Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: 2V59Dv0N7OflFDPkhrR248X+cEFzMJJakGLsgVxljQw=
Subject key identifier: D4:CE:81:B8:BA:5F:F0:21:26:A7:47:AB:7B:7D:36:70:ED:F0:9A:50
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019D38D33CDB79A974D1FD6F8D974B0FA445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: 012C
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: mDL+1wSP2VKd4QpFkX4JYURhatAK+e7TGsKiEh6XFuc=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3c:db:79:a9:74:d1:fd:6f:8d:97:4b:0f:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=d4ce81b8ba5ff02126a747ab7b7d3670edf09a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:e4:2d:6a:ae:18:56:18:ff:48:de:c6:99:
2e:c9:80:53:7b:df:84:e6:3d:56:0d:1c:e9:d0:bd:
0f:5e:a3:f0:9c:76:c9:a7:63:87:d8:b1:f4:31:43:
0e:b7:14:8f:c8:f8:20:a9:0a:9f:a1:dd:2f:2c:86:
79:71:79:5e:a0:1a:7d:ee:8b:d9:a3:82:a2:16:8b:
04:7e:b9:60:54:0d:19:0c:fc:d5:50:8a:6d:3b:79:
65:31:ed:4d:a5:d3:f0:ec:89:ef:a3:3d:c1:8f:e0:
69:86:55:2d:c0:aa:c9:b3:dd:da:42:5f:b0:ca:b3:
3e:96:7d:b4:b8:19:94:c4:b0:9b:3d:ed:b9:d2:d1:
16:02:db:89:c6:82:c8:cd:72:80:c7:3c:37:aa:52:
66:65:09:95:1a:42:28:ee:57:a9:1d:3a:92:66:a9:
33:22:c4:63:26:8a:f0:29:0d:9e:24:1a:ca:1a:f5:
91:56:96:a4:75:97:96:85:c0:b9:fc:9e:b4:f3:f6:
47:9d:86:b4:ff:cf:31:40:e2:cc:75:46:e8:c5:a3:
8a:c7:a8:64:cf:c5:d8:60:9a:2e:3c:c1:df:6a:9b:
84:f6:1e:c8:11:4c:df:d4:c6:e7:0b:95:c6:76:97:
8f:95:ed:b7:6c:ea:2e:d7:09:8d:da:4a:fe:24:2f:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:81:B8:BA:5F:F0:21:26:A7:47:AB:7B:7D:36:70:ED:F0:9A:50
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:9f:9f:be:a6:dd:67:e5:09:44:1f:e2:7d:7b:1d:e4:17:
aa:f7:5b:a6:8d:a8:b1:45:46:6a:60:9f:94:5f:1c:cc:cf:1f:
79:0f:32:28:96:75:79:fe:16:bb:a5:a2:88:86:4a:bf:7c:9d:
26:35:03:8c:af:a3:8c:51:bf:7a:8c:c6:bf:68:30:30:89:c3:
0f:93:15:21:38:7c:a0:2c:9c:e6:d3:85:e8:21:b7:cb:f4:7c:
6d:47:75:7f:cf:28:d7:1c:5f:00:59:eb:70:68:e2:e2:34:b9:
0d:35:6a:e3:9c:37:cb:0a:85:22:7a:5a:84:7f:db:26:be:21:
ae:9b:e8:31:d8:84:72:65:5e:5b:d4:7c:17:41:55:c4:95:3d:
8d:9b:6e:a1:68:cc:22:c3:34:4b:06:a3:8b:e2:ce:cc:96:99:
ea:c6:ee:ff:d1:cf:2e:90:11:42:b6:2b:04:25:eb:72:40:64:
ce:c5:69:02:bb:c3:64:6e:12:7c:c9:bd:b9:b4:fe:98:23:0d:
7e:99:a5:b6:41:c5:f2:41:fd:f5:82:21:f0:52:4a:f2:5f:37:
4a:e9:d7:88:58:75:d3:f1:29:25:d5:79:df:c7:45:51:75:51:
68:af:83:33:c6:4b:e6:b8:0f:96:1c:10:a7:54:b8:bc:5b:54:
f6:51:17:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040zzbeal00f1vjZdLD6RFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDMxZWNjNTRiOTBlOWRmZjI0NDJiOTA1MWFhOTU2OGYz
MDZlNzgwHhcNMjYwMzI5MDkwMTAwWhcNMjYwMzMwMDkwMTAwWjAzMTEwLwYDVQQD
EyhkNGNlODFiOGJhNWZmMDIxMjZhNzQ3YWI3YjdkMzY3MGVkZjA5YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHjkLWquGFYY/0jexpkuyYBTe9+E
5j1WDRzp0L0PXqPwnHbJp2OH2LH0MUMOtxSPyPggqQqfod0vLIZ5cXleoBp97ovZ
o4KiFosEfrlgVA0ZDPzVUIptO3llMe1NpdPw7Invoz3Bj+BphlUtwKrJs93aQl+w
yrM+ln20uBmUxLCbPe250tEWAtuJxoLIzXKAxzw3qlJmZQmVGkIo7lepHTqSZqkz
IsRjJorwKQ2eJBrKGvWRVpakdZeWhcC5/J608/ZHnYa0/88xQOLMdUboxaOKx6hk
z8XYYJouPMHfapuE9h7IEUzf1MbnC5XGdpePle23bOou1wmN2kr+JC+ItwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTOgbi6X/AhJqdHq3t9NnDt8JpQMB8GA1UdIwQY
MBaAFDHTHsxUuQ6d/yRCuQUaqVaPMG54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0Nzct
MGRhODdiNTFmZmFjLzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0NzctMGRhODdiNTFmZmFj
LzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6ufn76m
3WflCUQf4n17HeQXqvdbpo2osUVGamCflF8czM8feQ8yKJZ1ef4Wu6WiiIZKv3yd
JjUDjK+jjFG/eozGv2gwMInDD5MVITh8oCyc5tOF6CG3y/R8bUd1f88o1xxfAFnr
cGji4jS5DTVq45w3ywqFInpahH/bJr4hrpvoMdiEcmVeW9R8F0FVxJU9jZtuoWjM
IsM0Swaji+LOzJaZ6sbu/9HPLpARQrYrBCXrckBkzsVpArvDZG4SfMm9ubT+mCMN
fpmltkHF8kH99YIh8FJK8l83SunXiFh10/EpJdV538dFUXVRaK+DM8ZL5rgPlhwQ
p1S4vFtU9lEX6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:47 2026 by rpki-client