Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: feSZeK5/JuVb+9qKOjkDsCe5Ms05hojmOEsW5HYeqUk=
Subject key identifier: 74:3C:23:84:AF:30:6F:AF:01:21:9B:8F:0F:E8:8D:07:EC:CD:B0:D5
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 019DA3E6D55A2BC47748093ACBC164F75934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 15F9
Signing time: Sun 19 Apr 2026 04:01:47 +0000
Manifest this update: Sun 19 Apr 2026 04:01:47 +0000
Manifest next update: Mon 20 Apr 2026 04:01:47 +0000
Files and hashes: 1: BdXkp0jd5mZ59rClK2iWtZn7TxU.roa (hash: wSBDoJL04+StGfAFdruIEpNNi0ajEzoFpxeVenzGlJw=)
2: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: omPYhfJVdEcgokbcX7tcHTmA4iuE7cNFvOzDcLHYJKU=)
3: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (hash: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE=)
4: aASlAO3ULJvYcCaFwZuTImiJ--8.roa (hash: 3IcV0cUF4DbrPmFVcmO8nyEBwkVXv6EWYEXI+8Y8SiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:d5:5a:2b:c4:77:48:09:3a:cb:c1:64:f7:59:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Apr 19 04:01:47 2026 GMT
Not After : Apr 20 04:01:47 2026 GMT
Subject: CN=743c2384af306faf01219b8f0fe88d07eccdb0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:83:e6:e8:d7:e7:80:6a:4c:3c:02:2d:ed:
f9:03:f7:fa:48:54:de:5a:76:29:f1:da:c9:0f:78:
d4:e1:da:ec:2e:86:6a:37:3e:6c:1c:ca:29:0a:cc:
fb:a7:91:65:34:2b:59:b9:e4:e8:af:41:2a:0a:b8:
63:db:8e:41:ba:90:2c:49:cd:23:ad:77:28:b2:4c:
cb:f8:7a:db:c5:cf:84:94:26:b5:a1:12:7d:9c:2f:
b1:dd:0e:f2:81:cc:26:fa:7c:e4:98:d3:74:10:af:
4e:b6:1a:6b:4d:ee:d5:a2:15:08:c3:fe:f1:ce:ff:
02:5b:18:10:4d:48:7f:45:aa:58:23:fa:d7:58:a5:
d1:1c:9e:bc:1f:18:26:9b:d1:8b:34:39:a6:6d:75:
9d:7d:d0:9a:ba:c9:0d:43:ce:09:d6:ee:39:57:2d:
c6:c1:8a:7a:50:fc:4f:5a:ce:c6:ee:9d:96:a3:f4:
b1:be:b5:80:09:34:00:fe:3a:36:1e:c9:b0:8c:3f:
49:e1:d6:67:87:c0:d6:d6:59:b4:a7:6a:c6:a6:e8:
31:e3:15:8d:9c:a8:b8:80:b9:26:6d:f6:1e:9f:c6:
29:54:37:54:5e:ff:1e:3a:d0:0a:0f:fd:00:db:98:
c3:36:06:4b:a5:2b:86:2f:6a:0a:eb:e8:d9:ce:69:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:23:84:AF:30:6F:AF:01:21:9B:8F:0F:E8:8D:07:EC:CD:B0:D5
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:67:ae:08:d6:19:d1:a7:db:bb:ad:3f:a1:a7:c3:c8:3b:
7a:3c:a7:73:5a:02:5a:62:2f:10:ef:6a:59:07:b2:36:a5:88:
d3:fa:4f:01:53:ec:e8:96:79:0d:40:09:00:57:13:ee:78:03:
2f:aa:62:91:88:ba:d6:da:1a:64:43:15:2e:11:08:ac:f9:cb:
14:52:d9:88:9c:ff:ac:1e:a5:81:67:aa:a0:95:6a:8b:9e:c4:
db:2e:11:e2:fb:37:f8:e0:66:2c:15:d5:ab:bf:cb:03:a4:15:
7a:5d:51:3f:b0:38:f6:b6:e6:68:56:14:94:85:9f:22:fb:7a:
cd:30:87:6f:40:a2:8b:21:db:c2:c4:8a:f3:61:55:79:af:4a:
08:21:8f:a3:2d:69:72:1d:32:54:2a:e4:eb:bc:4f:78:8d:96:
a7:ad:13:1a:0b:0d:3f:9b:c1:a0:0d:70:93:41:81:65:9f:e8:
f4:96:86:9d:f7:3b:93:e1:af:10:be:d2:1c:d0:1f:e6:b7:e0:
fb:e0:4f:71:a7:be:53:77:af:da:af:f6:86:30:3a:93:b7:c3:
2a:0d:e9:0d:9c:9c:a6:3e:f7:a6:a8:9a:36:d0:16:ff:ca:63:
e9:10:2f:0b:ab:bc:01:0d:5b:60:0a:68:a9:3f:6b:18:c3:86:
ed:13:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:47 2026 by rpki-client