5W0/LCYhRijvTiZBLJeFks=)
3: OscYL73h55Z0B61noFD4qYrrbGI.roa (hash: Ooxyna65i+JPE2g1xtm5Wvgl6Sqy4X/WFD6fBLaXenQ=)
4: VzuCMamxcLksT-c8ez03Zz3UtuU.roa (hash: RfEdIxFmEpELeLDfYcseA+CWkgdvpHjnwGWtik3G0Bg=)
5: dxz2oUPeADKtK52unfiT89vX5pQ.roa (hash: 7XE8Qjjg65fe2gUYJJrV1UUTDMRNQRh6r1HRYFcpsu4=)
6: hmsBFz-YyzRBrLpumBRqasGjH8o.roa (hash: NrbNQ2GHKlPvD7HcfJk7MKBkUFu/QcXxwsZqxbA7gWE=)
7: leOu66pCcimC66Ne7uBGrPecCwE.roa (hash: a2Bg6IsECRkTthTeRBGOiVOCxSJ1nYMpEQHgiLkn2Vg=)
8: nACgEvzk8fUHLTFU1R4PsTADQ54.roa (hash: AU8R28XoB0eNxbBjK92nnxmDyXYvP8BzgFGcUZGqGDc=)
9: uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa (hash: xUsnHAqc45PDBJI9W1Q0WWyWxZ/wh0Cqvc+48QO7JKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:84:31:21:c1:67:80:92:0b:ea:ed:88:ad:cd:ff:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Sep 5 03:02:09 2026 GMT
Not After : Sep 6 03:02:09 2026 GMT
Subject: CN=86e5ce60f6abeec6e4428250cfe47417368c8893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:71:43:36:62:1f:14:99:fb:35:e0:9a:70:
0b:c1:3d:a1:7d:90:01:09:19:67:6c:5b:37:77:92:
95:6e:81:5e:a7:75:9d:d1:e9:e1:57:5d:c7:7e:73:
53:19:1a:57:cd:18:9c:a7:63:1c:8d:ca:be:b3:f4:
f9:79:3d:61:63:b5:cc:17:2c:41:45:7a:08:82:6b:
6e:8f:19:3a:cb:27:06:cb:0b:5e:dd:79:5d:6a:d4:
a1:6e:2c:a7:a8:44:de:57:86:2e:56:14:61:e2:88:
e8:48:5a:78:1b:1b:b5:75:4c:7f:81:77:c7:8f:73:
80:87:26:69:be:ac:6c:c5:25:38:9c:ec:c8:3e:86:
97:c4:aa:54:d4:45:fd:09:3d:ee:be:b8:43:88:29:
9d:55:4a:44:2c:2a:b3:68:7b:26:56:3a:c6:e1:e5:
de:d4:79:58:6d:3c:e5:72:e0:6d:c1:74:eb:b4:0d:
54:0f:4d:6d:74:51:42:93:88:25:48:dc:50:99:7f:
3e:f3:92:f2:a6:12:17:9d:cf:36:48:0c:65:f1:a3:
2d:f0:47:a5:93:e1:0a:9c:27:b7:be:4f:80:f7:e9:
c0:00:aa:d9:b4:50:92:b4:c2:52:57:5c:27:1a:8a:
54:b4:7c:72:1b:61:bc:9c:3b:d0:0e:08:99:47:dd:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:CE:60:F6:AB:EE:C6:E4:42:82:50:CF:E4:74:17:36:8C:88:93
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:dc:89:eb:7b:d7:76:0c:c2:70:fc:68:60:b5:64:b2:b0:e9:
be:ae:8c:0d:2a:a9:7b:f7:03:87:de:d2:c7:5f:de:84:00:aa:
a6:f2:08:ef:7f:43:11:ff:f5:a5:e9:28:11:36:ed:8f:49:03:
0a:c9:8c:ef:15:5d:af:b2:d9:ea:6d:ef:a1:26:c5:fe:68:0e:
53:1c:d8:be:72:b9:8f:ac:7c:fb:6b:04:0b:04:ed:aa:c2:e3:
3e:e8:aa:3a:79:8f:c4:ed:0c:25:1d:99:f2:9e:d1:1c:e9:77:
44:fd:61:95:73:4e:16:e1:6b:cc:c6:b1:a5:02:2d:63:ad:96:
c0:ee:9e:69:3f:1d:ea:90:c6:d0:ea:1e:d2:3f:6c:1d:2c:18:
bf:3e:c4:8b:59:12:4a:ba:37:60:83:55:0e:cb:26:e4:d9:42:
87:8d:21:9c:51:1f:52:2a:1c:60:09:e8:da:fd:30:de:3b:b6:
d8:a8:a9:ac:ec:86:1a:f8:8f:29:48:98:d9:7d:f8:50:00:60:
45:41:23:fb:6c:8f:cc:70:96:e1:96:67:73:36:36:74:74:00:
86:44:54:02:77:bf:b8:8e:7f:21:99:95:a3:26:8b:ea:c2:ca:
3a:21:2d:37:0d:56:31:57:85:50:1b:04:e3:b7:1e:08:53:c7:
9c:dd:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:04:50 2026 by rpki-client