Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: gOCZH6PntvX1BRgcnEoC1d72qEBw0WkvZ61PF6bdQ54=
Subject key identifier: 49:B8:59:68:36:FA:D9:DC:80:55:04:A8:DC:7B:C8:12:7D:E6:E0:15
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01A0D200A7B123A514E41AD60CF9EB568D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 17B1
Signing time: Thu 24 Sep 2026 06:00:53 +0000
Manifest this update: Thu 24 Sep 2026 06:00:53 +0000
Manifest next update: Fri 25 Sep 2026 06:00:53 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 9S8qOKMEQzXKLxbmC7LBfgyDJCvpTIEJ7PIogrnkYDc=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (hash: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:a7:b1:23:a5:14:e4:1a:d6:0c:f9:eb:56:8d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Sep 24 06:00:53 2026 GMT
Not After : Sep 25 06:00:53 2026 GMT
Subject: CN=49b8596836fad9dc805504a8dc7bc8127de6e015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:5f:b5:89:70:a1:6f:9e:45:5b:39:f7:6c:
1b:6c:20:75:e8:21:a6:bc:90:fa:c9:a9:a0:1c:d0:
60:4b:9f:8c:7e:25:4e:d2:cc:34:40:22:63:fd:84:
2f:39:d1:0a:36:50:66:0a:fd:ef:63:56:08:9e:ae:
f8:1b:01:01:72:5a:34:c5:70:80:5f:4f:d9:67:3b:
21:10:f9:d3:64:ad:8c:1b:41:55:2d:6f:44:24:a0:
3c:53:2f:dc:d1:41:83:cc:c3:32:8d:32:ba:49:f6:
d1:e6:a7:68:fc:be:11:46:b1:32:3f:c9:e1:41:dc:
92:aa:bf:15:63:e0:dc:a1:55:0a:35:a3:a0:de:0d:
b7:e8:0b:f2:21:de:59:92:36:e2:d2:3c:51:8d:49:
9d:52:83:b0:42:cb:46:35:e0:0d:4f:71:ac:cd:ff:
96:0e:78:80:6f:ae:d0:62:09:2e:86:7a:4a:82:b1:
c8:16:13:8c:73:97:38:c6:d9:0d:34:ec:a1:ca:3f:
ad:24:e3:24:19:b5:a9:a6:df:90:e9:85:86:b7:cd:
e6:0b:a5:78:fc:80:cc:38:72:7c:28:33:49:f6:48:
9b:c8:ff:4d:e8:e1:5a:77:3e:df:74:1f:0c:58:c1:
cc:62:a7:f1:17:4b:94:d1:f9:ed:01:ab:57:09:86:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B8:59:68:36:FA:D9:DC:80:55:04:A8:DC:7B:C8:12:7D:E6:E0:15
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:d2:8e:49:b8:1e:51:ca:02:fb:4a:8a:07:d9:f2:a4:2f:
91:c3:73:1e:4e:e6:d9:9f:17:90:51:a4:3f:37:4e:f8:8f:f1:
6d:f1:32:4c:e6:bf:52:08:5e:77:28:32:9b:44:d8:fb:42:47:
cd:b7:6d:e6:72:8c:70:da:6f:05:0e:66:de:cc:80:e1:ac:a4:
16:66:cf:20:0d:38:dd:e3:e3:a4:c4:5a:5d:a0:8f:4b:6a:88:
c4:09:08:3d:76:3d:f9:14:cd:e9:a9:5b:f7:5f:62:0f:59:dd:
15:7a:39:65:01:6e:00:54:86:fd:04:a9:45:95:68:a8:b9:fa:
16:bc:b7:cd:52:47:a6:49:5f:f2:0b:dd:73:9d:9f:a9:90:75:
9c:a0:da:fb:a8:1f:86:4e:44:ea:3e:cd:99:8c:16:45:a0:a1:
47:ba:3d:ec:3d:6c:34:6c:ae:ca:e9:21:67:a3:5c:51:38:fa:
72:d3:26:04:f3:03:3f:92:1e:83:3b:30:74:69:a9:f8:f8:67:
83:92:e1:6f:c3:71:8a:35:06:e2:2f:74:12:c7:a4:ce:90:81:
38:dd:b5:6c:b5:b7:1d:85:10:30:b1:d2:23:b4:bf:5e:d1:f7:
8d:54:46:d9:c0:a6:22:53:c7:5a:61:96:81:56:1a:ab:18:00:
5c:a9:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:06:19 2026 by rpki-client