
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: 5yM9N4G88C5YKm0u0glBB9bf6RkYWhUcW9JnlMEpgpg=
Subject key identifier: BA:26:18:D5:B2:0D:5A:8B:74:AE:11:62:4F:0C:53:64:CE:5B:79:D3
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019CAB6B372CCCDE8ED4AB58F09D76077DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0A41
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: 1sW4/4NI14W/cpDRM15sUBZFmoYzWWbNsoj+6OizIFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:37:2c:cc:de:8e:d4:ab:58:f0:9d:76:07:7d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=ba2618d5b20d5a8b74ae11624f0c5364ce5b79d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:8e:b8:85:52:aa:c3:29:a8:48:00:21:b9:
12:14:1f:61:d3:bc:b9:b8:ba:ec:4f:ec:14:fc:79:
d8:f3:79:00:77:8a:d4:c9:80:ed:10:9a:66:5c:1d:
e2:77:62:97:cd:3d:8a:94:df:30:75:3c:88:f4:8e:
4a:e5:2e:c8:60:26:7b:b6:cd:df:42:c5:94:7c:3d:
6c:e2:07:0e:7c:99:0d:9b:5e:d8:6f:37:0a:21:12:
4c:9a:24:69:f1:73:37:8c:09:2d:b4:61:b1:f7:96:
cd:31:88:cf:a8:67:49:41:4e:f5:18:8a:e6:82:21:
30:24:69:93:e6:44:cf:28:19:3c:df:11:b7:d1:3d:
30:2a:8c:da:71:30:18:d9:b4:e8:fc:7d:c4:76:dc:
1a:12:97:d8:66:91:1b:fc:47:8a:14:4a:c1:a3:d5:
3b:2c:38:e3:22:d7:8f:cc:00:c2:dd:1b:62:f0:7b:
31:51:1a:20:e6:d5:5c:b5:d0:a0:18:91:84:1c:f0:
78:c0:a0:b4:fe:34:62:64:6c:5d:aa:4c:07:6f:41:
20:e4:44:17:00:7c:75:44:38:21:ca:0a:9a:ad:75:
1b:de:51:e3:38:eb:b7:c9:43:0b:e4:0c:92:fb:10:
eb:4d:33:d9:75:b9:6e:cd:bd:45:49:88:56:b8:75:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:18:D5:B2:0D:5A:8B:74:AE:11:62:4F:0C:53:64:CE:5B:79:D3
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:a2:42:b3:0d:79:94:04:60:c9:b6:0d:f5:98:c5:e6:23:
d2:0a:76:50:cd:02:fb:d6:eb:d0:29:14:69:40:66:30:13:27:
85:74:a0:dc:1c:66:2f:b0:49:b9:03:6e:0e:48:83:cf:d6:71:
64:92:fe:36:21:70:3b:4d:d9:2e:7e:5b:f9:c5:6b:92:aa:af:
f4:0e:2d:2e:77:92:db:43:4c:b0:cd:0d:3a:50:f5:06:f0:2b:
ea:4d:a8:81:6c:cd:d3:bb:a1:ba:bb:c4:06:55:0f:da:e3:04:
c2:17:ee:cb:1f:10:12:4a:34:0a:33:cf:c7:6b:52:3a:26:d1:
2c:e7:ef:c9:8d:6e:ec:19:9c:7b:51:3f:08:dd:1d:82:00:c5:
11:54:27:0a:cb:cb:fd:70:29:c7:ba:ca:98:84:5c:08:ed:46:
64:2f:0f:85:4d:44:e3:d0:d5:ca:5c:b3:24:26:02:55:67:24:
f9:11:ec:05:73:26:04:ab:29:f5:ee:a6:34:40:37:ff:c2:35:
3c:07:01:5c:d1:0e:59:c3:fe:92:3d:6f:6e:93:09:38:c4:10:
ef:dd:03:ad:43:72:31:51:73:78:0a:b3:df:6b:59:4e:c4:d6:
b7:97:f9:ad:48:22:d3:7f:ce:7c:9e:8a:83:30:1a:81:19:87:
40:e2:78:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazcszN6O1KtY8J12B32mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj
Y2I5MjUwHhcNMjYwMzAxMjIwMDU2WhcNMjYwMzAyMjIwMDU2WjAzMTEwLwYDVQQD
EyhiYTI2MThkNWIyMGQ1YThiNzRhZTExNjI0ZjBjNTM2NGNlNWI3OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyKOuIVSqsMpqEgAIbkSFB9h07y5
uLrsT+wU/HnY83kAd4rUyYDtEJpmXB3id2KXzT2KlN8wdTyI9I5K5S7IYCZ7ts3f
QsWUfD1s4gcOfJkNm17YbzcKIRJMmiRp8XM3jAkttGGx95bNMYjPqGdJQU71GIrm
giEwJGmT5kTPKBk83xG30T0wKozacTAY2bTo/H3EdtwaEpfYZpEb/EeKFErBo9U7
LDjjItePzADC3Rti8HsxURog5tVctdCgGJGEHPB4wKC0/jRiZGxdqkwHb0Eg5EQX
AHx1RDghygqarXUb3lHjOOu3yUML5AyS+xDrTTPZdbluzb1FSYhWuHUM2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLomGNWyDVqLdK4RYk8MU2TOW3nTMB8GA1UdIwQY
MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct
YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw
LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoeiQrMN
eZQEYMm2DfWYxeYj0gp2UM0C+9br0CkUaUBmMBMnhXSg3BxmL7BJuQNuDkiDz9Zx
ZJL+NiFwO03ZLn5b+cVrkqqv9A4tLneS20NMsM0NOlD1BvAr6k2ogWzN07uhurvE
BlUP2uMEwhfuyx8QEko0CjPPx2tSOibRLOfvyY1u7Bmce1E/CN0dggDFEVQnCsvL
/XApx7rKmIRcCO1GZC8PhU1E49DVylyzJCYCVWck+RHsBXMmBKsp9e6mNEA3/8I1
PAcBXNEOWcP+kj1vbpMJOMQQ790DrUNyMVFzeAqz32tZTsTWt5f5rUgi03/OfJ6K
gzAagRmHQOJ4mA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:29 2026 by rpki-client