Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json)
Hash identifier: prBStXroCWqgjjbNFnrNploS0sat3K2d0DRf9J9qlmc=
Subject key identifier: 66:36:54:18:8B:FF:32:65:51:B4:AA:9F:58:B9:CE:A3:5C:89:00:A5
Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Certificate serial: 019D97743C5B3CC98BD78B3B09C231A35CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
Manifest number: 015D
Signing time: Thu 16 Apr 2026 18:01:10 +0000
Manifest this update: Thu 16 Apr 2026 18:01:10 +0000
Manifest next update: Fri 17 Apr 2026 18:01:10 +0000
Files and hashes: 1: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: S/s0gbVpIzCbkHOwmWrg2k2fV8T7NEgjwsw1k1x0290=)
2: l7egY_wNAkepume4ZzWDHbxv4bs.roa (hash: DN9SV8URpN2FxbcyPzVw5rcuzd5lDa4YbzPses8xkCw=)
3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:3c:5b:3c:c9:8b:d7:8b:3b:09:c2:31:a3:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78
Validity
Not Before: Apr 16 18:01:10 2026 GMT
Not After : Apr 17 18:01:10 2026 GMT
Subject: CN=663654188bff326551b4aa9f58b9cea35c8900a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:a3:92:13:2b:e5:c3:a9:2e:ff:b1:65:19:
41:f0:d1:03:30:57:34:3e:2d:0b:a5:16:dd:b8:4b:
d0:8c:24:8e:71:fc:8c:55:3b:fd:42:c4:43:bd:f0:
55:c3:f8:c3:7e:5c:8e:af:9b:aa:32:80:e3:c5:36:
2d:97:cd:41:8c:a8:34:8e:09:f4:ff:27:de:9a:55:
c9:ea:d0:66:ad:07:bc:e2:d0:9e:fe:5b:d4:d8:3b:
1d:e5:7f:e6:0c:83:d3:9a:c5:a0:91:1a:83:11:bf:
ea:f4:b0:a3:ce:b3:a2:bb:f0:7f:d6:31:82:d6:ba:
4a:e5:50:bb:d1:08:e8:dc:9f:2e:a3:91:e5:12:22:
f2:72:a2:3c:b1:7f:1e:9b:af:03:7b:2e:eb:4a:49:
97:1d:15:3a:cf:e6:f0:19:4a:b3:1d:f8:43:d7:ab:
07:8e:5d:5a:35:2e:04:90:ab:4c:e3:96:3c:8f:d1:
00:c3:c2:b6:ee:c0:4f:05:ee:35:02:20:d0:2a:82:
00:29:ba:31:84:b7:ef:4d:ea:64:c8:ec:2c:fc:55:
90:79:65:72:6a:15:eb:cd:4e:38:ed:a9:08:cd:31:
64:03:f0:3b:a7:b0:0a:f8:6e:bd:bf:bf:8b:4e:7e:
f3:76:35:85:18:d2:11:6f:fe:89:cb:93:36:e1:39:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:54:18:8B:FF:32:65:51:B4:AA:9F:58:B9:CE:A3:5C:89:00:A5
X509v3 Authority Key Identifier:
keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:e7:89:ee:fa:c2:b2:9b:51:8a:3b:0a:9f:4f:18:6e:1d:
f3:ff:74:dd:c5:36:85:33:76:23:06:c1:31:80:df:c7:ff:80:
97:59:38:c1:e2:66:4a:ec:70:ad:7a:a7:87:90:32:ba:c7:4b:
cf:e3:bd:b5:4a:3b:37:dd:f4:b5:b6:e2:4c:89:be:41:a6:14:
16:b6:b8:28:da:db:89:5f:df:c4:b9:31:de:ef:fe:77:32:81:
f0:1d:9f:16:77:14:d4:5b:ca:a3:ad:e0:4b:2b:8c:63:6d:d9:
68:4d:c4:25:75:4d:19:25:79:8b:ac:d8:ef:46:6a:5c:be:de:
f2:21:d4:d4:6e:56:3c:2c:69:21:36:46:42:61:01:7a:82:78:
91:e4:ad:b4:b7:5e:03:ab:f5:74:61:2f:e9:2f:16:87:7b:20:
9e:6c:59:a9:03:36:07:e2:24:80:30:a5:65:81:e8:a3:aa:95:
b6:d1:08:f1:08:a9:9d:a8:94:80:59:4c:71:db:74:66:0d:c6:
74:b3:22:41:2d:d1:0d:1c:cd:79:d8:02:0a:37:2b:ca:bc:15:
4c:99:d6:94:63:7d:a5:2f:93:9a:a1:6a:e3:51:51:26:1a:1b:
25:7a:6e:44:a1:91:b6:6f:7b:8b:71:02:96:0d:9c:27:b3:94:
16:2d:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:59 2026 by rpki-client