Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: 7OYe+0YY8UmVyobHbR3R7gY1WAXeMJWrU41APkRmhIY=
Subject key identifier: EF:B8:F0:95:1D:E4:0F:9B:7D:84:B0:C0:54:9E:79:E5:48:77:07:42
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019CA8A1173370A26EA51D26A74E79235716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 09:00:55 +0000
Manifest this update: Sun 01 Mar 2026 09:00:55 +0000
Manifest next update: Mon 02 Mar 2026 09:00:55 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
3: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
4: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: KfpLFX+BQ3krvauHJaOCEZbuvNoAzDyD+EfD6Ce9Kqw=)
6: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
7: Zem19jbYLY_TJOw1fhbbzQQpIrk.roa (hash: 4+yIb5TxfA9PdNX24aIAR4MgjiRqcH12CDhLB9IbWOk=)
8: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
9: x7z-ysQrqrlmh-6azxQlDFRLWOg.roa (hash: d9bh3aMeZoe5mLDSNkDPB2TdMDnFvgBW7tcxJb25w1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:17:33:70:a2:6e:a5:1d:26:a7:4e:79:23:57:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Mar 1 09:00:55 2026 GMT
Not After : Mar 2 09:00:55 2026 GMT
Subject: CN=efb8f0951de40f9b7d84b0c0549e79e548770742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:2d:dd:55:f7:6a:c9:be:c0:00:de:dd:85:
c2:ce:7f:89:8e:b0:b8:9f:9d:25:f2:17:9d:2e:c7:
df:dc:60:31:5b:16:a8:a4:62:ed:81:a2:51:36:e5:
96:34:70:53:92:b9:99:74:e5:e6:d6:3d:3f:49:e2:
1c:a0:6b:94:77:e4:60:27:26:97:16:30:41:50:91:
f5:d7:7c:8c:d3:44:b3:dc:a5:ac:31:c3:1b:c6:48:
3e:89:2b:eb:1e:14:af:35:fe:b1:6c:05:74:31:5c:
02:50:10:d4:c2:ac:9a:78:33:07:5a:4b:17:bc:4f:
6c:c1:06:59:37:d6:9a:8b:58:95:0c:d8:7c:27:3e:
49:2b:d0:7c:14:e0:d3:99:fc:54:8b:ea:e2:96:ab:
e3:2e:15:fd:33:82:28:24:e0:73:54:d0:88:97:fd:
f1:89:d2:2a:bd:9b:b0:9d:9f:b7:b0:c5:a1:3f:21:
21:f5:19:0b:27:09:08:f5:5e:76:88:35:80:3a:3e:
1e:7e:90:56:51:70:bf:8a:ff:ff:b7:ad:75:e0:da:
9a:d4:b4:4b:a9:28:50:b0:41:8c:f2:28:ef:07:db:
32:e0:4e:a7:05:17:b8:19:c7:82:1d:ea:0f:2f:57:
e2:24:12:78:39:e7:f2:c5:6d:c3:17:c6:35:4f:cf:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B8:F0:95:1D:E4:0F:9B:7D:84:B0:C0:54:9E:79:E5:48:77:07:42
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:25:a5:67:d6:d6:94:c8:20:b8:c5:db:ba:59:83:28:5d:01:
83:d5:e2:cd:ea:81:7d:6e:8f:1d:df:7b:e6:4b:85:fa:7e:aa:
1c:12:2b:9d:fd:ce:0d:f6:54:7e:4f:f2:ed:ce:60:2c:f0:88:
0b:be:98:31:89:64:6d:c7:84:1d:2f:a5:74:13:da:70:07:c6:
70:8a:a2:f6:e4:eb:70:11:eb:bc:df:29:87:d4:fe:7e:4b:a7:
ba:64:2b:7d:0e:10:8d:37:d5:31:84:a8:ee:73:15:dc:84:03:
c1:6b:0e:f7:4c:1f:ba:d9:09:12:aa:84:4d:55:49:86:2f:d8:
b5:1d:5e:55:3f:5a:69:b4:f7:c1:bf:ad:8c:df:d8:23:fc:d9:
9f:23:48:12:e6:4c:1f:c0:6a:ce:1a:e6:00:6b:92:8c:82:01:
a6:e6:d5:48:f7:da:56:c2:44:dc:3b:bd:f8:80:75:20:d7:d7:
a5:24:6c:fe:6b:ad:28:3c:fa:7d:b3:b7:87:b4:01:a6:9f:5a:
35:87:42:43:ef:1a:b7:ce:1d:4f:b4:05:6c:f8:fe:f2:eb:f3:
5f:83:da:27:b1:62:4e:98:fe:e9:da:83:e6:fb:09:92:40:b9:
6b:99:6b:7d:d3:c5:87:8c:3b:80:d3:ba:5c:35:a5:dd:aa:8c:
a3:a8:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:36 2026 by rpki-client