
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: qABpO2/tuxKq/dH4X/DIR/w5QW18EVNdvpBqp9SZQvs=
Subject key identifier: 9E:6F:15:32:9E:CF:D8:AC:5E:C1:64:66:B4:4C:A5:2F:44:95:85:6F
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 019D37C051BD2C01277D01EE973515E3A0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 148E
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: a1Oos3u5pZq/47Hls7WjFt3BlPkhmzhhIZe1dIuzA9g=)
2: eHtaTNEahZIqEQ5NQhbqNOgkte8.roa (hash: MNC6u/UzUFisfjBXSx9RpaJq0ODx2gNTOpYSp6+HJcc=)
3: okRJ6Q4gK7t2XRanRtOTN5fhYCU.roa (hash: DLxr6CGIcuVxZVonr1XOEIfUiCddhAdND4Lz/E80A58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:51:bd:2c:01:27:7d:01:ee:97:35:15:e3:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=9e6f15329ecfd8ac5ec16466b44ca52f4495856f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:41:59:48:af:13:2c:04:6f:1a:49:47:3d:
e1:bc:24:10:5c:d0:32:39:f2:e8:8d:3f:c3:4b:02:
97:fe:3d:05:e9:72:59:e0:fd:f3:c3:a9:b0:2b:29:
da:bb:96:1c:ec:45:b0:d6:3b:85:4f:7d:c4:ad:fc:
50:ed:51:de:38:d6:93:87:be:7c:f0:7f:e4:d4:e3:
79:b5:e8:c8:39:2d:71:9a:bd:33:9c:b2:1e:4c:ad:
7f:a5:ab:d9:ad:1a:d6:69:8a:ef:34:ea:8f:e7:65:
4a:17:7d:f4:fa:38:eb:d3:2f:d4:f8:6b:f2:b3:c6:
fc:1c:2c:8e:2a:8a:99:80:fd:0b:0c:6c:9c:b9:46:
8e:7e:c7:af:86:f7:5d:ed:74:0b:41:53:e1:19:8a:
96:30:fb:7b:e9:56:28:a8:c9:48:75:79:d1:b7:89:
77:c4:1f:87:0d:49:3e:44:7c:78:79:c3:f1:1f:05:
a5:32:c2:8a:88:b8:74:b3:36:ee:ae:cf:fa:8b:42:
e5:87:9e:00:37:f4:ba:88:20:02:37:14:60:cf:97:
3b:ca:09:10:d6:93:14:90:e2:5f:f2:52:ec:fd:a1:
cc:7c:e8:60:a6:93:cb:ca:e2:f8:8a:f3:e2:8c:e6:
7d:16:2e:c7:11:8c:ed:94:01:3f:c2:56:96:9b:9a:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:15:32:9E:CF:D8:AC:5E:C1:64:66:B4:4C:A5:2F:44:95:85:6F
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c0:65:87:f1:aa:ba:99:3f:3c:a4:a4:90:a6:02:93:b0:3d:
c6:1c:63:e6:6f:7a:8a:69:d4:33:6c:ba:fd:c3:8a:66:aa:bd:
d1:ae:8e:54:a0:ac:0f:89:41:ee:97:c1:79:26:13:6b:0a:ac:
7e:dd:91:e3:fa:09:be:18:39:03:cc:ba:fd:df:26:08:7e:71:
bb:37:62:5e:37:df:61:95:1f:09:8e:62:62:0a:5a:33:84:dc:
18:de:a2:a8:51:5a:71:32:61:0c:1f:5d:c1:bf:3e:e3:b0:96:
b8:97:77:dd:6e:75:d4:c9:82:61:4a:7d:66:05:86:c0:63:69:
c9:85:4a:b6:2f:37:2e:02:9b:b4:62:05:f3:c1:4f:e8:c6:ab:
59:77:d0:c4:40:8f:2a:38:19:e8:d5:e3:27:14:c5:eb:31:3f:
4c:c6:2b:07:61:4a:02:81:45:51:8f:de:6e:ad:b0:54:46:1b:
08:63:17:f4:4b:56:6f:64:75:8f:3d:19:87:8c:94:a5:88:99:
74:a3:ea:cb:a7:e8:93:c7:a5:6c:bc:e2:70:1a:f6:74:ed:4c:
0d:4f:54:3d:6d:46:96:bc:6d:07:72:c5:b7:db:65:c5:9d:7a:
d3:69:c7:13:01:b9:cb:e7:8c:88:94:21:13:c5:a9:ff:b5:0c:
e7:d6:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:31 2026 by rpki-client