Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: rl9xmeIYTSXXH+2MdUHKgWoeoxhAMepf5zLKgzls9SE=
Subject key identifier: A6:1F:A7:66:10:89:39:E9:14:DB:9E:7B:58:3B:A1:87:B3:5F:EB:10
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019E284ABDEC1D7D16B2FEC046C1D5BB2FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: 01A8
Signing time: Thu 14 May 2026 21:00:47 +0000
Manifest this update: Thu 14 May 2026 21:00:47 +0000
Manifest next update: Fri 15 May 2026 21:00:47 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: QTvtYfIDnBeIMgnMJEX7R4wwZ3OtDWyccpcp+jsEjwI=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:bd:ec:1d:7d:16:b2:fe:c0:46:c1:d5:bb:2f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: May 14 21:00:47 2026 GMT
Not After : May 15 21:00:47 2026 GMT
Subject: CN=a61fa766108939e914db9e7b583ba187b35feb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:a9:86:ee:b4:45:39:7a:b8:6c:4c:01:b5:
fe:eb:01:46:0d:a8:39:3f:05:e9:c4:f0:b5:3d:bb:
c1:1b:ab:0b:7d:7b:c7:34:c5:1d:20:e6:ec:f4:6a:
ca:c3:89:01:23:e9:cb:14:ac:bd:21:11:b0:ed:d6:
52:3a:e0:5c:f4:c8:ba:bf:b3:2a:a7:f6:71:c2:1b:
99:dd:78:01:39:c2:4f:bd:4c:9f:8d:d1:0c:9d:7f:
87:e2:92:52:bc:e8:c7:23:31:ad:9d:79:c9:59:bd:
06:db:f1:8a:83:c5:97:5e:42:ad:ec:ab:eb:05:69:
e1:44:24:b3:24:cd:75:86:68:f7:16:25:e6:85:60:
a1:dd:58:74:f6:5b:a3:86:6b:3d:57:ef:10:3f:ce:
bc:f1:70:2e:b0:01:f0:16:38:9a:49:1a:9e:82:b5:
19:8c:5f:d3:0c:4f:ed:66:15:60:a8:4f:b2:69:c5:
55:09:9c:20:27:32:33:f0:39:af:76:34:2c:0e:25:
66:39:4e:9d:4d:e5:71:79:e2:a3:a3:53:57:fc:90:
02:d8:ef:a7:62:23:42:a7:03:60:d4:02:28:35:2b:
d8:1d:42:35:12:e3:82:9c:9a:b2:20:14:e4:12:b1:
33:60:ad:7c:a5:a1:d8:e3:b2:27:3b:76:3f:df:d5:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:A7:66:10:89:39:E9:14:DB:9E:7B:58:3B:A1:87:B3:5F:EB:10
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:bf:e1:6f:60:c7:0c:ed:17:10:f5:ab:d8:a7:77:09:d3:
f2:00:95:8e:7b:8b:c4:3e:32:70:ff:9d:f4:b2:ff:50:9d:e4:
32:87:dc:08:0c:3c:66:1a:a3:1b:d8:db:94:ce:5e:80:e8:a2:
0f:55:dd:5d:10:55:e7:e4:f5:23:3b:6f:7c:ab:8d:26:8b:ec:
d7:52:17:5f:70:87:a8:eb:99:2e:3e:15:bb:88:5d:5d:5d:b6:
84:bc:32:ed:e9:0c:83:5c:4f:c8:1c:d2:31:87:e6:03:ae:ca:
7b:01:5c:aa:b1:8c:08:dc:06:86:91:85:9c:de:b8:ba:6a:74:
67:0d:2c:54:7d:5d:ce:0c:99:0a:3b:34:16:b2:3c:3f:f5:ff:
9c:43:3e:5e:ac:05:ef:f6:b0:38:da:c8:9b:85:96:79:2f:77:
a6:b3:f7:5e:e4:f7:39:97:80:c7:b1:a8:51:ca:6b:bb:97:88:
67:97:f5:3c:b6:22:12:5f:33:67:a1:01:31:2e:43:cf:ab:8f:
e0:1d:fe:61:7c:9f:b8:ca:d7:67:42:4f:b8:25:11:1b:65:ac:
ca:58:9a:55:bf:8d:c3:1c:75:35:89:06:c4:03:1c:9d:22:59:
a2:b6:60:19:7f:03:03:cd:cc:4c:e3:35:f7:02:db:65:6f:79:
26:9d:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:16 2026 by rpki-client