Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
File: Mr-31eND3M5zBuKyXdm1b64-u3Q.mft (raw, json)
Hash identifier: ss+ymsTaMj5JRi4N695+Pt1QLm7t+2+cCGthVHyIqqc=
Subject key identifier: F5:FC:70:5F:97:B0:16:EA:50:88:51:DE:49:B2:19:D5:FB:00:2C:5E
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 01A181BE30FA8ADCB6E0925C0EA0802397F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:27 +0000
Manifest this update: Wed 28 Oct 2026 09:01:27 +0000
Manifest next update: Thu 29 Oct 2026 09:01:27 +0000
Files and hashes: 1: FcPMIoPmzJT6cYZN45zD03JmVpY.roa (hash: CvF65WWlzyWCGwqsSywdtwSS7TvZPtBrP2enkrOcLNg=)
2: Mr-31eND3M5zBuKyXdm1b64-u3Q.crl (hash: i9n3aA+JuBcgHCqlvtwm0yViKfVNLMbsWa3pEdh7+vQ=)
3: OscYL73h55Z0B61noFD4qYrrbGI.roa (hash: Ooxyna65i+JPE2g1xtm5Wvgl6Sqy4X/WFD6fBLaXenQ=)
4: VzuCMamxcLksT-c8ez03Zz3UtuU.roa (hash: RfEdIxFmEpELeLDfYcseA+CWkgdvpHjnwGWtik3G0Bg=)
5: dxz2oUPeADKtK52unfiT89vX5pQ.roa (hash: 7XE8Qjjg65fe2gUYJJrV1UUTDMRNQRh6r1HRYFcpsu4=)
6: hmsBFz-YyzRBrLpumBRqasGjH8o.roa (hash: NrbNQ2GHKlPvD7HcfJk7MKBkUFu/QcXxwsZqxbA7gWE=)
7: leOu66pCcimC66Ne7uBGrPecCwE.roa (hash: a2Bg6IsECRkTthTeRBGOiVOCxSJ1nYMpEQHgiLkn2Vg=)
8: nACgEvzk8fUHLTFU1R4PsTADQ54.roa (hash: AU8R28XoB0eNxbBjK92nnxmDyXYvP8BzgFGcUZGqGDc=)
9: uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa (hash: xUsnHAqc45PDBJI9W1Q0WWyWxZ/wh0Cqvc+48QO7JKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:30:fa:8a:dc:b6:e0:92:5c:0e:a0:80:23:97:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Oct 28 09:01:27 2026 GMT
Not After : Oct 29 09:01:27 2026 GMT
Subject: CN=f5fc705f97b016ea508851de49b219d5fb002c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:27:e0:b7:24:da:3d:25:a4:f3:04:e1:a6:
77:7e:de:6d:ef:e9:e6:c3:77:38:c5:5b:86:29:7a:
2f:19:a4:2d:38:1c:e2:53:43:a7:b4:2a:a2:c6:78:
b9:4e:70:b8:86:fb:4d:37:ed:83:41:65:a3:0c:16:
06:58:1a:d8:f3:78:07:92:a8:a3:b5:29:90:fc:e3:
89:46:9b:bc:3d:98:0f:95:8a:d7:83:8b:f1:b1:a2:
f7:04:2c:83:2d:4a:57:b5:8d:3a:e7:65:70:bc:10:
b8:35:49:70:73:4b:d0:62:33:45:f4:8b:da:98:02:
85:d7:8c:40:fe:3a:20:32:ed:56:ed:c1:6b:41:44:
08:cf:79:50:aa:d2:2d:ed:18:1d:81:ad:41:0b:ae:
d8:d5:c1:bf:39:fc:7b:de:62:8d:e5:d6:13:83:9e:
b5:e3:d3:ae:93:8a:d3:fa:97:6e:64:30:af:55:40:
d0:9d:93:1c:3f:16:1f:22:35:f9:53:dc:19:70:ac:
3e:81:30:d1:08:24:20:3f:cc:7b:e3:77:c4:d5:79:
62:bb:54:b9:44:db:d8:b9:1f:76:53:0e:90:f6:96:
18:ea:f4:af:ac:db:52:5a:ad:69:01:81:cd:5e:7a:
4d:1e:77:86:1c:4c:2f:0a:ea:a6:31:50:6a:d1:13:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:70:5F:97:B0:16:EA:50:88:51:DE:49:B2:19:D5:FB:00:2C:5E
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0f:df:0b:f4:6e:10:8e:33:cd:84:f5:4b:64:0d:eb:2f:2d:
bd:dc:ae:60:56:f0:2e:3d:b2:bc:1d:d1:6e:fc:35:7e:28:76:
77:f6:60:16:ad:54:e2:36:4b:63:9d:3a:13:f6:8b:c2:06:27:
c1:8a:a5:7f:dc:85:9f:4c:a8:2e:45:cb:52:c2:4c:5c:91:38:
fe:dd:b9:a9:e9:d6:1e:56:02:83:8f:b8:da:0c:dc:fe:4f:b2:
8c:be:54:50:ef:73:3d:87:97:71:83:a5:7a:e6:b0:11:b6:0a:
0b:c7:f6:a9:1a:05:7f:c1:3f:55:d9:52:c6:59:e3:7c:ad:18:
09:48:0c:7f:67:35:9b:3f:32:b9:ec:f5:f5:2c:0a:53:b2:31:
c2:87:a7:bf:f5:10:33:b7:4b:c9:8e:e1:8b:61:ee:cc:fd:33:
5c:fe:e5:93:e4:52:14:8a:2a:02:e9:ef:6c:b1:2e:93:fb:19:
83:09:03:0e:0e:e8:2f:91:b6:9b:a7:0d:03:45:b0:7b:0d:46:
65:7c:56:85:55:5c:80:21:bd:ff:93:3f:90:ee:98:e1:7b:c6:
e4:1a:f2:88:fa:cb:22:f8:ec:54:c3:0e:82:52:8b:a9:37:5e:
70:60:84:60:93:4f:f5:27:88:4e:81:e9:76:13:15:a1:e8:50:
b4:c0:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:23:19 2026 by rpki-client