Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
File: Mr-31eND3M5zBuKyXdm1b64-u3Q.mft (raw, json)
Hash identifier: 6BNhCdBNfm4WivjjtRTPEhcIJa1/xUJyboHrIG5bzYw=
Subject key identifier: D9:A3:67:86:D1:D7:5D:A6:03:3A:A2:6C:A2:CE:C5:AF:7E:CD:53:6F
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 01A0D5DD76372DC05923E345076E0AEB78E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:00:55 +0000
Manifest this update: Fri 25 Sep 2026 00:00:55 +0000
Manifest next update: Sat 26 Sep 2026 00:00:55 +0000
Files and hashes: 1: FcPMIoPmzJT6cYZN45zD03JmVpY.roa (hash: CvF65WWlzyWCGwqsSywdtwSS7TvZPtBrP2enkrOcLNg=)
2: Mr-31eND3M5zBuKyXdm1b64-u3Q.crl (hash: w6gFV4VYr113Vq2GOeSCQiEMJ06BrzGTGyCwvVIFCRk=)
3: OscYL73h55Z0B61noFD4qYrrbGI.roa (hash: Ooxyna65i+JPE2g1xtm5Wvgl6Sqy4X/WFD6fBLaXenQ=)
4: VzuCMamxcLksT-c8ez03Zz3UtuU.roa (hash: RfEdIxFmEpELeLDfYcseA+CWkgdvpHjnwGWtik3G0Bg=)
5: dxz2oUPeADKtK52unfiT89vX5pQ.roa (hash: 7XE8Qjjg65fe2gUYJJrV1UUTDMRNQRh6r1HRYFcpsu4=)
6: hmsBFz-YyzRBrLpumBRqasGjH8o.roa (hash: NrbNQ2GHKlPvD7HcfJk7MKBkUFu/QcXxwsZqxbA7gWE=)
7: leOu66pCcimC66Ne7uBGrPecCwE.roa (hash: a2Bg6IsECRkTthTeRBGOiVOCxSJ1nYMpEQHgiLkn2Vg=)
8: nACgEvzk8fUHLTFU1R4PsTADQ54.roa (hash: AU8R28XoB0eNxbBjK92nnxmDyXYvP8BzgFGcUZGqGDc=)
9: uKI2Rc-ZbgUBbJX2_DWcQ8_p5eE.roa (hash: xUsnHAqc45PDBJI9W1Q0WWyWxZ/wh0Cqvc+48QO7JKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:76:37:2d:c0:59:23:e3:45:07:6e:0a:eb:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Sep 25 00:00:55 2026 GMT
Not After : Sep 26 00:00:55 2026 GMT
Subject: CN=d9a36786d1d75da6033aa26ca2cec5af7ecd536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:e1:fc:e2:af:e7:f7:b1:aa:df:f0:e4:63:
fd:a9:7f:25:fc:c8:11:3f:66:ec:ae:60:7d:dc:03:
b8:99:b6:ef:5f:a4:96:49:7c:45:28:09:e0:4b:d5:
e9:9c:1c:3d:9c:07:c0:55:90:98:2b:d0:9c:c9:c1:
1c:95:07:08:12:e7:e3:ac:9a:e2:2f:e1:6c:c5:59:
94:0d:e0:3b:97:d7:52:f0:30:90:6e:58:23:f9:a9:
f9:2c:af:37:9e:6b:6c:33:34:d3:8b:42:f3:41:fd:
b8:65:87:54:53:eb:db:da:4d:5e:69:7f:5f:56:67:
99:8e:1e:20:fb:f3:dd:c0:bc:c6:43:ee:95:a8:b7:
27:97:91:56:58:42:62:de:88:95:bd:ae:17:53:3b:
9b:e1:22:52:e1:ca:ce:47:33:03:6f:f8:b9:a7:2f:
5c:2c:fa:ec:22:6d:9f:40:79:db:21:70:48:33:6c:
45:86:94:1d:00:94:32:ac:54:27:58:a8:87:5b:68:
cd:61:d6:e0:b8:b0:6f:2d:90:bd:1a:6c:60:d4:b9:
0c:fa:cc:d0:03:7f:6b:bf:43:e0:f6:61:e8:b3:cd:
7e:cf:5f:3e:ac:f4:50:ef:79:e8:fa:ca:19:6b:d9:
ef:d4:2f:1d:b9:6f:a3:2a:9e:6a:2f:10:35:1f:65:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:67:86:D1:D7:5D:A6:03:3A:A2:6C:A2:CE:C5:AF:7E:CD:53:6F
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:76:02:a9:0e:04:c9:3d:50:c8:54:38:40:69:31:96:f3:87:
4e:95:1f:64:41:79:34:f5:57:8c:bf:5b:b1:a9:67:88:67:ac:
1a:87:b8:85:f4:20:c3:12:94:5b:4c:47:14:cc:67:1f:bf:75:
27:24:94:f5:a4:eb:83:ee:87:eb:0a:34:98:ed:46:0f:12:54:
20:b2:20:1f:82:29:0c:85:c9:a8:f0:26:fe:e2:35:43:11:86:
0a:2b:45:9a:2b:e7:b4:22:8f:85:3f:1d:f9:b1:88:8c:c4:d0:
e1:ab:83:b3:eb:6b:c3:29:bd:8a:74:b7:bf:7d:5e:46:4b:f0:
60:fe:8a:8f:17:a5:97:37:6f:d5:a7:e8:ef:37:4b:10:04:7b:
a7:ee:7e:19:ff:b6:b3:b0:07:a1:0a:14:16:7b:af:8e:71:3b:
d0:8b:a9:c7:ce:4f:41:5a:52:af:5c:db:0c:6f:47:c0:27:07:
af:72:2d:52:e9:50:d7:5a:13:48:f2:5c:f8:14:99:48:69:25:
7e:8f:9c:d5:ac:fa:eb:79:85:0d:d3:c6:38:d4:18:30:93:48:
00:16:ce:89:c8:18:f3:d2:73:eb:d2:b3:2a:27:42:24:d7:ed:
a7:d3:4d:7e:7f:43:96:4e:c1:dd:24:d8:c8:e6:35:25:7d:8b:
77:07:9f:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3XY3LcBZI+NFB24K63jpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYmZiN2Q1ZTM0M2RjY2U3MzA2ZTJiMjVkZDliNTZmYWUz
ZWJiNzQwHhcNMjYwOTI1MDAwMDU1WhcNMjYwOTI2MDAwMDU1WjAzMTEwLwYDVQQD
EyhkOWEzNjc4NmQxZDc1ZGE2MDMzYWEyNmNhMmNlYzVhZjdlY2Q1MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Dh/OKv5/exqt/w5GP9qX8l/MgR
P2bsrmB93AO4mbbvX6SWSXxFKAngS9XpnBw9nAfAVZCYK9CcycEclQcIEufjrJri
L+FsxVmUDeA7l9dS8DCQblgj+an5LK83nmtsMzTTi0LzQf24ZYdUU+vb2k1eaX9f
VmeZjh4g+/PdwLzGQ+6VqLcnl5FWWEJi3oiVva4XUzub4SJS4crORzMDb/i5py9c
LPrsIm2fQHnbIXBIM2xFhpQdAJQyrFQnWKiHW2jNYdbguLBvLZC9Gmxg1LkM+szQ
A39rv0Pg9mHos81+z18+rPRQ73no+soZa9nv1C8duW+jKp5qLxA1H2XO1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmjZ4bR112mAzqibKLOxa9+zVNvMB8GA1UdIwQY
MBaAFDK/t9XjQ9zOcwbisl3ZtW+uPrt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXItMzFlTkQzTTV6QnVLeVhkbTFiNjQtdTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt
NDUwZmUzMzU5NWQxLzEvTXItMzFlTkQzTTV6QnVLeVhkbTFiNjQtdTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx
LzEvTXItMzFlTkQzTTV6QnVLeVhkbTFiNjQtdTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3YCqQ4E
yT1QyFQ4QGkxlvOHTpUfZEF5NPVXjL9bsalniGesGoe4hfQgwxKUW0xHFMxnH791
JySU9aTrg+6H6wo0mO1GDxJUILIgH4IpDIXJqPAm/uI1QxGGCitFmivntCKPhT8d
+bGIjMTQ4auDs+trwym9inS3v31eRkvwYP6Kjxellzdv1afo7zdLEAR7p+5+Gf+2
s7AHoQoUFnuvjnE70Iupx85PQVpSr1zbDG9HwCcHr3ItUulQ11oTSPJc+BSZSGkl
fo+c1az663mFDdPGONQYMJNIABbOicgY89Jz69KzKidCJNftp9NNfn9Dlk7B3STY
yOY1JX2LdwefOw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:01:47 2026 by rpki-client