Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: 5x4LoahgsbNfXlnZPozYViw82G4Z1qXbYFj2uXIe9T4=
Subject key identifier: CC:11:85:3D:6D:BF:72:E7:7C:1A:A8:D7:7E:63:EA:99:7E:DD:4C:09
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019CACEB535D13536DCEB544EB6D19E35377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 14C2
Signing time: Mon 02 Mar 2026 05:00:29 +0000
Manifest this update: Mon 02 Mar 2026 05:00:29 +0000
Manifest next update: Tue 03 Mar 2026 05:00:29 +0000
Files and hashes: 1: HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa (hash: 0zA+P2Wj4q6cydJzTfe4tmDc4sztqJccFJv0Zen4ddc=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: PZqvk4q0Tp1I5K1BxAunOcgwcJyF810uR57Ex3pz7XY=)
3: PfIfsUmHCecT0quWuMMLRmwtU_o.roa (hash: 1Lg6Rrqt3IOywh0QJkAE12er2k2miVzqT2LnmDFzGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:53:5d:13:53:6d:ce:b5:44:eb:6d:19:e3:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Mar 2 05:00:29 2026 GMT
Not After : Mar 3 05:00:29 2026 GMT
Subject: CN=cc11853d6dbf72e77c1aa8d77e63ea997edd4c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:f1:a0:0f:22:6c:40:d8:bf:70:a0:a5:dd:
28:ae:8f:3f:58:a1:f2:1a:3c:6e:d3:fa:05:6f:e9:
b4:8e:f7:5e:fa:0b:06:b7:8f:64:1d:49:30:d1:85:
f8:1a:5b:e7:77:53:a8:a2:20:d1:b6:7c:9a:6a:71:
80:ca:57:c3:be:90:4d:54:a4:21:63:d4:07:38:5b:
cb:8d:d3:bc:fc:bc:fd:97:27:27:b7:5e:35:f3:c7:
7c:6b:ac:60:c0:dd:ea:92:90:36:44:aa:c5:33:d8:
b5:ae:32:bc:60:d1:e6:0b:e2:67:50:9c:97:39:25:
77:2d:b9:ce:58:dc:a1:f0:9c:30:da:b1:22:ea:07:
5b:91:94:25:2b:98:92:7c:92:09:51:ce:b1:f2:c6:
6f:d0:db:50:40:c0:3d:0c:48:98:f9:9c:fe:24:41:
48:61:0a:3a:72:a0:89:47:d2:7b:68:c3:d3:b5:44:
30:01:27:5f:8a:8b:63:ff:39:d2:c9:7e:cc:9a:b2:
db:0e:52:7f:39:d2:49:a4:a9:62:15:96:d9:ff:b6:
06:49:0e:19:74:c8:a4:85:2a:58:7b:d8:3f:89:d6:
45:89:9b:8d:ee:e9:23:6d:7b:95:c3:34:24:e3:36:
25:30:64:f9:2e:f5:04:ed:f0:2e:2a:93:ba:78:99:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:85:3D:6D:BF:72:E7:7C:1A:A8:D7:7E:63:EA:99:7E:DD:4C:09
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b4:12:37:bd:fc:0b:90:c8:e1:f6:0c:0d:df:f7:33:93:f2:
89:de:da:ad:01:e7:0f:70:da:34:fd:00:25:6f:a9:1b:70:98:
49:cf:0d:d6:41:e9:5d:ef:c7:2e:26:01:6f:e3:3c:81:c4:9b:
6a:fe:dc:f3:2e:6d:2a:f4:76:c7:f3:11:fd:14:09:6c:66:4b:
da:a7:eb:66:63:77:74:a3:e3:29:80:0c:61:e2:72:b0:4d:7b:
33:38:f1:23:98:35:dd:70:63:76:0e:68:75:48:52:26:7c:d8:
02:fc:bb:7c:0d:8d:8e:46:a8:1c:4e:2a:08:75:f6:3f:4a:30:
51:37:fd:28:ea:ed:e8:25:4e:7b:26:c5:b7:8f:25:9c:56:71:
72:f6:28:93:76:72:ec:8a:d6:83:3d:2f:1f:65:16:cf:34:fd:
a0:42:94:4d:64:0a:5d:96:eb:31:49:e3:a5:90:14:f2:d0:b2:
25:f5:5e:91:6f:da:6f:f4:0b:9e:ec:5f:ab:32:ae:da:df:e6:
cd:d4:f2:1f:2b:b9:bd:74:6b:2f:75:c1:b5:45:32:00:1f:af:
c7:2b:98:94:24:ec:df:f1:62:11:5e:85:c1:54:d4:0b:d6:41:
50:b1:63:38:7a:d3:3f:45:b0:cf:ea:dc:c8:32:84:46:a8:52:
b9:1e:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:51 2026 by rpki-client