Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: Ev8ZytQI68ENDduF5HldcXajq3nHqVlfQCcxj3cE9aY=
Subject key identifier: 8A:FA:4C:4A:35:2C:75:66:9B:47:3E:75:BF:4A:64:22:71:40:FC:36
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019CA9EAEA1A91FAEDC75A5757DF40431C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: E2
Signing time: Sun 01 Mar 2026 15:01:10 +0000
Manifest this update: Sun 01 Mar 2026 15:01:10 +0000
Manifest next update: Mon 02 Mar 2026 15:01:10 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: WJpkalFSuZkt0p0fkiZIZtlMeXzpPPQ8a4uh1mJ4V7A=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ea:1a:91:fa:ed:c7:5a:57:57:df:40:43:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: Mar 1 15:01:10 2026 GMT
Not After : Mar 2 15:01:10 2026 GMT
Subject: CN=8afa4c4a352c75669b473e75bf4a64227140fc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:05:4f:5c:86:ca:b8:e2:9f:79:79:3c:61:
c4:f1:80:74:d2:52:07:7d:ca:0c:d2:e4:cc:da:d5:
5b:2c:93:a5:f3:51:94:c8:02:fd:a3:07:17:b1:dd:
93:9e:4c:ae:82:29:7e:be:b6:bf:f6:40:9d:c3:91:
14:23:d0:3f:57:0f:dc:75:3e:9c:41:45:aa:60:ad:
8a:03:bd:b9:52:a3:9e:46:91:e8:4a:ac:c1:63:05:
a4:13:ca:1a:e4:2f:0f:64:a1:36:1d:b2:a8:cd:f3:
27:f9:f4:a1:06:3e:9f:04:d1:8e:b8:53:20:69:39:
14:2b:74:a0:dc:1f:62:3d:f4:9d:bf:c9:4f:bd:ea:
37:88:50:47:6d:b9:bf:07:0a:16:2f:98:46:36:ae:
52:9f:4f:c2:28:91:fb:c1:e5:87:77:70:3c:d8:87:
5f:3a:ef:b0:f7:32:8e:8d:75:3f:a1:bf:6c:24:4c:
d6:83:16:d1:70:59:1e:d3:c3:99:eb:dd:4b:57:cc:
72:21:6f:e6:22:fc:13:de:66:20:d0:f7:a2:d6:99:
84:15:85:d2:15:46:c8:4b:e8:70:ee:b8:bc:92:f0:
fe:8b:55:87:93:a5:6c:1a:6a:fb:1b:31:ef:35:72:
42:8b:9c:87:29:eb:1a:02:11:55:27:75:fd:5a:5c:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:4C:4A:35:2C:75:66:9B:47:3E:75:BF:4A:64:22:71:40:FC:36
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4a:b7:92:18:ca:ed:26:4c:93:65:10:36:d7:8c:9d:31:ba:
0b:10:90:d1:f7:f3:78:fe:bf:36:4d:88:64:e9:f9:6b:e3:c5:
cc:ea:4b:f1:91:43:36:32:78:8a:a2:95:65:23:c2:6d:24:fe:
af:e7:ee:ef:0f:32:4f:a0:a2:e4:4c:05:aa:62:6e:25:62:18:
d9:2f:5c:1f:7e:08:a9:e5:ee:21:c2:03:c4:2e:f5:46:3a:10:
ad:79:5c:16:85:9d:2b:f2:14:1a:9d:8d:2b:32:65:92:90:ef:
9a:5a:d3:cc:09:21:3e:d2:0b:57:8a:5f:08:87:49:d3:bb:02:
ca:b0:d2:46:60:b4:40:5c:68:9e:f1:24:0f:73:6a:d2:9c:e3:
7e:ff:9d:dd:a3:7a:93:f5:5e:ed:d2:91:78:12:ec:8b:ce:96:
d9:22:1f:db:f4:03:1f:6c:b6:72:a4:c3:58:e0:97:08:ce:06:
5d:9c:44:0e:d9:8e:1b:f7:1c:b1:5d:c6:b1:12:76:c9:f7:46:
b9:ea:17:38:d3:d3:f3:09:94:98:94:ac:f4:49:6b:a9:35:91:
f8:53:30:1b:fb:71:28:38:b0:e9:48:06:92:3d:60:41:22:3a:
61:6c:9b:24:22:58:b6:d8:3c:6c:4b:6c:3e:d4:54:95:fc:ca:
f1:35:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:54 2026 by rpki-client