Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: UZK2Xt85luvI7ZQ3qYbobpXwPJ36sVZmo8MFZByOut0=
Subject key identifier: 1A:27:65:4A:2C:8F:33:5D:04:9F:F9:B5:2B:2E:A1:47:74:3F:61:05
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019D9818D428B138A5134F01875A8F582227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 18CC
Signing time: Thu 16 Apr 2026 21:00:57 +0000
Manifest this update: Thu 16 Apr 2026 21:00:57 +0000
Manifest next update: Fri 17 Apr 2026 21:00:57 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
3: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
4: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: mxoegYDPwZWPxw7/Qpegw5IcLaEqH0pzKvBkbEFPU60=)
6: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
7: Zem19jbYLY_TJOw1fhbbzQQpIrk.roa (hash: 4+yIb5TxfA9PdNX24aIAR4MgjiRqcH12CDhLB9IbWOk=)
8: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
9: x7z-ysQrqrlmh-6azxQlDFRLWOg.roa (hash: d9bh3aMeZoe5mLDSNkDPB2TdMDnFvgBW7tcxJb25w1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d4:28:b1:38:a5:13:4f:01:87:5a:8f:58:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Apr 16 21:00:57 2026 GMT
Not After : Apr 17 21:00:57 2026 GMT
Subject: CN=1a27654a2c8f335d049ff9b52b2ea147743f6105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:11:d8:53:e5:c3:e9:df:d4:24:5b:98:23:
8f:61:0e:ef:94:b5:4f:6f:95:b4:0b:5f:b2:6e:dc:
bb:85:98:71:2c:48:1f:51:51:c1:7e:6b:06:ab:e6:
59:ac:81:94:cf:d4:b6:22:2d:59:f9:84:30:a9:cd:
d9:51:86:d4:3f:78:10:1f:07:f3:30:7a:6d:18:f7:
6e:04:9d:d0:ba:28:2a:0b:13:3a:25:91:1c:25:87:
02:8a:77:b9:61:99:72:7b:26:47:72:13:e4:5d:f3:
f8:8c:c1:0f:bc:18:ab:6c:a1:ae:fa:95:ad:d5:59:
8f:b1:12:ab:b8:30:66:7b:ef:f3:df:b1:f4:54:1e:
f3:5e:f8:3b:53:df:dc:d9:4c:17:34:f3:ca:21:48:
d8:de:2a:4f:23:0f:3a:e2:16:2e:c3:a4:e5:7a:5a:
b0:03:06:91:15:9f:03:d2:8d:be:bd:8a:30:fc:13:
d3:47:a4:b4:42:90:c5:e4:48:7e:5e:9f:43:06:8d:
12:f1:ed:be:30:81:bd:42:0d:41:cb:47:b7:92:9b:
33:ed:a7:a2:3d:b3:98:16:6e:ad:31:b2:fd:3a:53:
52:1c:20:ef:92:e7:26:8f:f7:44:59:54:ba:c4:c1:
4f:e7:a6:05:9f:fd:26:76:06:39:19:68:32:0c:6b:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:27:65:4A:2C:8F:33:5D:04:9F:F9:B5:2B:2E:A1:47:74:3F:61:05
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:7f:5f:e2:a7:0d:b6:0b:a0:50:19:21:ff:4e:18:66:61:
c3:c0:c9:95:d3:8c:73:a1:53:6f:7f:2f:9f:33:62:ca:01:18:
65:14:1f:9d:a6:7e:ed:f6:9f:c8:8b:10:70:71:11:c2:e1:9b:
df:bc:a6:ee:37:03:b1:ce:c8:af:ee:92:b7:af:5c:ba:75:4d:
49:1d:12:ad:dc:bf:42:ea:59:d2:22:73:e2:b0:8b:04:46:b4:
85:e3:9b:5b:4b:b4:0c:99:e7:ce:30:d4:94:45:59:d0:f3:db:
ba:99:9f:73:95:f4:16:3f:99:a3:cf:2c:47:33:bb:b2:87:2a:
31:2e:ec:d6:45:cb:bf:3c:91:33:c7:28:c6:f5:cc:d2:d7:83:
8f:f3:1a:a4:2b:ce:09:8e:0e:63:38:4d:1d:a7:19:0c:90:1b:
2e:c4:01:9b:9f:84:ed:52:96:34:45:00:c0:25:fc:47:20:44:
cb:13:b5:29:6b:36:bc:45:c5:0d:6d:26:58:b4:5e:22:7a:d8:
8d:f9:6e:06:26:5f:5d:3c:53:15:14:40:9e:f5:6b:9a:9c:00:
b7:c8:70:8e:4b:95:59:98:4b:24:c3:d3:f2:99:ce:a0:05:26:
a9:77:8d:a4:8d:70:5b:0f:04:ce:96:79:fa:59:2d:a8:34:1e:
3d:33:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:06:56 2026 by rpki-client