Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File: MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier: ujZ4tdpqBTI+c2rqo67X1Mx0Nd/QM/Cpgd3j/H342Ww=
Subject key identifier: AC:C4:04:41:75:CE:6A:2F:49:8E:4B:6F:29:8C:DC:04:3C:FE:79:3F
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 019CAF47E34CB1AEC5F09E7E0BB9E98E95F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number: 10D2
Signing time: Mon 02 Mar 2026 16:00:49 +0000
Manifest this update: Mon 02 Mar 2026 16:00:49 +0000
Manifest next update: Tue 03 Mar 2026 16:00:49 +0000
Files and hashes: 1: 0PROOXHWtrqTshebWInvLwz5dVE.roa (hash: kuqhwuodobpmINYueeYw21Gf/m1l+ZCaG7GCFJgXBC4=)
2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: dbl3m10iR/lKoMnvK4py0+yhIuKk0HM1TLrdnDko4kQ=)
3: Pky97jBwdyUgYzg1_AI-qFYMT1o.roa (hash: nbaHUKHv0TZLnVM+2128xVj9F0Kn5xH6nruz/6y8MI8=)
4: nge1u5LMthh69_mO6tYKWBjnSBE.roa (hash: qNcn7K4jDXvzhu4do4cfBL/ruII09KDI1rZLPsg+Hug=)
5: yCDwwVBWdVeCJB3paV68yEm0bEQ.roa (hash: jb11BCbq+94ZB4w8Ms7QY8fhTLtofYi5pYcgB+s+Sf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:e3:4c:b1:ae:c5:f0:9e:7e:0b:b9:e9:8e:95:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Mar 2 16:00:49 2026 GMT
Not After : Mar 3 16:00:49 2026 GMT
Subject: CN=acc4044175ce6a2f498e4b6f298cdc043cfe793f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:47:1c:dd:38:64:c7:be:b4:98:87:0f:b6:
53:ac:af:ce:9b:39:05:64:7f:6c:9d:42:71:dd:7d:
c1:06:a7:fb:c1:9d:7a:7c:79:a9:c3:e8:aa:e1:4a:
95:d1:2c:2d:3f:27:de:fd:30:5e:ef:a1:26:a9:c6:
02:bf:0f:65:01:b8:f8:5b:89:82:4c:d0:d0:d4:5d:
6f:f8:b7:2b:72:b5:fa:89:1d:d7:d7:bb:d3:ab:ee:
8a:36:c4:c2:42:af:6a:2a:58:9f:e2:f2:cb:17:50:
ec:00:82:c8:79:84:88:d4:3b:d5:09:e8:ec:bb:d0:
e9:2c:f5:5c:89:cb:6f:68:fb:6d:25:7f:09:90:68:
4a:36:e7:80:8d:9a:4d:3a:f4:6a:dc:f8:f7:21:a7:
38:35:a1:3f:49:5b:84:1c:8d:df:81:ed:86:d9:6c:
4c:5a:80:2a:c9:ed:da:20:68:7f:2c:32:73:65:3e:
55:3f:d1:2d:61:65:4f:a6:ef:21:34:15:89:67:75:
ad:15:db:23:b5:7a:2d:45:ce:a7:71:2b:0e:f6:31:
e9:da:74:1c:95:3e:b4:59:57:a3:0e:b9:bb:30:ec:
c6:20:ff:86:ce:6a:fb:f7:c7:9d:c9:11:ba:4c:56:
bd:36:9f:14:bc:d5:a5:77:8c:d5:9d:59:37:ec:36:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:04:41:75:CE:6A:2F:49:8E:4B:6F:29:8C:DC:04:3C:FE:79:3F
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cf:e1:91:89:d1:be:62:1d:d2:6d:d9:7d:ac:4a:12:8e:aa:
d8:07:63:e5:09:b6:03:ca:14:a8:59:f5:e9:b8:7c:b6:46:4b:
79:0f:e3:c3:f7:fb:51:36:04:b1:7d:0a:20:30:39:4a:ae:da:
af:ee:68:17:fb:a3:5a:b4:75:32:9e:d1:8a:e0:d9:92:46:46:
94:9e:e9:6d:b8:2d:cc:64:f5:ca:95:28:09:54:c7:1a:57:2a:
bb:c6:1a:c3:ab:c3:bd:7c:4c:1f:24:d2:9a:2c:0a:79:29:c0:
1f:92:f8:21:d2:cb:bf:60:e6:80:cd:38:bd:50:bd:60:83:4b:
27:a4:2b:87:a8:95:aa:58:33:ca:ca:6c:b6:8a:5e:f2:dd:78:
3c:5a:d1:b9:d7:58:db:96:86:a4:a8:a7:1c:83:5a:4e:77:c5:
4c:e1:c6:51:e2:c8:31:13:62:db:6d:75:ac:a3:a5:dd:2a:dc:
12:f6:10:3b:fa:b5:40:10:5e:19:ce:af:f7:57:f9:aa:ec:3b:
44:b1:18:2f:20:dd:40:27:87:c8:66:71:f4:1a:aa:c2:58:40:
4b:4e:c5:bd:cd:dc:47:8b:af:06:c4:af:9d:8a:2f:d4:34:9f:
06:5c:49:c2:7c:e6:11:cd:90:5c:7d:b0:1f:82:e8:04:be:5d:
a7:c2:25:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvR+NMsa7F8J5+C7npjpX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5
NjdhMTkwHhcNMjYwMzAyMTYwMDQ5WhcNMjYwMzAzMTYwMDQ5WjAzMTEwLwYDVQQD
EyhhY2M0MDQ0MTc1Y2U2YTJmNDk4ZTRiNmYyOThjZGMwNDNjZmU3OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtRHHN04ZMe+tJiHD7ZTrK/OmzkF
ZH9snUJx3X3BBqf7wZ16fHmpw+iq4UqV0SwtPyfe/TBe76EmqcYCvw9lAbj4W4mC
TNDQ1F1v+LcrcrX6iR3X17vTq+6KNsTCQq9qKlif4vLLF1DsAILIeYSI1DvVCejs
u9DpLPVcictvaPttJX8JkGhKNueAjZpNOvRq3Pj3Iac4NaE/SVuEHI3fge2G2WxM
WoAqye3aIGh/LDJzZT5VP9EtYWVPpu8hNBWJZ3WtFdsjtXotRc6ncSsO9jHp2nQc
lT60WVejDrm7MOzGIP+Gzmr798edyRG6TFa9Np8UvNWld4zVnVk37DY+fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzEBEF1zmovSY5LbymM3AQ8/nk/MB8GA1UdIwQY
MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt
YmQ2ZTNiMDI2YzM3LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3
LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcM/hkYnR
vmId0m3ZfaxKEo6q2Adj5Qm2A8oUqFn16bh8tkZLeQ/jw/f7UTYEsX0KIDA5Sq7a
r+5oF/ujWrR1Mp7RiuDZkkZGlJ7pbbgtzGT1ypUoCVTHGlcqu8Yaw6vDvXxMHyTS
miwKeSnAH5L4IdLLv2DmgM04vVC9YINLJ6Qrh6iVqlgzyspstope8t14PFrRuddY
25aGpKinHINaTnfFTOHGUeLIMRNi2211rKOl3SrcEvYQO/q1QBBeGc6v91f5quw7
RLEYLyDdQCeHyGZx9BqqwlhAS07Fvc3cR4uvBsSvnYov1DSfBlxJwnzmEc2QXH2w
H4LoBL5dp8Il4w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:18 2026 by rpki-client