Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: nPcCMWP/EECCM//JV4y+Cr1bdcRcLTjwLhMTMaf/Wog=
Subject key identifier: 02:C3:3F:69:8B:51:11:D9:4A:26:1E:18:9A:FE:88:AF:02:1A:EE:39
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 019D36E47418BA9B4BB97645BCBD78FCAEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 0402
Signing time: Sun 29 Mar 2026 00:00:34 +0000
Manifest this update: Sun 29 Mar 2026 00:00:34 +0000
Manifest next update: Mon 30 Mar 2026 00:00:34 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: n6QwPHNuoppDWEi+YVTk9g90ebZjldgiUQjvStpzQGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:74:18:ba:9b:4b:b9:76:45:bc:bd:78:fc:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Mar 29 00:00:34 2026 GMT
Not After : Mar 30 00:00:34 2026 GMT
Subject: CN=02c33f698b5111d94a261e189afe88af021aee39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:c7:4d:da:ed:ce:4f:da:e7:29:08:74:f0:
29:31:60:9f:5c:8c:ca:31:31:00:94:4b:3d:0c:b4:
ab:6b:39:a5:cb:56:f1:44:63:45:fd:ca:b7:d8:76:
a2:2c:00:34:b6:1b:3d:71:59:bb:44:a4:92:90:ae:
cf:e5:36:01:c8:0e:e5:20:52:ca:65:88:17:34:6c:
37:6c:26:71:36:c3:cc:7b:20:19:d5:d5:45:a7:4e:
c5:3f:01:17:f4:d6:a1:47:d7:e7:ea:85:8a:a5:03:
0d:e5:ae:26:32:d3:85:49:8b:a3:75:30:15:d4:17:
2e:28:f4:58:db:0a:f7:88:43:fd:99:d3:cd:64:58:
95:89:bc:6f:04:6a:07:d8:82:d0:1e:0a:54:f5:3a:
c2:bb:a2:42:2e:1f:70:ac:39:0b:91:7f:c7:17:d8:
5e:ea:94:e9:0b:7d:95:c5:b7:fb:e3:37:3f:e8:9d:
b4:13:85:e7:bc:54:f6:30:3d:d4:04:bf:27:e4:46:
40:8d:21:a0:9d:f0:28:03:60:14:a3:e7:98:28:ad:
18:89:d9:a0:e6:de:a0:3d:71:6b:7f:42:ca:4d:d9:
4a:3c:3c:87:6d:cf:eb:45:28:a1:cf:39:38:79:fd:
0f:97:af:9a:a9:a3:d4:db:c3:8d:54:78:7f:b4:b1:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:3F:69:8B:51:11:D9:4A:26:1E:18:9A:FE:88:AF:02:1A:EE:39
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:a2:b8:07:f0:b5:61:29:7e:ff:ff:9b:07:ae:43:06:83:
5e:fa:05:20:5d:36:26:7e:a5:a6:43:42:ae:81:15:6f:9c:6d:
e0:7c:59:4a:af:89:65:78:bc:aa:9f:c6:ef:df:f9:89:22:e6:
7c:d8:18:de:3a:b3:b9:5a:63:20:4d:65:3e:6d:97:08:63:dd:
f9:03:1c:55:b3:d8:32:98:3d:3f:4e:6f:5f:c8:9a:76:7f:1a:
5b:ce:0c:13:db:3a:62:20:97:3e:5a:f5:81:3a:ae:f1:a7:39:
fe:bb:83:87:51:fe:72:c8:c8:c4:9d:f7:c0:d7:89:1f:18:70:
4f:bf:3a:c9:22:6d:9c:29:3d:1c:31:f3:d4:7b:4f:bb:30:4f:
8c:4b:24:a3:d0:8c:83:45:2c:13:43:41:86:f5:34:d4:b6:64:
27:6b:39:60:f2:52:70:8c:ba:68:c6:33:42:c4:af:c6:05:18:
ae:2a:11:ed:25:8c:7d:14:63:9f:75:60:48:c8:a7:16:39:d9:
78:ca:3d:0b:3d:86:8a:e1:48:5c:12:d9:b2:a8:f3:f4:46:e0:
b8:69:75:98:dd:38:eb:36:fb:01:31:fc:3d:a4:a2:b0:a6:20:
70:32:3c:07:0c:42:68:e0:3d:dc:81:89:11:33:78:dd:19:25:
dd:ec:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:02 2026 by rpki-client