Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File: MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier: 5oXgb/BeFIAAjt96bLDY3RLrSPEMf3NhIjmYbkq2Jn4=
Subject key identifier: 2F:17:4E:0E:DD:52:C5:08:61:21:B3:C1:33:5F:F6:F1:38:E3:A5:5A
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 019D39409ED462947442595EB7B7CC723169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: cutK76Gpn3aVgB+d77+giTvXohPeftZFyarm+x7sGrA=)
2: swM80mHJjK6IPnE-XxaI02sqJn4.roa (hash: JzcS3m104wsB9A+sIx9H6xt+jsfYiXqfNRN48uMkikc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9e:d4:62:94:74:42:59:5e:b7:b7:cc:72:31:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=2f174e0edd52c5086121b3c1335ff6f138e3a55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:a6:92:c5:a5:3a:dd:10:b4:9f:43:78:53:
c3:bf:5d:36:e0:c8:50:ef:16:3f:8b:aa:5b:9e:1c:
2b:53:1b:98:d0:b3:55:08:44:69:fc:1e:58:dd:da:
a0:29:f8:26:9c:58:b5:86:2e:73:e0:67:2f:89:84:
7e:7b:3a:a0:a7:1d:6d:29:4d:b8:81:a5:4b:37:a1:
4d:b8:b7:58:8a:c0:43:5d:e4:1d:9e:8f:1a:cb:c5:
84:2d:a0:33:f4:7a:82:8b:65:3c:b0:cf:05:39:e1:
2d:f3:0b:b1:40:7b:0e:7d:e4:c6:d2:b8:29:0e:d1:
8e:bb:0a:42:ed:1c:20:24:e6:0b:8d:1f:71:20:b2:
fa:9a:ce:2f:76:8b:00:07:5b:9d:4c:58:8e:68:92:
da:d2:c4:19:9c:84:e2:fb:da:13:89:8f:52:12:01:
cb:7a:b4:03:d7:6f:24:f3:ed:d4:4c:27:0b:04:46:
2d:95:1f:df:2f:d7:ec:ab:16:1e:35:64:6e:fe:11:
86:76:8b:d5:04:98:8a:98:70:fc:78:3f:ca:14:54:
34:80:3d:53:a7:89:b3:a4:f8:4c:c2:f3:41:77:89:
f0:d9:d9:79:1e:b9:f9:74:13:81:0d:e1:cf:ca:09:
da:d7:b2:b3:3c:34:1b:66:1c:06:34:fd:fa:26:ae:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:17:4E:0E:DD:52:C5:08:61:21:B3:C1:33:5F:F6:F1:38:E3:A5:5A
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:52:d9:ef:ac:de:13:f2:24:c1:ea:0b:23:4d:a8:05:c7:
2e:74:2a:d1:b6:10:9e:0a:c0:7b:b5:e2:3a:f0:49:22:50:77:
44:ec:85:3d:2e:52:5b:ea:61:e4:6e:f7:d3:8e:c7:cb:b9:0f:
9b:58:db:aa:12:89:54:bd:a2:87:33:fa:19:8c:f4:62:69:6f:
15:cc:61:f9:09:01:86:0e:1f:54:df:29:c0:b0:6d:72:3d:6a:
c5:49:20:b9:2a:e6:94:75:d8:18:55:89:ae:95:2d:78:62:80:
de:52:5b:45:e4:b8:c7:89:e5:07:83:9f:ff:87:9a:1b:43:18:
fb:fb:7b:e2:58:b5:d7:12:1c:a7:0f:96:b7:2f:9b:48:0b:a2:
2d:3a:04:92:31:0b:cf:ef:c3:93:35:43:0f:64:5d:57:bc:cd:
63:31:57:15:a8:16:2f:21:61:9a:86:30:ec:4a:e5:11:65:9d:
a5:f0:43:1e:64:13:56:8b:cf:b4:60:5d:c3:ee:3d:68:b9:46:
64:6a:a3:23:d7:88:e6:6d:78:eb:d4:72:7d:2b:0d:e9:7a:34:
60:9d:65:32:4e:82:22:10:49:59:05:3a:b2:95:bd:6e:d0:eb:
c4:48:5b:b9:ae:6d:36:2a:2f:49:0c:13:2f:fe:9f:e0:82:07:
0f:c6:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:51 2026 by rpki-client