Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: PXSfEVXXazrVBVNbuxEtnqMWiuxQ2fLx6O+adZnIgwA=
Subject key identifier: 98:31:FC:48:AC:3A:4A:EB:46:7B:BE:2D:27:36:D6:F7:8F:CD:F2:79
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 019CE5C8379CA6E2DB414504AAE773DAF277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 0531
Signing time: Fri 13 Mar 2026 06:00:29 +0000
Manifest this update: Fri 13 Mar 2026 06:00:29 +0000
Manifest next update: Sat 14 Mar 2026 06:00:29 +0000
Files and hashes: 1: A1JsbsxWkNXUU8QyN0AWnizgBFw.roa (hash: y6f3rKG8PBNM5DXM9nCBuq0cHLmq/7VXH19uEdctt+E=)
2: DG37KkmfJzhR-pMxX_F2qVTQ6u8.roa (hash: UJrwfm5G6WATgjPoxhF5hosi/UOg5a6mHA/+Ffdj5lw=)
3: GTprX4xnz7mXweL8nZWgsiFmIdM.roa (hash: L+IoaOm1HdM2K3vqUyYDUjQ593SQoqmD3BA2z1vtP8o=)
4: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: EaT6FAE228w9Aen1errCvsFZ350ET2tI++3BuJ7f++c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:37:9c:a6:e2:db:41:45:04:aa:e7:73:da:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Mar 13 06:00:29 2026 GMT
Not After : Mar 14 06:00:29 2026 GMT
Subject: CN=9831fc48ac3a4aeb467bbe2d2736d6f78fcdf279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:0e:24:7b:8e:a8:ab:7e:b8:c1:18:3b:e6:
3f:bc:48:5b:42:b3:00:d4:c2:42:77:cc:40:b0:e7:
5c:f5:ec:7a:75:68:c6:cf:f6:40:c6:e3:7c:f1:27:
d4:e5:d3:34:df:f8:4d:98:3d:82:26:22:ab:c6:db:
67:1c:de:cf:92:d3:33:a7:09:0b:b8:b4:09:6b:3e:
11:e8:68:bd:37:c0:b3:b4:08:f1:78:50:c5:b4:7f:
0e:3d:90:ad:10:08:98:c8:8c:79:db:57:9e:c8:84:
c2:fd:81:25:0a:9b:2c:20:76:b0:9b:7a:aa:0a:4b:
95:52:bc:d2:3e:2f:7c:10:31:b0:c1:bb:9f:ab:7f:
a4:c2:42:f0:4b:97:c3:f4:2a:b0:26:eb:b1:6f:ce:
fe:0e:a4:11:61:0c:e8:bd:e2:89:db:84:ab:5e:5c:
35:91:6e:48:c1:22:0c:45:8b:d5:32:85:19:5e:3c:
06:17:e6:28:c3:9b:3b:04:2a:d5:e4:d4:49:7f:0f:
fb:bb:53:80:8b:89:8a:f2:d5:a6:72:78:2b:3b:9a:
43:ca:5d:40:24:d2:40:69:b8:ec:c5:3e:47:ee:93:
e8:0c:8e:16:d7:76:59:45:0d:aa:28:be:2c:d5:eb:
85:3e:b0:6c:52:a4:fd:ba:65:35:ef:11:bd:b1:e3:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:FC:48:AC:3A:4A:EB:46:7B:BE:2D:27:36:D6:F7:8F:CD:F2:79
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cf:b8:9d:8e:5e:3a:d4:7d:96:ea:af:0d:95:64:08:d8:ce:
2f:2f:22:7b:31:ad:c4:d0:cc:ba:96:ff:d1:cf:ac:f7:3b:a2:
98:9f:ec:82:da:af:b9:24:c8:52:86:a3:9b:77:2e:29:1f:cb:
b3:77:86:83:d1:f1:4d:38:9d:4a:de:30:30:d6:19:9e:61:f7:
fe:df:3b:63:ec:13:3f:5a:77:74:e8:f8:70:cf:30:fe:20:99:
41:2c:9a:9a:52:28:8f:8d:71:6b:75:da:01:2a:b9:e7:42:62:
a7:68:44:3d:5e:00:6e:57:25:ff:40:06:bb:d5:88:a2:90:32:
a5:19:56:50:f8:93:64:43:90:a9:9c:03:f1:31:42:ca:54:3e:
4f:df:b3:e4:17:f1:67:06:cd:75:8d:12:8b:0a:47:09:fa:13:
42:c0:0a:11:85:c0:77:28:14:f3:55:0c:29:35:f2:b7:1c:ae:
8e:22:ec:f4:b9:63:cf:11:52:d0:b1:21:0d:8d:5f:6c:50:1f:
eb:65:5b:2f:39:f9:5e:f1:71:50:16:98:dd:ff:b8:a5:ac:6f:
84:45:0a:5c:f6:10:66:47:71:a9:5f:a5:5e:4a:fd:71:6f:7e:
6c:b4:54:2a:a2:f0:e9:11:3f:7c:09:da:f2:44:cc:9d:06:33:
b3:6f:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:31:40 2026 by rpki-client