Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
File: Mr-31eND3M5zBuKyXdm1b64-u3Q.mft (raw, json)
Hash identifier: hxtkmu2vhhdhCUN31Q4agBsrRRt2ZVtudriOM16epck=
Subject key identifier: 94:5C:A3:FA:6F:53:E5:16:6B:9E:E9:54:0E:4B:5B:63:70:68:60:50
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019FAC760744939F27CB6C05ABAB22406B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:43 +0000
Manifest this update: Wed 29 Jul 2026 06:00:43 +0000
Manifest next update: Thu 30 Jul 2026 06:00:43 +0000
Files and hashes: 1: FcPMIoPmzJT6cYZN45zD03JmVpY.roa (hash: CvF65WWlzyWCGwqsSywdtwSS7TvZPtBrP2enkrOcLNg=)
2: Mr-31eND3M5zBuKyXdm1b64-u3Q.crl (hash: Lt1s/8BGSxY+wryg5986Cm614snVwUk38q7JUtIV0so=)
3: OscYL73h55Z0B61noFD4qYrrbGI.roa (hash: Ooxyna65i+JPE2g1xtm5Wvgl6Sqy4X/WFD6fBLaXenQ=)
4: VzuCMamxcLksT-c8ez03Zz3UtuU.roa (hash: RfEdIxFmEpELeLDfYcseA+CWkgdvpHjnwGWtik3G0Bg=)
5: dxz2oUPeADKtK52unfiT89vX5pQ.roa (hash: 7XE8Qjjg65fe2gUYJJrV1UUTDMRNQRh6r1HRYFcpsu4=)
6: hmsBFz-YyzRBrLpumBRqasGjH8o.roa (hash: NrbNQ2GHKlPvD7HcfJk7MKBkUFu/QcXxwsZqxbA7gWE=)
7: leOu66pCcimC66Ne7uBGrPecCwE.roa (hash: a2Bg6IsECRkTthTeRBGOiVOCxSJ1nYMpEQHgiLkn2Vg=)
8: nACgEvzk8fUHLTFU1R4PsTADQ54.roa (hash: AU8R28XoB0eNxbBjK92nnxmDyXYvP8BzgFGcUZGqGDc=)
9: uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa (hash: xUsnHAqc45PDBJI9W1Q0WWyWxZ/wh0Cqvc+48QO7JKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:07:44:93:9f:27:cb:6c:05:ab:ab:22:40:6b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 29 06:00:43 2026 GMT
Not After : Jul 30 06:00:43 2026 GMT
Subject: CN=945ca3fa6f53e5166b9ee9540e4b5b6370686050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:93:e7:2c:84:0c:22:a0:29:e0:2f:ef:3c:
96:db:73:e3:e1:85:40:d5:4c:ee:47:32:87:e9:ee:
21:a0:b1:c9:f9:9a:2c:9f:bb:2d:e7:ea:60:87:c3:
92:fb:a2:45:d5:ec:ea:73:55:ab:05:51:6d:93:de:
28:c0:1c:ac:09:b7:53:2d:20:28:2e:03:b3:48:16:
19:3b:09:10:f8:53:f9:6a:02:7f:0a:50:d8:94:4a:
cb:a3:e7:e1:be:bd:5a:e5:3c:b1:69:d5:80:a6:2e:
7b:59:fb:77:2b:b9:10:7d:0c:29:17:8f:63:ac:92:
64:d3:af:ea:dc:cb:44:5e:85:30:b0:a9:16:c5:5d:
d8:ae:11:d2:23:42:7b:20:11:07:bf:7a:37:52:23:
c7:a6:24:47:5f:49:61:9a:84:86:15:4a:7e:26:0d:
8f:3e:7f:ff:c4:01:ed:a8:59:c9:c3:f8:53:8d:b3:
49:ee:11:02:bd:2f:85:46:cb:6a:9b:ab:77:97:23:
80:bd:8a:47:a2:23:35:fe:ed:d4:7b:ea:95:06:f2:
68:37:0d:57:17:78:90:1f:3d:5b:45:e7:2d:e4:b4:
82:20:a8:49:b6:45:69:03:6b:79:44:93:ad:a2:e9:
58:3e:f9:57:64:42:34:aa:67:c9:95:76:98:6c:08:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:A3:FA:6F:53:E5:16:6B:9E:E9:54:0E:4B:5B:63:70:68:60:50
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:1d:f4:50:ec:a9:31:f4:05:f9:75:be:6b:9c:39:df:32:
74:c9:d4:9f:1f:3c:d5:26:1f:6a:d2:0c:b0:d2:4f:44:f0:fa:
37:4a:80:e2:c2:f1:01:fc:a8:c0:13:9e:1d:ad:8c:51:8d:c7:
1d:e6:0e:e3:59:ef:74:16:b5:6d:02:2e:df:b8:bb:26:fe:c6:
0b:0e:35:b6:7f:2b:76:4d:93:8c:e5:72:bc:24:4b:45:43:14:
5d:02:53:3a:54:41:d3:e9:45:ba:c8:25:d1:99:6f:c7:2b:8b:
ef:d4:a6:c2:79:c9:bc:45:5e:08:3f:f7:46:47:da:8e:3e:66:
b0:42:4d:fe:99:03:29:21:43:1c:56:5e:39:11:11:7d:8d:91:
16:18:bd:62:b1:6d:bb:db:9c:4e:cf:f9:f1:6f:ed:86:c9:fb:
37:cc:aa:50:b7:19:c5:14:9a:59:67:3f:c8:27:9d:98:6c:14:
86:6b:f7:8b:3d:00:92:a8:6d:e0:24:9d:09:db:71:4e:9c:ae:
de:5d:69:f3:3f:77:f3:45:31:51:7a:62:97:a7:d1:11:ed:e4:
31:69:8d:d4:a0:1b:83:11:e8:d4:88:51:77:d2:63:c4:3b:ce:
d5:7b:60:bf:21:2c:80:95:99:c9:a3:c4:77:e7:c9:74:4b:4a:
3e:07:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:20 2026 by rpki-client