Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
File: MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json)
Hash identifier: VkgIb+kOpG1n71v3WSh5dNtP1/4LsyfcMMWkJl+7elQ=
Subject key identifier: F7:A8:85:59:AA:B6:36:C0:39:C9:81:3F:B6:23:0A:17:5D:08:4A:01
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 019D37F7A1058906B598BA396C3268C0D5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
Manifest number: 0FEB
Signing time: Sun 29 Mar 2026 05:01:08 +0000
Manifest this update: Sun 29 Mar 2026 05:01:08 +0000
Manifest next update: Mon 30 Mar 2026 05:01:08 +0000
Files and hashes: 1: 3xT874NnwQkkgc4z33baWzJf_xw.roa (hash: 0vrpkogPMBnepeiXnpaSIgsSChUa1yFutMzhwiTjs/0=)
2: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: 8jTfol7Jczz/qhNqYB1/ycJ21Fmvp4L4A0VE2nkLeIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:a1:05:89:06:b5:98:ba:39:6c:32:68:c0:d5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Mar 29 05:01:08 2026 GMT
Not After : Mar 30 05:01:08 2026 GMT
Subject: CN=f7a88559aab636c039c9813fb6230a175d084a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:06:94:2f:ad:de:e8:af:a8:7f:73:bd:b7:
13:c2:08:1a:78:c8:d4:cf:b4:48:93:6f:bf:1e:51:
ae:db:0b:10:0f:9d:3b:a1:ef:f7:fa:2b:50:2b:48:
3d:3d:09:9e:60:3f:32:5b:4e:de:d1:14:99:b6:49:
2a:af:14:f3:4b:a7:58:27:88:fc:2f:95:e1:11:81:
9e:8f:34:a0:7b:59:5c:2a:1a:9d:c0:a8:99:89:56:
f2:66:2a:1d:04:6f:d6:07:27:8f:f1:90:fc:96:b2:
00:48:9c:53:c9:d7:ad:c2:8b:1e:68:c2:37:d8:b7:
92:82:5c:70:98:d9:80:93:56:e9:b7:38:ab:72:fd:
c0:64:49:3a:d8:e8:a4:ba:ef:75:a1:e3:d2:c1:86:
9a:43:91:a8:7a:1f:e8:84:08:55:a7:d9:65:8b:e3:
5b:9c:72:5b:95:2c:c1:b2:14:f7:25:d2:16:ea:2a:
d5:9f:2c:9c:18:db:b1:b3:c0:3d:b2:c2:14:06:af:
7c:c2:e8:05:8d:b7:6f:58:cd:93:bd:4d:43:9e:ee:
a9:7c:7f:12:8c:cb:2b:71:5c:a8:e8:d1:38:42:51:
9a:e1:a9:d9:68:3b:aa:3d:93:37:ac:43:71:3e:5d:
08:52:cf:c9:ac:b0:1b:76:1c:3f:bf:b2:16:95:d7:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:85:59:AA:B6:36:C0:39:C9:81:3F:B6:23:0A:17:5D:08:4A:01
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:56:17:af:5e:c7:2a:3f:86:3a:fb:c3:02:ab:aa:43:16:44:
bd:af:55:b5:ae:58:a6:80:9a:a2:d5:1b:cb:a1:f1:ee:30:b0:
30:17:34:c3:58:b3:9c:ef:0e:2d:23:90:9a:4d:6b:4b:94:95:
ec:87:35:c0:8c:44:0b:f8:16:23:37:0a:28:fd:02:85:ee:fc:
9c:ad:24:f7:3f:45:8c:04:1f:d5:7b:43:c1:da:d4:53:01:a1:
5c:50:f9:37:f7:48:25:24:42:91:23:cf:91:2e:d6:41:96:5d:
78:a3:d2:c0:bf:9d:5b:d2:3f:eb:20:6d:76:ab:29:d2:3c:7b:
b9:dd:2e:3d:55:03:6f:97:ba:af:f2:98:c1:ec:75:68:8a:23:
66:e0:c7:64:3f:8e:6e:ed:31:fc:08:fc:31:31:c0:15:80:1c:
b0:ba:1e:aa:84:0f:24:61:ba:5a:7e:61:bb:f1:32:2c:72:18:
ca:53:1b:b6:48:71:e8:b7:54:06:2a:05:ac:93:b9:27:27:ca:
44:76:13:c1:38:89:44:cc:2f:60:2c:31:97:fd:84:93:5d:2a:
01:32:9e:02:aa:5d:11:7e:9d:69:d4:9e:7b:0b:8e:a0:34:3e:
0f:56:f7:1b:ee:fb:7f:07:1f:a2:ec:1b:79:9d:cf:0b:2f:d5:
08:41:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:32 2026 by rpki-client