Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: DE40DIcPjdkMlv9xGdmtkkFJ7wqHI0VG8HUW+YcTKR0=
Subject key identifier: 5B:70:F1:9B:1B:0A:87:16:35:BC:48:7C:8A:5D:19:E1:3A:A3:B5:80
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 019CAB6B67D0194E0EC3870DD99A4C892792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: JNVmnWdv3U8OEx9BDgmXjGN44l4.roa (hash: Uit/JT9xGXAaaHemsQzbnstd/JbudEL8hArIWWQ4/xA=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: G/x1ow0Chfrxgrq9ONPj6NwabaD7HpYCCMbZePKu8GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:67:d0:19:4e:0e:c3:87:0d:d9:9a:4c:89:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=5b70f19b1b0a871635bc487c8a5d19e13aa3b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:94:8b:9c:98:a4:a7:6a:be:69:74:51:c6:
35:e2:e1:40:4d:72:c5:98:9e:6f:ea:51:61:06:45:
02:70:d3:81:eb:3d:15:b9:97:91:65:6a:82:ac:ed:
93:cb:51:2c:ac:8f:87:b8:14:7a:9f:42:3a:c6:0e:
45:99:41:ca:3a:32:e5:51:03:cb:3d:ab:09:f7:e6:
de:c6:ab:1e:4b:28:c4:87:2e:73:c7:60:d4:8c:62:
68:e0:84:49:84:bc:77:83:ad:8e:d7:af:34:80:89:
5f:ca:3a:4e:52:4c:73:42:95:95:a3:96:7c:d4:55:
4c:cd:ab:94:d5:ba:4a:1c:bd:81:48:a3:b4:10:80:
dd:3a:96:97:6c:ab:f9:3c:e6:a7:3d:9f:a8:48:a0:
31:37:90:df:df:f9:17:37:9d:2a:6a:88:1b:d1:6a:
41:e2:1f:a7:57:05:c3:60:22:e2:d2:58:35:2b:f4:
3c:8c:fb:cc:74:89:6d:64:41:a0:db:f9:d9:6b:be:
fb:a9:a6:80:0a:99:d3:a9:fc:95:ca:8a:8d:0d:95:
b8:9b:1f:f6:3b:c4:13:d6:fa:ce:20:7e:4f:0a:12:
fb:02:2f:84:a7:c6:80:56:11:6e:16:59:31:38:9c:
e8:69:cf:32:94:25:26:6e:80:76:6a:ee:1a:ab:24:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:F1:9B:1B:0A:87:16:35:BC:48:7C:8A:5D:19:E1:3A:A3:B5:80
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1e:f6:86:2b:45:df:ce:36:1a:79:81:5c:a0:35:ef:48:8e:
5d:c9:1b:6b:a5:e2:fd:43:18:e3:45:d6:9c:59:0a:bb:65:cf:
7a:4b:42:00:31:1e:16:94:81:09:cc:c0:d8:f6:2f:3d:27:d0:
ae:de:b9:ed:cf:26:32:d6:b9:1b:1b:1e:be:98:12:9e:65:f4:
3e:c9:d0:8d:a7:d8:a2:df:ce:a6:8d:f9:a1:85:19:f2:12:42:
e7:ea:da:06:94:60:df:d5:48:aa:08:27:b3:c7:4a:e4:b2:8f:
1d:e7:aa:19:3f:b1:38:db:fd:b2:30:53:96:a4:6c:c5:00:01:
bf:1d:27:e5:7a:5f:43:46:b2:b9:b2:c4:1c:86:d8:dd:97:23:
ab:0f:a1:af:c1:8e:89:25:b9:61:1f:6a:b2:3f:25:0f:9a:dc:
a9:f8:28:3d:e8:64:b2:ab:8d:91:0d:21:6f:e6:68:c0:e2:84:
93:c9:37:76:cb:c8:8b:b9:45:26:e2:6f:78:20:a2:d8:ad:c6:
59:2a:39:cd:a2:4d:1a:06:0b:51:8a:c1:43:65:ad:56:db:62:
de:16:dc:34:ba:3f:d2:10:2a:7d:a1:2f:8d:ae:d6:96:73:7e:
bc:59:6a:9a:66:1b:a1:8f:a8:90:02:e9:0d:a7:66:5d:2c:f8:
53:1e:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:53 2026 by rpki-client