Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: +bskgqMk6wSZbWhlMQoTjDU0HYyZrV/KpTlQTG/S9KM=
Subject key identifier: C1:D2:A5:CF:28:F2:AB:80:30:A0:C4:9E:E5:8F:9B:8F:90:2B:94:5B
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019CABD8E2D2D7AE1222D1E44A57E04503A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: E3
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: lgNxKcN5rqVsxkMJL56VoRcj57KnJ1saJ+eiLXTnifM=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e2:d2:d7:ae:12:22:d1:e4:4a:57:e0:45:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=c1d2a5cf28f2ab8030a0c49ee58f9b8f902b945b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:6b:dd:4a:06:c8:0e:43:95:35:8d:c4:52:
74:ee:03:b7:6b:89:23:77:19:6e:fa:e0:33:e4:05:
4f:4f:cb:fc:ee:40:d4:64:e0:2a:0b:db:43:75:e2:
f8:4d:62:8b:ff:f6:eb:21:a6:87:fc:14:32:8a:de:
e9:3a:2b:41:e7:71:59:d0:eb:b3:05:0b:3e:b2:c3:
30:e5:18:11:3d:14:13:97:e8:d9:ff:d4:44:65:f6:
3e:e7:d9:e1:0a:e5:f8:05:61:e4:ce:ca:b2:8e:64:
4a:de:18:56:d6:80:aa:1a:de:22:5d:e2:c5:3a:ee:
a7:33:56:f6:74:42:cc:56:d9:fa:b4:cb:cd:79:05:
f3:9e:f7:a5:bd:6e:29:b3:bd:63:b5:f6:5b:56:ba:
7a:8a:fc:1d:e0:c0:6b:bb:86:77:23:36:b7:d7:74:
79:7b:68:50:4b:dc:25:0d:fb:0a:bb:1a:a0:a4:59:
29:7f:99:04:2c:01:1a:2d:a7:20:44:aa:f7:40:26:
c0:cf:22:86:1d:87:cc:3c:19:00:e3:be:1b:ff:98:
6d:eb:15:56:55:53:48:2b:83:fa:ff:7a:23:9a:d6:
52:55:54:dc:4b:4e:61:eb:01:a2:e0:87:70:b5:7d:
af:54:51:fb:5a:76:69:98:85:ec:66:5f:6e:f6:88:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D2:A5:CF:28:F2:AB:80:30:A0:C4:9E:E5:8F:9B:8F:90:2B:94:5B
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:79:30:6b:84:bb:be:be:c2:7f:c8:1e:3e:1d:42:c3:38:6b:
aa:81:ff:01:fa:05:1a:bc:a1:a0:8f:29:fa:d6:9e:b8:fa:4b:
ae:df:15:45:6d:aa:4f:fc:bc:bf:2e:66:c6:38:90:37:c9:d6:
15:b2:91:0a:a1:d4:e6:81:44:22:0f:ed:92:75:5f:89:d3:15:
4e:d3:b6:60:90:e8:76:07:0a:35:49:da:8e:6a:81:12:4f:02:
44:70:e0:a0:e6:19:5b:e3:79:64:a2:fd:d9:70:16:dd:a8:34:
3e:b8:e8:e4:c0:40:c4:62:3c:14:27:32:aa:c5:5a:1b:80:7b:
d0:c3:8b:fa:96:dc:89:9c:ef:cc:61:c9:e2:60:2a:0c:c8:e9:
f1:78:28:22:70:99:54:c0:e7:47:b2:9c:6a:db:61:9b:2a:b5:
4b:70:b4:13:b8:a2:20:6c:97:1e:a2:d7:6a:58:e6:dc:a4:2e:
6b:0d:01:de:f6:11:10:0c:2d:7f:94:84:02:0c:e7:75:20:72:
87:f5:61:a1:0e:7b:95:d7:be:29:64:88:36:7b:c8:8d:c2:60:
89:08:81:64:39:76:99:48:28:a7:e7:cf:47:79:b8:c9:95:ff:
8d:0d:2a:de:9d:f4:5f:19:89:bf:aa:26:9f:be:73:4f:05:26:
df:81:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:28 2026 by rpki-client