Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: ZfIihix09IDMdCBovKaSueuMHPfYyFdn+O8y1xBSqEo=
Subject key identifier: F0:B3:EB:56:2E:BF:E1:24:D8:54:90:88:EB:1C:BC:4A:55:15:7F:B4
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01A0CAB4CEB47DDDEBD9EB186FA42C032628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0B3E
Signing time: Tue 22 Sep 2026 20:00:42 +0000
Manifest this update: Tue 22 Sep 2026 20:00:42 +0000
Manifest next update: Wed 23 Sep 2026 20:00:42 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: 36LjT0dq9jm+AHxi7zlOEcqJoBfVVZ7btoPiUubflEY=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:ce:b4:7d:dd:eb:d9:eb:18:6f:a4:2c:03:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Sep 22 20:00:42 2026 GMT
Not After : Sep 23 20:00:42 2026 GMT
Subject: CN=f0b3eb562ebfe124d8549088eb1cbc4a55157fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:18:f4:5c:10:fe:20:2a:3f:11:ff:f0:0d:
fe:01:07:15:bb:de:41:5e:bc:98:eb:b8:17:a1:34:
af:e8:18:89:bb:e1:bb:c7:3a:1e:35:72:7f:cc:da:
42:d9:15:8d:39:9a:51:84:1a:bc:40:70:8b:f2:9b:
d7:5a:b3:25:75:ec:03:2a:66:af:93:02:c0:86:55:
4c:d2:c2:a2:24:f0:d6:cb:0f:44:a6:a2:fd:13:c2:
0c:74:35:d8:35:b7:cf:30:d5:80:9a:3c:1e:d3:6b:
7a:12:c1:5c:47:dc:58:90:56:53:14:e7:f4:5a:8f:
5b:5f:8c:cc:81:9c:b3:e8:5a:85:d4:b0:e7:27:8b:
31:64:e1:c5:ba:0b:2a:d5:ec:69:78:53:26:fb:6d:
88:76:3a:60:33:eb:aa:11:8a:1b:5e:ac:ae:80:55:
15:0f:46:b0:bf:9d:83:7d:f7:6f:b9:2e:07:e0:ac:
40:74:7f:ed:da:6d:d5:16:87:f1:4c:83:a4:18:6e:
99:48:9e:b1:e2:82:ee:87:df:d3:42:9e:95:fb:6b:
b7:6e:d7:d8:98:89:fe:43:af:09:95:b4:b0:4b:a6:
89:5c:54:7a:1f:8c:e0:5f:64:6b:85:7b:fb:25:22:
bd:f7:d1:c0:14:24:dd:ab:eb:49:c5:44:fd:65:f5:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:EB:56:2E:BF:E1:24:D8:54:90:88:EB:1C:BC:4A:55:15:7F:B4
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:74:1b:b1:7f:4e:fd:e9:b2:9c:69:d8:09:a0:4f:77:97:20:
fa:dd:fc:9a:7e:94:cf:43:90:de:08:14:56:d0:50:37:cc:14:
2c:8d:39:fb:63:60:0b:a5:ff:c0:d5:66:81:bc:55:bc:19:e8:
93:8c:8c:93:d3:51:4c:b6:05:d4:41:3a:f0:7a:da:6e:a6:2a:
5f:d0:32:e7:7e:4b:d9:58:4b:06:d7:f5:4c:0e:f6:21:83:f9:
5d:d3:10:4d:85:b5:21:ba:6c:80:31:a2:49:b2:86:53:40:40:
30:64:9a:52:d4:a5:51:26:bd:22:da:fe:82:06:d0:bb:70:f1:
54:e2:29:51:4e:a2:bb:c0:05:f4:fc:25:80:62:9a:09:ef:c3:
45:20:f2:98:45:f4:79:77:96:55:33:ee:9e:ad:75:60:e7:3a:
11:c2:7f:7f:29:ef:09:b7:ac:ba:d5:59:eb:f2:5c:6f:46:0e:
39:23:e4:cb:79:b9:f9:6e:44:90:5e:99:d2:2f:5a:6e:79:98:
fa:9d:4d:f3:2a:2c:57:47:da:1a:2d:8d:f5:fb:77:b6:20:a5:
4a:a7:bd:82:a8:6d:5a:9d:47:d5:8c:27:7c:6a:9f:11:9a:9b:
8b:57:73:9e:30:47:f6:5d:3b:0b:a7:74:23:4d:23:57:bf:9e:
b8:4d:24:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtM60fd3r2esYb6QsAyYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz
MTRlMzYwHhcNMjYwOTIyMjAwMDQyWhcNMjYwOTIzMjAwMDQyWjAzMTEwLwYDVQQD
EyhmMGIzZWI1NjJlYmZlMTI0ZDg1NDkwODhlYjFjYmM0YTU1MTU3ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIMY9FwQ/iAqPxH/8A3+AQcVu95B
XryY67gXoTSv6BiJu+G7xzoeNXJ/zNpC2RWNOZpRhBq8QHCL8pvXWrMldewDKmav
kwLAhlVM0sKiJPDWyw9EpqL9E8IMdDXYNbfPMNWAmjwe02t6EsFcR9xYkFZTFOf0
Wo9bX4zMgZyz6FqF1LDnJ4sxZOHFugsq1expeFMm+22IdjpgM+uqEYobXqyugFUV
D0awv52DffdvuS4H4KxAdH/t2m3VFofxTIOkGG6ZSJ6x4oLuh9/TQp6V+2u3btfY
mIn+Q68JlbSwS6aJXFR6H4zgX2RrhXv7JSK999HAFCTdq+tJxUT9ZfWP2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCz61Yuv+Ek2FSQiOscvEpVFX+0MB8GA1UdIwQY
MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt
ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4
LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinQbsX9O
/emynGnYCaBPd5cg+t38mn6Uz0OQ3ggUVtBQN8wULI05+2NgC6X/wNVmgbxVvBno
k4yMk9NRTLYF1EE68HrabqYqX9Ay535L2VhLBtf1TA72IYP5XdMQTYW1IbpsgDGi
SbKGU0BAMGSaUtSlUSa9Itr+ggbQu3DxVOIpUU6iu8AF9PwlgGKaCe/DRSDymEX0
eXeWVTPunq11YOc6EcJ/fynvCbesutVZ6/Jcb0YOOSPky3m5+W5EkF6Z0i9abnmY
+p1N8yosV0faGi2N9ft3tiClSqe9gqhtWp1H1YwnfGqfEZqbi1dznjBH9l07C6d0
I00jV7+euE0k6w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 06:55:06 2026 by rpki-client