Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: N+YapimMBV8Y5rs5gchHOnO4zOSv522c63CxbuM4jEo=
Subject key identifier: 8C:8E:83:FD:B0:51:74:3C:EA:12:3A:B1:5D:C9:C7:79:4F:EB:6E:1F
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 019CAAFD4CBC572B481FF22FAC345FF13D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 14C1
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: HyTfL2K9EvoVaZy-KXOTgF1Obtg.roa (hash: 0zA+P2Wj4q6cydJzTfe4tmDc4sztqJccFJv0Zen4ddc=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: Ato/5t9gJmVzRZztekStweBlsGPoXiwAjqpGlyhLbuU=)
3: PfIfsUmHCecT0quWuMMLRmwtU_o.roa (hash: 1Lg6Rrqt3IOywh0QJkAE12er2k2miVzqT2LnmDFzGxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4c:bc:57:2b:48:1f:f2:2f:ac:34:5f:f1:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=8c8e83fdb051743cea123ab15dc9c7794feb6e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:43:d1:90:e3:d1:c8:c0:2b:5f:39:7c:cb:
3f:27:99:8b:22:45:9c:71:a1:e1:2b:95:f0:44:c0:
e8:68:17:b1:ed:90:01:13:37:43:06:57:da:6b:d7:
34:e8:d8:09:b8:7e:eb:0c:e4:f6:b2:bf:ba:a9:a1:
58:91:d7:b2:1a:6b:70:55:a6:34:6f:e7:35:bf:81:
c7:d5:75:f6:73:af:00:04:c3:d0:56:24:19:b1:16:
04:0a:a3:e6:f5:18:ea:b5:cf:91:f7:ff:f3:ac:c0:
cb:0c:9f:75:10:be:24:29:1b:83:07:51:47:ee:27:
5b:42:82:d5:35:12:a3:0d:f8:22:6f:0a:b0:67:7e:
71:c0:5f:99:c3:ba:15:b2:c1:57:5e:ef:9f:eb:67:
ab:3f:f2:00:4a:f9:6c:77:5a:94:f8:80:5a:61:9b:
d7:ef:97:91:b4:6b:fe:92:65:ac:f7:69:3c:58:77:
ec:fd:86:36:19:8d:4b:5d:19:5e:cc:8e:6a:b8:99:
29:6e:27:08:35:36:7f:12:2d:18:48:83:96:ca:bf:
e5:8f:a8:59:36:1e:ac:97:49:aa:53:a7:e1:f4:9f:
c3:39:0a:83:37:e3:a8:7a:62:81:9e:94:09:76:4b:
e1:59:7b:94:61:69:af:26:a8:00:9c:f5:57:ca:2a:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:83:FD:B0:51:74:3C:EA:12:3A:B1:5D:C9:C7:79:4F:EB:6E:1F
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b1:f1:b3:ee:92:26:1c:f9:89:5e:98:a8:46:30:85:66:e8:
37:02:8f:85:cc:51:08:0c:f5:f9:c4:75:34:b9:9c:f8:a6:db:
bc:9c:54:cf:cc:49:b3:dc:12:3e:67:5d:12:42:be:a4:b1:e6:
2d:96:4c:b7:7c:71:83:4f:2c:16:86:5b:29:51:1b:22:fd:c1:
8d:1f:06:95:38:83:be:29:ff:0e:61:62:90:a1:db:29:a5:24:
45:5e:7f:cb:57:20:43:41:ab:1d:cb:52:4a:4c:35:a2:da:6e:
6f:d8:d9:3f:4e:7f:fc:0b:da:b2:e3:8f:c0:76:50:32:10:e7:
5c:16:09:a1:f1:2d:bf:a2:2f:6c:55:8c:4d:96:c7:f1:5d:5b:
37:a9:66:9e:df:b5:ae:6a:50:81:79:55:36:bb:93:6d:fa:41:
b3:04:c4:bf:b9:85:f1:13:bc:16:ca:a5:8b:e9:0f:5b:03:63:
48:30:53:c3:51:62:d7:8a:8e:47:df:02:bb:da:bd:ca:be:37:
b3:50:68:f1:bf:5b:a5:98:66:14:3c:c5:b2:bf:5b:c5:5d:c7:
f5:aa:11:39:3b:5e:0f:a5:b1:c2:7d:97:94:b6:4f:44:b6:0f:
f6:ec:30:34:6e:8a:50:13:df:88:31:52:98:8b:05:28:0d:48:
e4:07:99:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Uy8VytIH/IvrDRf8T0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWY4NTE4OGQwODJmZDU2NDBiNWMzZmUxMjIxZjYwYzUw
MWVkYjUwHhcNMjYwMzAxMjAwMDUyWhcNMjYwMzAyMjAwMDUyWjAzMTEwLwYDVQQD
Eyg4YzhlODNmZGIwNTE3NDNjZWExMjNhYjE1ZGM5Yzc3OTRmZWI2ZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcBD0ZDj0cjAK185fMs/J5mLIkWc
caHhK5XwRMDoaBex7ZABEzdDBlfaa9c06NgJuH7rDOT2sr+6qaFYkdeyGmtwVaY0
b+c1v4HH1XX2c68ABMPQViQZsRYECqPm9Rjqtc+R9//zrMDLDJ91EL4kKRuDB1FH
7idbQoLVNRKjDfgibwqwZ35xwF+Zw7oVssFXXu+f62erP/IASvlsd1qU+IBaYZvX
75eRtGv+kmWs92k8WHfs/YY2GY1LXRlezI5quJkpbicINTZ/Ei0YSIOWyr/lj6hZ
Nh6sl0mqU6fh9J/DOQqDN+OoemKBnpQJdkvhWXuUYWmvJqgAnPVXyioYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyOg/2wUXQ86hI6sV3Jx3lP624fMB8GA1UdIwQY
MBaAFDEfhRiNCC/VZAtcP+EiH2DFAe21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUt
OWJiZDFlZWJlMzNlLzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUtOWJiZDFlZWJlMzNl
LzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7Hxs+6S
Jhz5iV6YqEYwhWboNwKPhcxRCAz1+cR1NLmc+KbbvJxUz8xJs9wSPmddEkK+pLHm
LZZMt3xxg08sFoZbKVEbIv3BjR8GlTiDvin/DmFikKHbKaUkRV5/y1cgQ0GrHctS
Skw1otpub9jZP05//AvasuOPwHZQMhDnXBYJofEtv6IvbFWMTZbH8V1bN6lmnt+1
rmpQgXlVNruTbfpBswTEv7mF8RO8Fsqli+kPWwNjSDBTw1Fi14qOR98Cu9q9yr43
s1Bo8b9bpZhmFDzFsr9bxV3H9aoROTteD6Wxwn2XlLZPRLYP9uwwNG6KUBPfiDFS
mIsFKA1I5AeZWQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:55 2026 by rpki-client