Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: /Rixhs3YJ1XQ5jlAJz+pdDAA4KXSoy5hb8KcydPyHTk=
Subject key identifier: 0E:8E:1A:A2:AA:D5:C7:F9:0F:82:EE:ED:FA:6A:F2:E8:93:6A:C4:DE
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01A0CA47774F5D19CE90980DA03120531052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 17AD
Signing time: Tue 22 Sep 2026 18:01:16 +0000
Manifest this update: Tue 22 Sep 2026 18:01:16 +0000
Manifest next update: Wed 23 Sep 2026 18:01:16 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 17p/yoEFM5UOWFJeW9sPkS8rSLL/3mBSitintl1x1G8=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (hash: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:77:4f:5d:19:ce:90:98:0d:a0:31:20:53:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Sep 22 18:01:16 2026 GMT
Not After : Sep 23 18:01:16 2026 GMT
Subject: CN=0e8e1aa2aad5c7f90f82eeedfa6af2e8936ac4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c3:ec:56:1c:3b:74:e5:64:be:48:64:91:9e:
e3:9d:57:31:f6:85:18:dc:03:82:22:2c:82:e6:ae:
58:65:29:c6:2f:92:7b:00:a5:9a:a9:2f:ae:13:70:
40:31:a5:93:3e:fd:59:fb:b3:44:13:fc:92:fe:44:
a6:2e:5b:29:a1:af:85:4e:2a:d0:37:87:8b:4f:41:
94:76:73:b3:bd:0d:99:a9:ff:6a:6b:29:d6:2d:82:
ff:a1:49:2d:03:f5:12:e3:1f:69:9c:f6:1e:58:b7:
3b:21:54:39:b7:58:5d:26:59:90:b1:5e:23:d4:01:
44:7e:33:e0:43:bd:ce:54:e5:02:89:9a:06:cd:fe:
03:c5:3b:69:be:0d:57:71:0c:46:d8:df:0c:62:26:
ad:a3:e9:99:da:1e:0a:cc:64:24:0d:b3:94:c6:98:
ae:05:a2:07:80:93:e4:d8:34:64:e6:d1:8e:55:71:
12:22:cc:ee:26:1c:4f:d3:d0:19:46:63:70:1b:ac:
c9:53:91:05:7d:e3:84:f8:4d:3a:2c:f7:eb:aa:54:
76:90:3e:07:3a:75:f2:5b:40:b5:1a:f0:80:2d:09:
19:f5:82:6b:37:52:00:44:50:b2:9d:04:8d:e8:b8:
6e:d9:80:fb:a8:b8:d0:1c:bf:44:35:54:00:c3:e6:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:1A:A2:AA:D5:C7:F9:0F:82:EE:ED:FA:6A:F2:E8:93:6A:C4:DE
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:99:28:7f:61:69:f6:c1:a6:b7:b4:25:15:dc:07:f4:76:74:
71:e6:81:00:e1:9d:3a:6b:c7:54:99:de:d2:b5:6a:6f:8a:8a:
7c:73:20:3d:68:27:c2:69:e7:0b:b1:fd:a3:3b:f7:7f:f9:68:
a8:c5:2a:26:30:be:f6:58:0c:63:82:15:03:f1:6e:27:ea:9f:
d1:41:e0:25:14:3d:f9:9a:d9:7a:0c:23:17:0f:33:19:a2:3e:
a4:97:49:c1:25:92:c6:e0:f4:e0:76:bf:84:de:6f:1c:cd:9f:
f3:4e:8c:98:5e:e7:67:8a:c3:16:47:25:30:2f:77:22:0f:d6:
c0:42:3e:e8:47:18:e8:88:1b:22:39:2e:e1:d2:2e:3a:40:46:
33:8a:74:13:dc:cc:62:c1:95:4d:84:a9:64:20:fb:36:cd:89:
8a:e2:d2:ba:d7:ee:04:3b:de:bc:eb:83:80:03:23:25:48:0e:
98:b2:7c:73:66:0c:2c:3a:f3:b2:3f:13:f7:6b:f7:9e:35:be:
1b:83:42:ad:2a:8b:4e:82:96:d0:58:b3:7a:fa:58:e5:09:4b:
c2:7b:18:22:85:0c:52:1e:e2:ee:14:91:ae:5c:0f:13:8a:f0:
14:8f:28:b7:94:2c:71:6b:d2:43:4c:0c:40:94:7e:c6:d3:b4:
df:a8:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:26:29 2026 by rpki-client