Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier: Wu9f917USLoiWiM5zBN2RctUlnkke8vsZTGP3UhmdLk=
Subject key identifier: 43:78:73:39:07:E6:22:97:3F:FF:D0:53:52:B0:24:34:98:C3:92:B7
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 019CAA58EED91AD9A321E18B3C4788CA0240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number: 0A70
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: Fr6b4AVwH2MD_S5KRr6HbDmC_uM.roa (hash: mdYZJP/5rf2B6ZKd33FY0BFdNm1Mr6jeRDpydtaZ020=)
2: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: GOGOF131XPdTAqHM3891kaftHoSImsbrq3HlxV7OXz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ee:d9:1a:d9:a3:21:e1:8b:3c:47:88:ca:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=4378733907e622973fffd05352b0243498c392b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:9a:6d:02:bc:63:c5:05:5b:24:cf:d4:2f:
6d:cb:f0:43:42:d3:70:2c:79:01:15:61:5d:37:d0:
6c:0b:64:a4:cf:28:45:55:91:e7:d6:05:be:0e:e8:
b9:bb:b3:71:36:3e:fb:71:7b:b6:e4:93:c6:d8:e1:
fe:35:b5:8e:dd:a9:b0:fa:2e:40:da:45:fc:fc:52:
06:11:85:f0:13:7e:a1:e2:71:93:37:ad:10:41:98:
19:b7:9b:dc:47:5e:09:96:ef:88:1e:0e:9f:03:17:
75:00:30:49:65:44:09:1a:64:76:d8:5f:c0:33:41:
21:23:8c:7a:6b:b1:a4:d8:52:26:b2:6d:06:a0:73:
49:4d:11:7f:e1:ec:bb:a3:d5:a6:f9:34:a6:ae:5b:
6b:5e:ce:eb:ec:35:e1:5a:54:ad:c5:33:ad:2b:17:
20:89:44:36:ce:ad:81:23:eb:01:02:84:f3:06:7c:
b8:7a:c2:b5:c9:4e:f0:31:4c:72:b5:c0:35:08:85:
f4:a6:2c:4d:0f:cb:2b:aa:9c:84:4b:40:13:fa:b4:
c9:90:96:fa:5f:0a:af:3e:3f:98:c7:48:32:80:40:
8f:5a:4f:3b:f7:42:35:53:78:5d:86:71:ad:5d:e4:
93:24:6d:ee:b2:99:aa:27:3a:25:49:58:da:c1:3a:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:73:39:07:E6:22:97:3F:FF:D0:53:52:B0:24:34:98:C3:92:B7
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c2:ab:d7:a9:76:f9:85:47:dd:cc:7a:59:84:dd:27:f4:d2:
fc:34:6d:6d:73:c8:f7:29:e0:98:ad:07:e7:23:05:53:0b:a8:
85:bb:45:0d:c7:72:47:46:e0:bd:08:54:2e:43:8f:13:69:9a:
0c:4a:a3:b7:1c:09:e5:42:97:77:55:43:89:62:49:3d:ce:56:
72:db:72:7f:7f:da:3e:bd:9c:3e:af:33:ea:3d:3c:5d:1e:a5:
ea:ee:5a:db:b7:5f:10:71:a3:5d:10:2d:9e:f0:0c:dc:99:9b:
9e:bc:4f:c5:d1:89:85:a7:0c:d8:04:ce:45:31:2c:69:53:d7:
51:b4:53:d1:d3:69:82:fc:0d:5a:ac:d8:98:32:ec:86:26:72:
29:12:26:13:e4:9a:d6:6f:93:83:11:39:75:4c:40:73:32:d2:
7f:e5:60:e6:16:5e:59:8f:2d:01:b8:58:a0:ea:a6:6e:09:86:
cf:45:70:fd:0e:5f:4d:0d:58:dc:1d:5d:56:56:c7:07:67:2d:
b8:af:31:1b:04:5c:25:58:b8:fd:d9:01:eb:91:de:b4:f9:72:
a0:84:4c:e3:c7:f6:37:65:4c:a2:ee:f0:1f:45:5c:2f:3e:3e:
21:31:5d:c6:6f:cd:87:b2:d1:83:a9:69:df:77:c7:f3:72:23:
70:9a:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:02 2026 by rpki-client