Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: nKHzPFjC7v4vJhHskoSuw79fuGui4oP3sXVtYQ5GLmw=
Subject key identifier: 09:0B:71:9B:84:D4:9C:A4:00:DA:27:CE:8E:D9:5A:5E:8B:D0:20:6B
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019CAA58227BC206AEED5AB428ABA3191950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 091B
Signing time: Sun 01 Mar 2026 17:00:28 +0000
Manifest this update: Sun 01 Mar 2026 17:00:28 +0000
Manifest next update: Mon 02 Mar 2026 17:00:28 +0000
Files and hashes: 1: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: hWOOEBlsNYCkXQthUK2ft7CKbhEIOe8TLF2wmuI3PSY=)
2: NOQAIGhcVOk-dG-3LT-WabylerQ.roa (hash: 3dTs8E+Gd9ybSoS4mvqWxm0nC0/sPxnqwKVqAc/Y2E8=)
3: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (hash: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:22:7b:c2:06:ae:ed:5a:b4:28:ab:a3:19:19:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Mar 1 17:00:28 2026 GMT
Not After : Mar 2 17:00:28 2026 GMT
Subject: CN=090b719b84d49ca400da27ce8ed95a5e8bd0206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:74:ed:ce:e6:05:66:ba:0a:af:a8:0b:f8:
a3:0b:43:b9:37:5b:e1:d6:9f:72:05:38:44:b2:91:
24:6c:13:23:df:bf:9c:b0:6b:7d:ba:33:34:91:26:
4d:df:59:73:a9:5b:d9:8e:69:e3:4a:41:b9:e1:74:
04:5e:28:0f:63:83:76:23:20:af:5a:ae:f8:03:aa:
ab:f4:91:72:85:c9:30:e0:10:7f:23:7e:a9:fc:19:
be:d5:98:30:f5:f7:ef:66:80:63:7c:03:0f:35:ec:
0e:78:21:48:f1:79:e7:8a:6f:57:0a:4d:46:69:57:
50:0d:a1:20:d2:6b:c7:68:5e:a5:4c:89:23:70:81:
21:0b:b9:44:ee:d8:f9:4d:68:fb:d4:29:71:6d:59:
9b:10:45:db:a0:cb:1c:08:57:0c:9c:3b:45:42:16:
1d:45:ec:2b:cb:c9:9d:36:5a:ca:61:cc:f6:35:ad:
72:e5:21:ac:48:d1:18:cd:dd:2f:5d:f9:01:c6:20:
3b:e0:23:2f:ea:5d:e0:bf:ea:8e:2a:0d:56:81:f1:
46:10:21:c3:15:94:7f:95:00:b0:1a:e6:8c:0e:d2:
da:a4:12:ef:ea:38:57:81:65:8b:73:55:c3:c1:c5:
7f:60:46:11:8c:41:84:50:0e:53:9b:3a:a4:08:3d:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:71:9B:84:D4:9C:A4:00:DA:27:CE:8E:D9:5A:5E:8B:D0:20:6B
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:66:2e:7e:62:14:1a:0a:ad:a5:73:50:4d:15:e8:01:2d:67:
a6:51:53:48:61:0f:b0:2c:22:c9:5d:b0:36:93:54:7e:01:6f:
39:61:ee:92:f4:91:5f:6e:ee:36:58:f8:92:0c:14:98:d1:30:
33:f2:76:d0:4c:50:4c:dd:77:f0:f3:68:2e:f1:52:0b:80:f9:
a8:18:f6:27:1d:a3:6a:0d:97:ab:77:4b:5d:16:57:cd:75:02:
c3:6f:e4:a2:48:26:c1:2e:cc:13:10:41:17:3c:0e:61:4d:b1:
f1:55:0f:b8:5a:40:36:86:8a:7a:ba:5e:83:a0:9b:e7:cd:d4:
04:03:a9:b8:05:3d:f4:26:7d:ad:85:e8:b7:f7:e7:de:5c:44:
87:81:db:bb:1c:dd:17:52:64:35:48:ef:29:a6:2b:ca:fb:df:
a9:60:1e:32:d1:d2:1c:73:e1:eb:e6:c8:a9:2c:63:97:9c:ff:
de:54:f4:26:9c:c9:59:ab:4f:33:d6:4a:e6:14:90:c1:27:1d:
1b:2b:7e:6a:fd:eb:48:21:93:35:a0:18:fb:42:73:2f:c6:ad:
dd:be:05:d7:f4:7a:25:45:02:e0:b1:01:ff:36:54:34:60:3c:
a5:bb:4c:de:9c:6b:f0:fe:30:4d:6e:a4:ba:20:67:db:72:69:
79:7a:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:01 2026 by rpki-client