Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: /XyQFk9nCu9IM74zEzRkrZDP5DkpK/o5LtzrfFuuVNg=
Subject key identifier: 91:E7:2C:23:1C:79:7E:7B:C2:9B:8C:64:5F:82:C7:FB:1B:61:DA:19
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019FAAF51BEF46060B21E49736F12AE1F433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0AA9
Signing time: Tue 28 Jul 2026 23:00:17 +0000
Manifest this update: Tue 28 Jul 2026 23:00:17 +0000
Manifest next update: Wed 29 Jul 2026 23:00:17 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: ATaO/4CrmDxc656bOiCjI2NuSugRyedLhaGgzFT/1hM=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:1b:ef:46:06:0b:21:e4:97:36:f1:2a:e1:f4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jul 28 23:00:17 2026 GMT
Not After : Jul 29 23:00:17 2026 GMT
Subject: CN=91e72c231c797e7bc29b8c645f82c7fb1b61da19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:1c:1f:d6:16:e8:7f:6d:fc:6f:ef:a4:e2:
86:bb:5c:53:5d:58:5d:05:74:a9:5b:c4:95:9c:4e:
80:d1:00:4a:1f:d8:5e:9a:4b:34:0b:f5:bb:d4:f7:
59:d4:32:c3:b8:5a:52:a7:26:35:06:c2:60:1b:89:
7c:5a:b7:ff:bc:0a:da:f4:cb:79:97:bc:74:92:77:
55:bb:9d:9d:6c:c7:9f:7f:88:d4:28:a6:93:c1:55:
5c:34:21:cb:6d:4f:ba:17:23:e4:10:9f:7d:34:a8:
06:58:67:43:7d:1d:03:44:2e:87:ed:04:48:45:fc:
7f:5c:da:10:2b:46:19:b3:96:10:5d:e4:84:d1:28:
9a:df:b7:82:76:e1:e5:3b:32:76:72:6e:d3:32:42:
e6:38:c7:35:c1:7c:64:b8:45:6f:59:2e:1a:70:a2:
b6:70:26:30:c4:ae:7f:ad:d8:01:be:f0:dc:af:cc:
f7:d1:8a:40:05:30:7b:88:76:b5:c4:f6:ec:cb:90:
8c:00:01:d1:dd:05:0c:3b:f6:17:1e:90:dc:ab:df:
f3:25:9c:45:f3:53:d1:e1:4e:81:25:d4:95:97:2d:
67:bf:e4:ac:39:e5:a9:a3:ee:0e:8c:7a:2d:26:f0:
81:20:07:cb:a2:55:ad:fa:f1:9e:ba:94:0b:9a:af:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:2C:23:1C:79:7E:7B:C2:9B:8C:64:5F:82:C7:FB:1B:61:DA:19
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:06:47:cc:15:c2:25:8a:07:c8:59:19:ae:3e:6a:a3:6c:
d9:a0:d3:b3:dc:b4:7a:5d:f9:aa:f8:78:a9:bb:06:4c:9a:3a:
8c:d9:4c:c2:e6:2c:47:c8:d2:37:f1:4f:f3:ad:6f:9d:83:4f:
95:87:5e:03:b3:50:f3:7b:a2:dd:86:d7:12:59:ee:bd:91:3c:
7f:27:f6:b1:81:2d:bb:16:40:af:e9:de:3a:1c:59:3b:05:6a:
38:f4:b5:3f:f7:18:71:b0:87:b3:ee:c8:56:bb:49:54:cd:fd:
cc:1a:f9:db:e4:77:31:53:8b:1d:6c:fb:ec:e3:dc:91:68:0e:
61:27:3f:41:8a:13:d7:7f:6f:fe:94:18:fc:6a:70:2c:e9:df:
37:97:8c:49:c7:40:bc:6e:07:a9:da:c4:a7:24:02:56:e0:a0:
e8:70:d8:c6:64:ab:70:86:70:3d:bc:69:1c:07:a5:0c:30:6e:
5a:9e:e3:13:fa:d0:cb:5f:d4:ea:ce:5a:2e:12:6b:c3:8e:f8:
b3:5e:38:e0:9d:45:e0:eb:a9:26:56:0d:1f:fd:43:1e:ab:9b:
41:47:11:50:e3:48:30:1d:71:9e:5a:45:3f:84:4e:1a:09:4b:
58:2d:e6:c3:30:ae:14:da:90:af:b3:b1:45:02:32:6d:2e:2d:
13:c8:ee:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9RvvRgYLIeSXNvEq4fQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz
MTRlMzYwHhcNMjYwNzI4MjMwMDE3WhcNMjYwNzI5MjMwMDE3WjAzMTEwLwYDVQQD
Eyg5MWU3MmMyMzFjNzk3ZTdiYzI5YjhjNjQ1ZjgyYzdmYjFiNjFkYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZMcH9YW6H9t/G/vpOKGu1xTXVhd
BXSpW8SVnE6A0QBKH9hemks0C/W71PdZ1DLDuFpSpyY1BsJgG4l8Wrf/vAra9Mt5
l7x0kndVu52dbMeff4jUKKaTwVVcNCHLbU+6FyPkEJ99NKgGWGdDfR0DRC6H7QRI
Rfx/XNoQK0YZs5YQXeSE0Sia37eCduHlOzJ2cm7TMkLmOMc1wXxkuEVvWS4acKK2
cCYwxK5/rdgBvvDcr8z30YpABTB7iHa1xPbsy5CMAAHR3QUMO/YXHpDcq9/zJZxF
81PR4U6BJdSVly1nv+SsOeWpo+4OjHotJvCBIAfLolWt+vGeupQLmq+X2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHnLCMceX57wpuMZF+Cx/sbYdoZMB8GA1UdIwQY
MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt
ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4
LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG4GR8wV
wiWKB8hZGa4+aqNs2aDTs9y0el35qvh4qbsGTJo6jNlMwuYsR8jSN/FP861vnYNP
lYdeA7NQ83ui3YbXElnuvZE8fyf2sYEtuxZAr+neOhxZOwVqOPS1P/cYcbCHs+7I
VrtJVM39zBr52+R3MVOLHWz77OPckWgOYSc/QYoT139v/pQY/GpwLOnfN5eMScdA
vG4HqdrEpyQCVuCg6HDYxmSrcIZwPbxpHAelDDBuWp7jE/rQy1/U6s5aLhJrw474
s1444J1F4OupJlYNH/1DHqubQUcRUONIMB1xnlpFP4ROGglLWC3mwzCuFNqQr7Ox
RQIybS4tE8juBQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:50 2026 by rpki-client