Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: jjJQyHprhlpJcPE6mKFMM4uMlZ1vPiQPpPQHME1/fHA=
Subject key identifier: C1:15:BB:E1:F2:84:EF:0A:C4:CE:C9:D8:5D:59:61:1A:CF:AC:0B:5E
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 019D382DFDEB8FB3990A85C6880486196300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: Cxe0VlsydTFEuxALdoTNKVFTum/oKo/v6yMsA/qjALY=)
2: a_96dgHPGfskp46QxVwlyW43OHQ.roa (hash: 40fkJSYqeLo91DkP9jgqjhXreqdS7UdtXQdlx4C0e90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fd:eb:8f:b3:99:0a:85:c6:88:04:86:19:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=c115bbe1f284ef0ac4cec9d85d59611acfac0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:20:7b:84:fc:1d:c7:c5:42:70:07:b3:2f:
6f:6f:b4:62:ae:7d:9f:d5:e4:e3:5b:13:27:b8:a7:
34:db:dd:e4:19:21:a9:14:46:55:7b:b7:43:68:91:
95:a9:d9:bf:13:4f:b9:ae:49:24:31:67:e1:99:8e:
4b:c5:49:10:98:31:55:12:4f:f5:59:37:20:c3:b2:
a2:4d:9a:b9:3e:a8:eb:ae:8f:c2:64:87:c7:58:5f:
66:e4:3c:f5:f2:a8:e7:77:38:b6:e9:4b:ad:b3:c4:
be:fd:92:f0:a5:c3:f0:9d:3a:9b:0e:d8:4d:77:9e:
41:22:d0:aa:93:8b:43:1a:63:72:d7:f8:dd:37:a7:
f9:f9:bf:f1:79:98:90:51:7b:81:f8:65:57:e4:88:
51:56:f0:58:68:9c:7c:f2:0f:9c:d6:4e:b1:9f:69:
fe:69:a8:94:b2:5d:37:31:d2:2d:bd:29:50:e9:53:
4c:1f:d6:48:80:ab:06:c9:b2:74:e6:8c:4c:bc:b3:
19:f7:b2:5e:16:4d:ce:7e:05:43:61:f4:bb:66:dc:
e5:11:89:bb:53:91:97:16:27:9a:a9:f3:5d:b5:fa:
1c:eb:af:54:fd:1c:18:2e:5d:60:d6:b6:d5:03:fa:
e0:5c:bd:ff:c8:b7:39:6c:c1:4f:0b:62:47:71:39:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:15:BB:E1:F2:84:EF:0A:C4:CE:C9:D8:5D:59:61:1A:CF:AC:0B:5E
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:a6:71:1a:c8:ba:52:ac:59:ab:9c:46:76:d5:32:8a:2e:
6e:5d:3d:d4:70:a4:52:3c:d5:6e:9c:5a:ca:1a:0a:74:48:5a:
d0:ed:3e:94:2f:16:41:d0:92:62:54:c3:d1:a1:6d:6c:59:9c:
74:c2:58:2f:6b:a0:dc:48:1f:fa:d1:c4:ca:cf:c4:2b:c8:e7:
7f:dc:48:0f:e3:75:68:7f:94:d3:ec:e1:96:a0:81:40:be:cc:
ae:3b:e1:42:94:a5:6c:ba:9c:c3:a7:b0:2b:cc:b1:7b:18:68:
b2:0b:83:b8:c1:6a:96:2a:c2:d9:60:44:0a:53:7e:00:aa:38:
e1:a4:96:9f:c1:03:34:be:3b:1f:d2:73:36:96:60:17:40:e5:
c7:fb:15:7e:48:ba:16:dc:96:be:8f:f5:76:87:86:b7:29:f2:
6a:5a:47:0c:1f:fa:d1:35:a5:56:92:ad:08:de:2e:37:77:3b:
a5:65:b8:2e:8f:0c:08:3d:e6:65:bf:e6:99:f3:07:5e:6e:3b:
60:0b:bc:18:93:b6:22:54:1d:29:ad:19:de:6e:87:48:7d:d6:
73:2d:0c:03:53:13:c5:8f:1d:34:7e:fc:7e:63:48:2e:b3:f8:
58:02:c3:fe:e1:01:68:b8:18:64:fd:f4:75:e5:ae:0c:93:80:
f6:98:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:06 2026 by rpki-client