Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
File: Mr-31eND3M5zBuKyXdm1b64-u3Q.mft (raw, json)
Hash identifier: VghsKUjmiwioeYuf8nT8MX4A/kRxtpbYPSAa60KblHA=
Subject key identifier: B7:79:B0:C2:E2:21:B6:3E:72:87:D6:1E:35:0A:B6:A1:2B:EA:20:F4
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F85D67D2A4ADE415F1194FC0711FF9B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:54 +0000
Manifest this update: Tue 21 Jul 2026 18:00:54 +0000
Manifest next update: Wed 22 Jul 2026 18:00:54 +0000
Files and hashes: 1: FcPMIoPmzJT6cYZN45zD03JmVpY.roa (hash: CvF65WWlzyWCGwqsSywdtwSS7TvZPtBrP2enkrOcLNg=)
2: Mr-31eND3M5zBuKyXdm1b64-u3Q.crl (hash: 34Rwvc+lCrn3XU9PtTKXcJyzRXTHzUNH+7ogPm4Wr4M=)
3: OscYL73h55Z0B61noFD4qYrrbGI.roa (hash: Ooxyna65i+JPE2g1xtm5Wvgl6Sqy4X/WFD6fBLaXenQ=)
4: VzuCMamxcLksT-c8ez03Zz3UtuU.roa (hash: RfEdIxFmEpELeLDfYcseA+CWkgdvpHjnwGWtik3G0Bg=)
5: dxz2oUPeADKtK52unfiT89vX5pQ.roa (hash: 7XE8Qjjg65fe2gUYJJrV1UUTDMRNQRh6r1HRYFcpsu4=)
6: hmsBFz-YyzRBrLpumBRqasGjH8o.roa (hash: NrbNQ2GHKlPvD7HcfJk7MKBkUFu/QcXxwsZqxbA7gWE=)
7: leOu66pCcimC66Ne7uBGrPecCwE.roa (hash: a2Bg6IsECRkTthTeRBGOiVOCxSJ1nYMpEQHgiLkn2Vg=)
8: nACgEvzk8fUHLTFU1R4PsTADQ54.roa (hash: AU8R28XoB0eNxbBjK92nnxmDyXYvP8BzgFGcUZGqGDc=)
9: uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa (hash: xUsnHAqc45PDBJI9W1Q0WWyWxZ/wh0Cqvc+48QO7JKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:7d:2a:4a:de:41:5f:11:94:fc:07:11:ff:9b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 21 18:00:54 2026 GMT
Not After : Jul 22 18:00:54 2026 GMT
Subject: CN=b779b0c2e221b63e7287d61e350ab6a12bea20f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:a9:26:24:fc:97:06:b8:45:69:64:ee:61:
85:64:40:4b:af:f1:6d:02:c7:b3:9b:2d:b3:84:96:
fc:36:cf:91:95:c5:73:39:a6:94:38:47:1b:d3:6c:
af:bd:5e:4a:f9:6a:7b:67:3c:92:3c:21:9d:9b:e4:
13:b6:69:49:44:51:8c:73:ef:76:cd:c8:4d:1b:a2:
22:48:08:88:d5:da:49:92:a3:df:1c:aa:49:9f:71:
9c:f0:3c:59:e4:80:57:65:25:94:9f:ae:49:dc:b1:
ef:ed:5d:2d:39:ba:d1:37:85:cf:d9:4a:f9:48:65:
15:2e:da:5b:32:0a:b4:09:d5:c9:de:42:e6:cb:1b:
69:2e:89:7d:23:30:ab:7f:db:e4:10:22:61:41:1d:
b7:12:b1:4d:60:8f:5b:41:4f:a0:26:3e:80:d3:78:
bb:ec:04:35:c6:dc:e0:14:bd:26:ab:e3:e6:93:7f:
f7:1c:ea:e5:54:6d:26:b6:cc:75:ee:41:9f:c6:3d:
4d:49:06:d8:73:d3:f6:15:15:cb:ee:55:e0:8a:1e:
8d:f9:3e:45:75:58:42:96:cf:81:dd:17:a8:22:b1:
d6:38:2f:5a:09:49:9e:52:d2:5f:a5:8c:e6:8b:14:
62:d6:24:ac:4d:67:e8:2a:a3:ed:e4:db:95:0c:76:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:79:B0:C2:E2:21:B6:3E:72:87:D6:1E:35:0A:B6:A1:2B:EA:20:F4
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:79:41:16:df:4e:01:55:51:a4:0e:35:10:43:a9:71:28:8c:
45:0b:4b:7f:c9:12:8d:a9:11:78:a7:bb:b2:98:8a:57:0e:7e:
03:47:08:40:58:ed:05:38:a7:41:cc:83:5e:6b:23:80:7b:e6:
4e:3d:c8:38:67:a8:8b:f2:42:70:1f:49:51:45:45:7b:39:29:
57:6d:7f:57:7a:63:95:81:55:8c:13:d4:31:95:47:79:f1:fc:
82:2e:ba:f4:eb:93:67:77:2e:00:2c:a3:09:34:33:92:7c:b6:
ea:09:54:34:45:1d:3a:1e:0c:3e:94:28:6a:dd:17:04:59:f6:
4c:00:f2:66:b5:a5:e5:e1:62:f8:45:81:5b:f8:fe:29:1b:86:
2b:c2:67:1a:d0:6b:8a:a0:e0:f9:c6:ac:2f:a1:af:95:e7:a7:
2f:80:c2:ff:99:8e:67:a3:5b:95:b5:eb:1c:01:d6:c1:03:01:
46:a1:56:ba:d1:28:d4:61:40:5f:3c:6d:06:9d:64:5d:ad:2a:
f3:94:ea:3e:29:c6:cb:dc:83:1a:f6:c8:25:b6:cf:dc:47:54:
de:a3:3d:50:ee:4f:af:73:c8:16:2c:4f:86:4f:a9:55:c2:02:
6c:e7:28:e3:b8:cd:3d:2d:f0:b5:9b:36:81:bc:b0:df:6a:90:
99:4f:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:12 2026 by rpki-client