Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier: kQFI/+cnzrIPFEfqYGVJ3BYRqBTzBRZbpWYg0aspmsg=
Subject key identifier: A2:28:01:02:49:8F:A7:DB:46:A0:3A:CD:A9:14:68:F1:6B:FB:8C:A3
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 019D3941583993DD249B1278CF272E2D6C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number: 0ABA
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: Fr6b4AVwH2MD_S5KRr6HbDmC_uM.roa (hash: mdYZJP/5rf2B6ZKd33FY0BFdNm1Mr6jeRDpydtaZ020=)
2: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: DgZzGFlvL/QnHxoNK1as7iPOJyBP63cpfxbCNHzlXuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:58:39:93:dd:24:9b:12:78:cf:27:2e:2d:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=a2280102498fa7db46a03acda91468f16bfb8ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:f1:bb:8b:e3:52:d9:a4:e8:2a:3b:01:d6:
48:ce:6d:59:d5:89:cb:31:23:5e:eb:82:41:59:83:
a7:3e:8f:e9:eb:17:99:d4:ac:95:ae:3a:02:6b:0f:
80:ea:c1:76:43:ca:63:86:05:da:ce:3e:4a:ac:1e:
db:99:a8:d9:d9:74:51:07:ac:bf:d7:f3:66:b5:9b:
9a:dd:40:9a:39:19:ed:ba:aa:e1:0e:2d:d7:c3:36:
2a:59:11:c0:be:90:06:55:8e:e5:a5:41:86:bd:78:
b0:d4:ee:dd:a7:7a:f3:f4:21:65:b3:3a:ae:6f:e6:
9a:76:c3:76:49:15:07:b8:82:b0:b0:cd:55:f7:26:
62:75:d3:83:fa:1a:ba:89:2e:1d:04:61:fb:b4:a8:
76:b5:24:d0:63:2a:b4:2f:4d:3e:5b:a2:69:01:47:
81:df:f2:e2:b8:d2:0f:6b:7a:9e:7f:ea:cc:2f:50:
4a:a2:e5:2a:a2:ec:d9:10:3a:29:08:84:25:9e:f0:
12:6e:7e:a4:8e:97:bc:8c:aa:18:7f:45:a9:06:d4:
01:03:d4:35:22:a7:62:25:ec:7a:5c:d9:ee:56:1e:
eb:1d:c5:a1:da:d7:5a:fe:e5:d1:b4:78:31:08:49:
7c:3a:4b:f1:c6:ff:5e:3b:3b:6f:5c:2a:32:00:52:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:01:02:49:8F:A7:DB:46:A0:3A:CD:A9:14:68:F1:6B:FB:8C:A3
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3f:e7:16:4f:e8:4e:dd:f6:44:21:5e:a1:d1:5f:73:d3:18:
ae:b8:0d:26:bf:64:32:cf:67:8d:94:a7:a9:96:7e:03:45:91:
92:34:8d:81:87:a3:45:0f:db:83:99:77:c3:7e:d1:43:b9:0d:
f9:18:99:2f:99:f6:03:cd:48:c3:9e:43:06:a8:be:03:86:6c:
43:2e:a7:d9:16:a3:15:b0:31:e2:6c:85:fb:5b:4c:e6:b4:cd:
47:e9:c4:bd:e1:c5:a6:f3:61:7d:9d:17:a5:6b:bc:10:64:0a:
1e:b6:da:17:9c:7f:bb:ed:c5:6a:d8:7d:b6:69:be:b1:4b:72:
9a:79:a1:64:aa:a2:40:9a:36:7e:cc:e0:15:b4:9b:6c:ec:10:
3f:b4:61:8b:80:40:45:33:48:2d:79:9c:7e:8b:50:29:18:2f:
89:48:ac:52:b2:a8:60:a6:bc:a1:27:51:ff:7b:b7:8a:5a:98:
60:b5:44:ab:82:2b:d9:80:3c:6b:96:bd:ed:00:7a:47:fa:c9:
c6:fd:11:0b:e3:b8:be:ee:8a:f2:33:0b:96:ad:d0:15:33:f0:
bc:f3:84:15:51:d7:64:2f:11:cd:3f:24:01:52:55:a3:5f:d6:
be:b2:49:f4:aa:7d:45:e6:8b:22:96:19:dc:cc:ef:b0:92:14:
ef:ee:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:51 2026 by rpki-client