Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: b5YPWzUqf/QYLq6mI6POWO+std8E7PWdremTTlCaMxw=
Subject key identifier: 97:86:82:F6:B0:FE:ED:B9:FF:58:78:FF:7B:EC:93:4C:2D:F4:53:01
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 019D97AAAEC72BDE25ED3D0265AA3A415DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0F3A
Signing time: Thu 16 Apr 2026 19:00:38 +0000
Manifest this update: Thu 16 Apr 2026 19:00:38 +0000
Manifest next update: Fri 17 Apr 2026 19:00:38 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: 4SgfvxCmGZ2hLKyPIJGl/UksGpd1x8EFhUVUMnqJ9s0=)
2: olXqqQrFh2xVArtOsvn2MBA_a1Y.roa (hash: aPxQM0pZgD7GeT16zbXpiKlMDfDXjek/Ix/Gf5xSSjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:ae:c7:2b:de:25:ed:3d:02:65:aa:3a:41:5d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Apr 16 19:00:38 2026 GMT
Not After : Apr 17 19:00:38 2026 GMT
Subject: CN=978682f6b0feedb9ff5878ff7bec934c2df45301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:53:db:fd:eb:da:34:26:80:85:c1:d3:29:
a2:9b:50:3e:a0:b0:08:84:1f:0b:c4:8b:83:30:08:
4f:79:82:87:73:08:2e:4e:1f:f5:a6:68:fa:40:59:
58:5e:fb:a0:dc:f9:1e:82:bc:cb:3d:3f:13:b6:3b:
51:a4:e5:6d:e8:e9:db:19:88:28:33:31:9c:b9:5b:
41:d6:ef:62:fd:b3:f4:9b:68:f2:c0:17:d4:43:0e:
87:28:f0:57:8c:ea:ef:5a:bf:fb:79:6d:12:97:ca:
66:db:b1:d0:76:5d:46:19:0e:1d:1e:19:8a:87:61:
e9:af:05:cc:44:9d:63:50:fc:c3:f2:4d:ac:cb:5e:
4e:80:ba:72:25:81:d8:43:4a:55:05:31:3c:26:27:
38:f0:a6:26:af:dc:c9:5b:fa:c0:31:3a:1a:85:7d:
0c:8a:93:9b:39:5a:53:50:e6:e7:4e:0d:05:42:4b:
ca:1d:c7:c7:90:90:c9:13:d2:14:9d:0e:be:48:fc:
06:14:54:27:06:e0:8d:c7:b7:d9:42:c1:b9:50:54:
88:a4:af:f9:b7:19:75:87:9e:0f:25:fd:1e:99:bc:
e9:12:a1:a0:30:a9:c1:d1:07:77:a4:05:11:e3:cb:
1e:4d:2c:d2:8c:4f:46:e4:3e:f9:a5:8d:65:a5:74:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:82:F6:B0:FE:ED:B9:FF:58:78:FF:7B:EC:93:4C:2D:F4:53:01
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6a:02:b8:d5:c8:eb:a6:84:7b:3a:3d:15:f6:20:82:f9:ad:
73:55:8d:dc:59:6b:55:ef:63:0d:ba:92:bd:0d:82:6b:f6:b6:
14:a3:44:4d:49:97:c9:f0:62:fe:8f:80:dd:95:f2:9a:55:47:
d5:f2:9c:c3:89:4a:d2:1c:fc:b6:a5:cc:54:7d:5f:de:81:20:
d8:11:68:4f:c0:f3:fb:a6:da:2f:ba:c5:3f:32:ad:40:eb:81:
66:8f:89:47:a8:39:e9:46:7d:b5:9a:94:fb:51:7a:d3:9d:06:
0d:93:5a:23:c1:74:47:ac:c0:0d:14:f4:7b:9c:0b:68:07:72:
de:2b:0b:cc:fc:47:b1:b7:c3:4c:96:cb:0e:bf:e1:1e:00:18:
08:d5:0c:93:7a:68:1b:1b:05:8b:4f:5c:d0:5d:e6:0a:0d:18:
0a:1b:df:43:ed:eb:31:54:80:31:46:d1:96:1c:b7:67:ec:7f:
40:89:09:c4:f8:27:90:a3:42:25:37:d5:b3:f8:39:37:14:56:
fb:ce:ea:1b:a0:23:9e:17:7e:e9:ef:70:2b:a5:09:09:f3:41:
47:e4:dd:3f:eb:c1:b7:6b:de:db:4e:19:c0:7f:55:f7:6e:d2:
ac:0b:21:90:42:d9:58:ef:a4:c6:86:28:ca:ef:5d:e9:99:94:
de:7f:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:47:37 2026 by rpki-client