Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: C3u1OXXeqEaPBWUvjJtQrak+KbRA8mv+PmxvILhvkRU=
Subject key identifier: 87:CF:C2:9B:3B:2F:3D:E2:55:E6:F8:D0:20:F8:BE:78:8B:3E:92:1D
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 019D38657E520228EDEE00F412365CDDDA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: JNVmnWdv3U8OEx9BDgmXjGN44l4.roa (hash: Uit/JT9xGXAaaHemsQzbnstd/JbudEL8hArIWWQ4/xA=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: Blbl1YTEAejoda3brEFz1mJF7LSbTjkj1EnBW5MFqaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7e:52:02:28:ed:ee:00:f4:12:36:5c:dd:da:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=87cfc29b3b2f3de255e6f8d020f8be788b3e921d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:36:90:a7:9c:5f:92:5f:b3:ad:fd:c4:8a:
8d:a5:58:50:c1:10:d8:f6:6f:53:73:fd:96:14:c9:
94:ad:cb:6d:65:8c:fb:56:cb:61:c9:91:df:a2:aa:
ca:ab:5d:18:38:98:7f:75:38:dd:ba:4c:dd:6a:b0:
64:e0:3d:38:3d:e5:a5:49:96:50:9b:1c:ef:3d:40:
09:a8:75:04:6c:65:57:4f:57:ab:f0:5c:67:eb:54:
da:e7:2f:e5:6e:82:b7:3e:7d:b5:21:68:d3:ac:dd:
45:31:0f:e1:9d:6d:1e:7c:f0:10:61:58:19:5e:da:
03:79:0c:aa:f0:b8:45:56:37:c3:9a:37:15:20:d9:
87:db:51:5f:79:11:82:c0:da:e5:10:35:2e:d9:b2:
a4:c3:52:33:7f:87:e7:ba:1a:40:a1:4d:f9:f0:ef:
38:72:18:8a:c4:7a:ef:e7:a8:f8:09:13:72:c7:3a:
bf:56:72:12:54:df:da:6c:21:87:92:e4:aa:03:92:
05:01:34:18:29:1b:48:38:ea:a2:c8:9a:b5:30:5f:
b7:11:35:40:6a:f7:fd:b4:2a:e0:9a:da:d1:f8:a7:
65:be:a3:27:50:cf:1f:db:bf:6e:21:41:57:a5:99:
b5:aa:55:2a:41:ee:27:63:e0:73:29:d7:3e:aa:e3:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:C2:9B:3B:2F:3D:E2:55:E6:F8:D0:20:F8:BE:78:8B:3E:92:1D
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b4:93:77:bd:51:38:b8:90:15:4d:01:58:c3:00:aa:01:4a:
fa:cf:0b:4a:58:8d:1a:21:26:e6:3d:73:2d:cf:e4:71:de:30:
22:9b:07:c6:68:f2:96:39:3a:eb:dc:7a:ea:5c:3f:7c:a2:93:
7b:3c:9c:4c:22:65:9f:fa:d0:a2:78:6e:1f:7e:dc:79:af:e0:
23:7f:64:58:0c:f9:dd:ee:57:d8:56:10:21:e5:5d:b8:27:92:
aa:fe:db:4c:e0:ed:f0:7d:ba:b2:2c:88:34:cb:78:25:12:d8:
e4:6c:42:d4:5e:a6:32:ee:25:26:da:31:2c:64:30:62:ea:13:
ee:93:f0:f1:8a:81:41:6d:95:46:a3:dd:94:60:79:98:b7:8e:
bd:22:79:e6:ec:4d:97:f5:95:84:6d:14:72:4e:a1:f7:d4:03:
55:dc:12:b3:9a:c4:67:b6:fb:89:cf:df:65:c1:b7:d3:da:b6:
3f:c2:f5:5f:4e:e2:28:33:68:53:6c:9a:0f:ee:29:9f:5e:55:
7b:8b:da:49:da:55:90:0e:bc:de:e6:4a:a2:07:d4:ce:cc:e6:
ce:72:d7:12:3c:18:12:13:8b:40:24:9d:a3:e9:43:58:50:27:
fc:5b:54:4b:0f:ab:a3:cc:9d:d3:5a:6c:8e:15:a6:49:09:82:
07:25:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client