Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: qsTukXOARItu5Wv3lIEtAc2Gwp/fIzrd31/c4cR1OaM=
Subject key identifier: 00:89:6B:45:93:A1:8B:AE:EE:A3:AA:A3:D1:80:3B:CB:C1:73:07:BE
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019CAAC633F3D396E175C909C610527F4D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: fyYj6t0+QV8hFlPz16xGA6QIPGd5sFPc4cyP3w7lNdc=)
2: qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa (hash: Nfcf0dxf81UBVMjoGjSg559+Hju5Dln2RKJKCrFeGVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:33:f3:d3:96:e1:75:c9:09:c6:10:52:7f:4d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=00896b4593a18baeeea3aaa3d1803bcbc17307be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:49:21:e3:be:84:41:95:23:b5:49:a9:31:
0e:02:4f:73:2e:6a:8d:2e:94:7f:e2:29:08:9b:5d:
d1:e6:d6:dc:2a:45:8f:fb:0d:14:dc:a1:25:7b:f9:
e7:00:b5:7a:25:9c:72:7d:48:24:5b:74:4c:bb:ac:
87:c6:52:ed:10:74:c7:27:6c:64:77:f9:c4:14:1e:
89:4e:9a:cf:6a:3e:31:a0:97:63:e8:0c:ca:f6:69:
7f:1f:97:cd:32:16:fb:66:9e:12:ea:26:77:0e:3a:
98:90:50:32:2c:63:27:14:dd:d4:24:bb:df:85:c0:
72:c2:f2:e4:ff:ad:fa:7f:b6:81:38:08:38:98:a7:
76:ca:d1:b6:da:49:27:91:7b:5f:36:1d:9f:ed:9d:
fb:50:27:1c:51:87:0c:72:51:7d:e6:61:cd:18:58:
e5:9e:ba:6d:61:b6:e1:89:d9:ca:6c:83:7d:40:c8:
03:e7:da:eb:5a:da:6e:0b:7a:d1:83:c6:00:b0:fc:
fc:d1:86:cb:ec:c5:b6:f4:a8:12:09:c0:5f:df:e2:
fc:e9:74:8b:f9:81:fb:29:b1:e1:a9:67:05:c6:c0:
47:c4:71:5a:56:d7:8c:f2:a1:c9:dd:ee:c1:74:2a:
d0:28:d7:a8:e8:7f:17:3d:ca:b1:c8:92:f6:fa:c7:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:89:6B:45:93:A1:8B:AE:EE:A3:AA:A3:D1:80:3B:CB:C1:73:07:BE
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2a:73:13:64:07:bf:71:da:7e:f8:36:c4:1f:87:1e:5e:c6:
fc:1b:69:19:76:77:89:67:1c:be:d1:1e:7a:8e:6f:e2:ca:71:
56:ad:c3:d4:da:48:ae:fe:bb:b0:37:ba:b5:c9:e7:51:b4:d2:
ce:ce:79:88:c1:4c:98:63:3b:44:c3:e0:8b:49:3d:f9:6f:bc:
69:e5:0a:f6:05:de:57:fe:0b:50:9f:84:67:3c:5d:cb:a3:90:
b0:72:f6:64:08:42:9e:e3:b0:d3:55:48:2e:07:73:e4:4a:38:
c1:21:ad:f0:7b:e7:3a:93:a9:dc:d1:7c:4a:76:3d:92:3f:3d:
79:50:12:a5:a9:b3:d0:26:b4:1e:42:bd:83:17:30:50:1d:c1:
ad:da:a6:15:40:41:03:a0:ef:a7:ae:69:6c:cd:d1:56:3a:d3:
cb:77:57:65:7d:99:a0:17:08:57:f0:7c:ee:c1:69:6e:77:f2:
00:d0:7c:72:8a:f2:e9:20:99:14:7f:6c:7b:61:61:c0:ef:d0:
1d:c9:ce:de:47:8e:0a:d6:e8:94:46:7e:0c:85:75:23:7c:cc:
ab:d2:22:eb:d1:09:2f:74:c6:ae:dc:e2:d7:b1:ac:f6:db:c4:
91:d8:b9:0e:c3:4a:8a:16:46:d6:9e:92:09:a0:e2:4b:04:6d:
a5:79:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:24 2026 by rpki-client