Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File: MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier: b7aifxfJSfR+/N22Y5JVvVOr6NyWB4qzXRk+6iZ265I=
Subject key identifier: 5A:40:85:58:FA:37:96:40:DA:75:1A:80:44:F8:A2:82:9D:54:2E:8A
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 019D062FA0D68BA028D0633849ACC49CD82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number: 10FF
Signing time: Thu 19 Mar 2026 13:01:17 +0000
Manifest this update: Thu 19 Mar 2026 13:01:17 +0000
Manifest next update: Fri 20 Mar 2026 13:01:17 +0000
Files and hashes: 1: 0PROOXHWtrqTshebWInvLwz5dVE.roa (hash: kuqhwuodobpmINYueeYw21Gf/m1l+ZCaG7GCFJgXBC4=)
2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: /JDwHOL2xko++g1T3PRx22TPkOCxWthULBgR4aLXEYw=)
3: Pky97jBwdyUgYzg1_AI-qFYMT1o.roa (hash: nbaHUKHv0TZLnVM+2128xVj9F0Kn5xH6nruz/6y8MI8=)
4: nge1u5LMthh69_mO6tYKWBjnSBE.roa (hash: qNcn7K4jDXvzhu4do4cfBL/ruII09KDI1rZLPsg+Hug=)
5: yCDwwVBWdVeCJB3paV68yEm0bEQ.roa (hash: jb11BCbq+94ZB4w8Ms7QY8fhTLtofYi5pYcgB+s+Sf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:2f:a0:d6:8b:a0:28:d0:63:38:49:ac:c4:9c:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Mar 19 13:01:17 2026 GMT
Not After : Mar 20 13:01:17 2026 GMT
Subject: CN=5a408558fa379640da751a8044f8a2829d542e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:3e:2a:18:32:62:97:46:97:dd:66:a9:7b:
59:72:d0:fc:ba:e9:2c:6b:93:c9:5d:0b:fb:5d:2c:
49:8f:d2:a0:20:f4:0b:d8:4a:6b:84:cd:f4:f5:8b:
b4:c4:88:5c:4d:d7:85:14:19:50:31:8d:a1:47:4e:
be:f2:7a:0a:28:e9:b5:bb:45:4a:26:d6:47:49:ef:
4b:c9:10:8e:f2:79:1a:c6:86:e0:f8:50:76:37:9f:
c6:e8:84:b3:18:3f:28:f8:d5:85:95:12:a3:4a:56:
50:15:bd:d7:e2:67:32:e1:6b:0f:8e:33:1b:79:c7:
4e:32:3c:9b:66:fd:0f:a2:46:b8:6a:8f:03:e3:c1:
98:f8:fe:ea:09:6c:6c:4a:26:95:6e:76:52:44:f1:
0e:e0:d7:ad:40:5c:60:2a:fc:de:52:33:04:5c:d3:
2b:f4:73:a1:da:9d:44:2c:88:fd:16:8b:d3:45:79:
3c:c5:db:5c:11:bc:8b:32:d6:7e:2b:09:b5:17:2c:
3e:6c:8e:3a:7a:c8:c3:55:57:1d:46:4d:6d:83:f4:
d4:38:a4:3d:9e:82:9c:72:1e:d8:51:97:ae:27:48:
32:ee:89:1d:a0:79:93:b2:84:3b:82:b0:74:00:e7:
0e:63:f9:eb:42:24:20:69:3c:25:f4:29:19:56:27:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:85:58:FA:37:96:40:DA:75:1A:80:44:F8:A2:82:9D:54:2E:8A
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b5:6e:dd:76:d3:a2:ed:bf:02:cd:e2:b4:d3:d2:15:5e:7f:
64:77:7d:23:2d:ba:2a:83:f0:3c:4d:8e:5d:41:24:dc:6f:c3:
57:99:f3:23:ed:c3:4d:61:fd:c2:a6:cf:67:7c:ce:25:e5:19:
58:80:41:0c:c4:c7:8b:88:0c:22:82:91:23:91:7f:f8:e7:bf:
f4:48:50:83:a4:46:7c:9b:ad:e1:58:15:e9:e7:c7:40:58:bf:
68:d7:1c:a7:f2:bd:d2:b4:dd:8e:56:80:41:9d:17:7e:f3:68:
e5:ad:5d:7b:f7:ab:5b:64:cf:5a:e9:00:07:ef:0a:e7:0e:d0:
08:92:da:81:65:96:7d:55:d4:bb:3b:36:e4:c7:b7:e7:b4:f8:
cc:33:90:43:4b:5c:4b:22:ad:e2:f8:97:c0:3d:e9:17:9a:53:
93:43:8e:32:20:02:94:a0:21:2b:c9:3c:0a:53:7a:d2:94:15:
70:ad:cf:18:f6:fc:e8:16:12:fa:5f:f8:b2:4e:81:22:41:bd:
a7:b6:bd:f7:bf:98:3e:6d:18:ee:aa:63:2d:94:b5:31:99:dd:
c8:df:b0:ae:9a:a3:86:b7:4d:b3:9f:b1:38:12:b5:7e:ae:0a:
de:45:8e:73:56:ce:90:97:b7:07:bd:53:f1:78:bd:48:19:47:
f6:dc:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 20:25:47 2026 by rpki-client