Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: RzUUcG+IX8gzPuF/nrK/uUS3BCLyfHrir2SGQAIFkHw=
Subject key identifier: 15:BF:0E:57:E8:79:AB:F1:18:CE:85:66:FD:03:04:6C:43:37:57:34
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019CABD9066E6D1631C5AB8C99A58CD69D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 1399
Signing time: Mon 02 Mar 2026 00:00:52 +0000
Manifest this update: Mon 02 Mar 2026 00:00:52 +0000
Manifest next update: Tue 03 Mar 2026 00:00:52 +0000
Files and hashes: 1: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: ZJwNX/SZpSlE1ulMZb0YbW8gBYLDat49trr3nJkWILA=)
2: ZmJGOpycOIq2lh2DhvW8htu0jB8.roa (hash: +ARlxopxtUjU1sytN/8Otep5qO7EJAgLyVgrFdmK0Rs=)
3: oEJd0BVsW2fwuqjY3Y6ze5isQfE.roa (hash: +n+CDK7Y745a+xc3pPOkB9KVNRlgLlgagHreMZ7nr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:06:6e:6d:16:31:c5:ab:8c:99:a5:8c:d6:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Mar 2 00:00:52 2026 GMT
Not After : Mar 3 00:00:52 2026 GMT
Subject: CN=15bf0e57e879abf118ce8566fd03046c43375734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:74:e9:9f:e7:0e:19:10:0d:1e:9c:a5:b9:
c2:41:f9:6a:35:20:71:57:42:2e:25:53:0f:9d:35:
b9:cd:7a:35:10:71:c2:f6:81:b3:e6:c9:1c:c2:b2:
1e:7a:5a:d6:91:bb:d9:7e:23:af:3d:b4:5f:c5:c9:
f8:e6:7f:a5:c9:32:60:ba:0e:16:f8:19:7e:0b:77:
0e:27:7a:a0:61:1e:09:e2:6c:b3:9a:1a:91:39:a8:
74:2b:8f:a0:76:b2:8b:72:6c:f9:82:ef:fe:a2:f9:
65:43:98:9c:11:9b:44:bd:80:ee:55:e6:bc:63:e7:
df:34:55:22:91:ba:06:fc:ad:89:aa:9a:55:78:85:
53:fc:95:bd:46:73:33:59:32:4b:9f:c5:d1:3e:5a:
67:40:a3:ec:98:8a:ab:f6:f6:a6:d5:23:a7:60:40:
99:8c:d7:12:ea:ba:94:b8:93:32:be:cb:78:d0:c6:
00:d1:ae:36:74:0a:2c:0b:e9:81:11:c9:ba:10:4e:
d5:15:1b:24:a6:91:4d:92:2c:0e:81:62:98:af:8d:
84:64:be:4e:2a:33:65:a8:9d:8d:98:37:99:ea:3e:
16:8a:90:32:a4:0d:31:c8:bf:51:91:cb:ff:15:93:
de:e4:24:be:5e:67:01:c8:d0:46:12:b2:dc:9b:c5:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BF:0E:57:E8:79:AB:F1:18:CE:85:66:FD:03:04:6C:43:37:57:34
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:80:fb:bc:a3:9b:96:7b:28:5a:e0:a6:c2:71:d0:a4:86:
ad:ec:18:de:db:77:cf:d9:02:d4:cb:36:c0:c9:64:18:31:8b:
da:50:0b:d0:20:1c:3d:af:0f:e9:cd:cb:33:d3:e2:ff:63:c7:
fc:c8:7d:f7:cf:1d:5d:90:09:41:14:df:39:c4:14:b9:cf:1d:
fa:a1:b4:22:8e:dd:37:d5:95:43:5d:21:bb:41:89:90:42:cb:
25:75:bc:75:4c:90:70:1f:c8:3d:c3:6d:f1:e2:24:ff:80:3a:
bc:59:59:5a:c0:86:d1:49:28:68:c2:5a:c6:0e:e4:78:02:42:
12:37:22:da:de:70:5c:1a:7a:54:b0:61:32:86:03:1a:f7:de:
eb:aa:72:b6:56:72:ad:62:8b:8e:e7:4d:6d:be:63:4e:b7:f1:
4a:91:53:2d:3a:4a:f2:1a:8f:91:6d:92:ed:9a:fb:96:13:e8:
c1:b2:64:2a:bc:57:cb:70:64:77:74:bc:9c:e2:c4:54:df:f2:
1c:75:a2:6e:dc:1b:5f:21:a2:ef:c9:2b:3c:ae:5a:af:a2:b1:
71:3a:e8:2c:a3:3f:2a:ce:85:cc:bb:b1:4b:a8:1c:b8:3c:6a:
7a:b3:4d:3a:4e:5d:cf:ec:cd:3c:ca:f7:03:1b:5d:ec:80:26:
32:87:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:56 2026 by rpki-client