Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier: rOEqI3pTVWV5jv6/QK9DJGCBYdZpIdRkR6+o18zRWqs=
Subject key identifier: E3:74:B2:C0:A9:84:D8:D6:6A:96:B9:CA:27:97:FB:13:7E:8E:02:91
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial: 019D224C31A58BA12FAFE62A923A8DC837C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number: 01EB
Signing time: Wed 25 Mar 2026 00:01:51 +0000
Manifest this update: Wed 25 Mar 2026 00:01:51 +0000
Manifest next update: Thu 26 Mar 2026 00:01:51 +0000
Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: yyLRHfFSRN4B1unbSqhrqDp0o/+5GOOb/aJd06k0l34=)
2: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (hash: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:4c:31:a5:8b:a1:2f:af:e6:2a:92:3a:8d:c8:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Validity
Not Before: Mar 25 00:01:51 2026 GMT
Not After : Mar 26 00:01:51 2026 GMT
Subject: CN=e374b2c0a984d8d66a96b9ca2797fb137e8e0291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:06:e2:d0:e1:30:b7:55:41:8f:d4:ba:b0:
a6:2a:41:88:79:f2:87:21:5b:e9:68:a4:8e:f0:dc:
13:25:cb:f9:5f:db:c5:ec:47:60:ae:86:7f:88:fe:
1c:35:33:1c:b1:60:67:14:86:06:04:16:cd:1c:7c:
12:98:f7:18:8b:0f:5f:04:a6:93:31:ab:56:29:f7:
73:f9:d9:55:a3:55:0e:78:4b:ff:31:dc:78:6e:aa:
36:50:34:9d:97:22:5f:2d:4d:cf:d4:09:cf:77:01:
5a:4c:ea:d8:43:d4:bd:b1:13:32:a6:84:f4:2a:90:
2f:60:8a:d6:9a:c1:f2:cd:b6:8f:30:3a:1d:8e:7e:
dd:e3:0e:41:53:9a:bb:7b:3e:76:d4:d5:a7:a8:bc:
0a:32:01:f7:f9:30:a8:9c:9d:ac:1a:5b:c0:ce:2d:
f9:04:c4:6b:cb:95:55:65:f4:43:d4:e2:97:45:1c:
42:bb:d7:3e:38:99:d4:04:78:8a:d8:ae:c2:a3:0a:
9f:33:a8:fd:4d:ab:19:7d:08:b7:5b:b3:5b:66:f1:
95:39:31:47:31:b2:e0:88:2f:15:48:97:62:01:81:
80:0c:0e:bf:b4:04:da:6c:82:cd:63:ed:2b:a6:4a:
cd:5e:9f:d0:7f:23:85:2e:67:bb:68:37:e6:ac:25:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:B2:C0:A9:84:D8:D6:6A:96:B9:CA:27:97:FB:13:7E:8E:02:91
X509v3 Authority Key Identifier:
keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:ea:ab:93:fd:f6:1a:ec:01:4f:10:c4:be:a8:b7:96:2f:
26:21:51:53:28:3b:94:38:a7:b4:ac:5f:65:2c:9d:c7:0c:cd:
43:5e:87:78:91:eb:4d:09:39:89:d6:a2:c3:14:f5:e9:d7:ab:
d5:79:46:2d:a3:31:7f:b4:cc:64:2f:d5:40:b5:09:ca:f6:e4:
95:a0:ee:c6:ee:52:08:7d:a1:9f:41:97:63:a4:e5:ef:ff:03:
a3:d8:b8:6b:54:e5:e4:68:be:3f:97:29:f6:42:3a:44:7e:31:
53:73:82:0f:91:3c:42:c8:99:b3:1c:3e:a4:1f:9e:f6:e3:c1:
69:f5:9e:ce:34:17:0f:98:82:3a:7b:7d:2b:b3:56:bd:42:88:
2b:7e:38:6b:66:98:06:c9:e5:75:42:59:b9:39:eb:c0:f7:4e:
d0:ea:07:a6:4b:91:97:c4:ee:03:dc:36:a9:f0:e2:be:6e:7f:
19:cf:da:8e:d0:bd:0d:92:ae:1b:00:9d:cc:bc:40:5c:b7:fb:
b4:cd:b2:a4:68:38:ab:72:ac:33:bb:6a:dd:c8:ce:3d:81:c5:
f5:95:c8:46:1c:eb:b5:d3:6c:06:39:db:79:0d:58:fb:26:c9:
68:7e:96:57:35:d0:46:b2:9c:77:9a:c1:b3:fe:b6:ee:2d:0c:
35:f2:71:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0iTDGli6Evr+YqkjqNyDfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMzg5ZWY0Y2E4Y2U2ODFkNmI4M2UwYmU0Yzg4NmEzYTc0
NTYwMjgwHhcNMjYwMzI1MDAwMTUxWhcNMjYwMzI2MDAwMTUxWjAzMTEwLwYDVQQD
EyhlMzc0YjJjMGE5ODRkOGQ2NmE5NmI5Y2EyNzk3ZmIxMzdlOGUwMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokcG4tDhMLdVQY/UurCmKkGIefKH
IVvpaKSO8NwTJcv5X9vF7EdgroZ/iP4cNTMcsWBnFIYGBBbNHHwSmPcYiw9fBKaT
MatWKfdz+dlVo1UOeEv/Mdx4bqo2UDSdlyJfLU3P1AnPdwFaTOrYQ9S9sRMypoT0
KpAvYIrWmsHyzbaPMDodjn7d4w5BU5q7ez521NWnqLwKMgH3+TConJ2sGlvAzi35
BMRry5VVZfRD1OKXRRxCu9c+OJnUBHiK2K7CowqfM6j9TasZfQi3W7NbZvGVOTFH
MbLgiC8VSJdiAYGADA6/tATabILNY+0rpkrNXp/QfyOFLme7aDfmrCWA5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON0ssCphNjWapa5yieX+xN+jgKRMB8GA1UdIwQY
MBaAFDE4nvTKjOaB1rg+C+TIhqOnRWAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYt
MzcxYjE2ZTUxNzkwLzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYtMzcxYjE2ZTUxNzkw
LzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0/qq5P9
9hrsAU8QxL6ot5YvJiFRUyg7lDintKxfZSydxwzNQ16HeJHrTQk5idaiwxT16der
1XlGLaMxf7TMZC/VQLUJyvbklaDuxu5SCH2hn0GXY6Tl7/8Do9i4a1Tl5Gi+P5cp
9kI6RH4xU3OCD5E8QsiZsxw+pB+e9uPBafWezjQXD5iCOnt9K7NWvUKIK344a2aY
BsnldUJZuTnrwPdO0OoHpkuRl8TuA9w2qfDivm5/Gc/ajtC9DZKuGwCdzLxAXLf7
tM2ypGg4q3KsM7tq3cjOPYHF9ZXIRhzrtdNsBjnbeQ1Y+ybJaH6WVzXQRrKcd5rB
s/627i0MNfJxGA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 11:06:43 2026 by rpki-client