Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: b2X4yEuigPh8vKmt3U4BnAfzWvMTrodAUH33bm5yx5I=
Subject key identifier: A3:EB:30:B8:24:CD:FC:FA:8E:B3:37:9B:E6:0E:4B:D5:4B:C2:C2:2F
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 019CAC0FCD5EB433BC4256BCAB27A671E61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0EC0
Signing time: Mon 02 Mar 2026 01:00:42 +0000
Manifest this update: Mon 02 Mar 2026 01:00:42 +0000
Manifest next update: Tue 03 Mar 2026 01:00:42 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: tbWc64IiQOF9nJrfC2lv0Lz/R4As+B/Gr9RLwCpao+U=)
2: olXqqQrFh2xVArtOsvn2MBA_a1Y.roa (hash: aPxQM0pZgD7GeT16zbXpiKlMDfDXjek/Ix/Gf5xSSjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:cd:5e:b4:33:bc:42:56:bc:ab:27:a6:71:e6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Mar 2 01:00:42 2026 GMT
Not After : Mar 3 01:00:42 2026 GMT
Subject: CN=a3eb30b824cdfcfa8eb3379be60e4bd54bc2c22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:6e:c3:8b:d8:38:e7:20:ee:2c:78:a0:72:
26:02:e6:1b:36:cf:6a:dd:a7:78:54:91:63:4f:24:
f7:a7:91:16:57:cb:62:ec:ba:75:b6:e1:50:b0:8a:
5f:a1:c0:c6:fb:24:8e:f9:3d:1c:9d:1a:5d:e5:5b:
5f:64:f7:95:63:68:e0:38:15:b6:c0:8b:8b:5d:7b:
3a:35:29:cd:a8:21:de:17:ab:87:86:bb:ae:04:7e:
05:c2:d6:f8:31:32:96:2a:03:e3:23:bd:cc:db:ff:
40:63:8a:fa:78:dc:d8:c9:5b:e1:2c:04:93:3d:42:
42:87:56:60:47:b6:27:c8:50:99:b5:ab:80:c2:a7:
b1:e9:4a:de:86:c3:ac:d3:7f:41:53:f2:3e:f2:42:
f7:40:cd:21:fe:01:09:fb:02:43:3a:65:86:99:0f:
6a:3b:ee:58:d1:89:fc:3a:cb:22:e4:fb:8d:8c:b4:
04:de:e5:42:dd:e3:d9:13:2c:ba:f7:da:f3:aa:7c:
02:43:cf:37:48:4a:74:88:b7:30:16:c5:71:a7:de:
2d:68:56:e3:f9:a0:54:1a:c3:77:2b:75:88:fc:80:
94:43:a8:0f:69:82:5f:73:8c:08:75:88:9c:0e:10:
28:88:dd:a8:c7:8d:fb:13:b9:49:4c:87:b7:6a:15:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:30:B8:24:CD:FC:FA:8E:B3:37:9B:E6:0E:4B:D5:4B:C2:C2:2F
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:56:b0:28:50:1d:78:b5:2d:65:6a:9f:82:3f:4a:d1:22:fc:
d4:c9:9e:4b:4a:55:18:e9:f4:0c:e4:91:cf:64:e2:75:d5:7f:
2c:91:32:2c:0b:dd:c2:49:d5:a8:a3:07:5d:03:71:64:ae:66:
83:08:60:4a:23:89:32:5d:19:c3:d8:30:a1:b2:fc:12:1c:3c:
79:a2:2f:df:8a:f4:0c:b2:6b:29:89:85:06:d2:de:f8:53:68:
92:6f:49:03:61:c3:d0:77:11:67:bd:c6:10:47:0b:fa:55:84:
3d:fa:f3:33:5c:76:cc:91:05:99:5b:6f:76:f7:87:cd:01:87:
9c:4a:34:f4:17:ce:ec:51:5f:97:a1:cb:e1:97:15:6a:31:53:
4e:7d:e5:90:9f:5b:cb:05:ae:b0:aa:56:75:d1:b5:8a:42:4c:
a9:5d:98:b8:02:6b:fe:90:ef:41:22:80:19:cc:b2:14:1b:b5:
28:b3:e8:44:f4:d9:3e:83:a6:9c:70:83:ce:fc:9a:31:73:e1:
90:1a:2d:e1:65:f0:d1:9a:c1:6a:cf:b7:2f:08:a2:81:c7:eb:
91:aa:c1:a7:39:53:db:b5:a5:e5:c3:ac:88:da:94:9f:e7:20:
58:63:bd:b5:46:f8:3d:d4:35:3a:39:71:93:ae:be:4c:39:1b:
e6:ca:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:34:09 2026 by rpki-client