Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: 45MDz1Je/fL+PsR8pov3CUmtlkj6osF9Pa0U7kuzqUk=
Subject key identifier: 15:2F:F9:FE:4E:02:9E:B7:47:D4:D1:E3:AE:98:71:F7:A7:2A:28:F3
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019F11F82D8B2810123F5B7251535FACD46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: 0221
Signing time: Mon 29 Jun 2026 06:01:44 +0000
Manifest this update: Mon 29 Jun 2026 06:01:44 +0000
Manifest next update: Tue 30 Jun 2026 06:01:44 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: TUjC10XUrlP/oo+4PxuJYJahVeCbhpGuE7PE1/marRg=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:2d:8b:28:10:12:3f:5b:72:51:53:5f:ac:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: Jun 29 06:01:44 2026 GMT
Not After : Jun 30 06:01:44 2026 GMT
Subject: CN=152ff9fe4e029eb747d4d1e3ae9871f7a72a28f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:e6:7d:b3:1e:f3:49:64:df:41:df:2f:d3:
09:95:14:e9:e5:29:8f:d4:81:2e:1c:81:36:34:c4:
7a:40:7d:f8:db:3e:f8:dc:83:6c:81:5d:af:0c:f3:
33:27:ab:70:af:ba:67:37:77:cf:f2:93:29:0d:b6:
29:dd:6f:bd:6c:e4:17:4c:52:9d:76:0a:78:39:c6:
f2:5a:9b:86:69:1d:ac:43:92:dd:99:be:07:26:6c:
f0:84:e0:b7:58:46:70:79:fa:4a:72:a0:99:77:f0:
ce:87:60:d9:50:99:7d:2f:30:b0:e8:d5:c4:19:ed:
07:3b:07:6a:e1:dd:3a:bb:86:b1:53:e9:ba:d9:68:
11:ec:df:3a:51:32:40:de:f1:c5:6e:02:b2:f5:85:
d7:2f:12:c9:ef:16:f3:79:99:0e:bb:4f:79:78:0d:
66:f3:78:8e:6c:05:11:92:fb:f7:49:b0:af:8c:8e:
f2:0f:fe:33:4d:c9:9d:dc:43:67:72:92:8d:4b:82:
c3:09:13:c5:9a:f5:4f:8b:b9:51:72:ab:55:2c:f6:
72:db:76:4c:20:4a:90:53:62:6c:95:31:2b:5a:a7:
a6:bd:d8:74:d0:7a:f9:1c:e1:89:a2:5c:48:94:a8:
9c:7a:e2:9d:c8:67:cb:0a:e0:00:ec:71:23:bc:67:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:F9:FE:4E:02:9E:B7:47:D4:D1:E3:AE:98:71:F7:A7:2A:28:F3
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f9:6d:68:12:37:2d:2c:95:2c:a3:fc:55:d1:43:05:79:db:
ce:84:e7:1d:72:d4:cc:4b:dc:92:76:96:21:58:b0:a6:20:8a:
94:f6:2d:e9:5e:80:5b:5f:13:d9:ba:30:5c:32:d2:20:9e:3f:
1a:40:3a:3b:20:3b:42:01:38:8f:8f:7b:69:bd:7e:b2:15:e7:
34:b3:ac:3f:91:2d:fb:26:90:53:a4:25:65:6c:a5:50:14:d7:
41:92:66:b1:43:58:63:79:75:a2:77:46:14:3c:46:64:5c:bd:
30:8a:fa:f3:5a:d7:07:fa:77:ce:57:18:8b:13:9a:db:70:0d:
ff:d7:a7:ce:8f:32:ab:45:08:17:56:03:a9:12:90:03:59:a2:
0b:02:d9:e3:08:64:4b:5e:41:56:18:97:6f:f1:b0:84:fe:11:
c5:6c:5b:da:f7:c6:e3:0f:72:b9:74:1d:21:bf:5a:48:de:99:
ca:b4:05:24:04:c0:59:93:dd:85:5a:b6:55:59:da:2d:1d:da:
c6:2e:ee:48:ad:cc:b8:07:ce:1f:de:93:65:a1:45:b4:de:44:
0e:3e:d2:f0:e1:8e:ad:4d:fb:00:cf:a7:ad:c5:6b:96:cd:2a:
8c:5f:18:78:ba:07:2d:23:fa:93:b8:21:13:6f:7c:9b:47:ed:
c2:2e:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:54 2026 by rpki-client