Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: 4t6gIxUHB5eBz8iuHf/3YRhbymvDeeGcz9Mu7MTqWWY=
Subject key identifier: 11:30:F3:E5:F4:FF:6D:AB:F1:16:AA:71:6C:CB:1A:F5:CE:A5:8E:41
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E3A51805DD48E4A119D1B82CD2A2AE847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08EF
Signing time: Mon 18 May 2026 09:01:20 +0000
Manifest this update: Mon 18 May 2026 09:01:20 +0000
Manifest next update: Tue 19 May 2026 09:01:20 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: r4+pbRDlL74cIsRPH4zW4Apnegqiy0kWsSKesFEyCBE=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 19 May 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:51:80:5d:d4:8e:4a:11:9d:1b:82:cd:2a:2a:e8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 18 09:01:20 2026 GMT
Not After : May 19 09:01:20 2026 GMT
Subject: CN=1130f3e5f4ff6dabf116aa716ccb1af5cea58e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:bd:88:65:4c:03:1e:ee:61:16:53:87:a5:
da:77:3d:b9:8a:39:0b:33:7c:14:23:72:c8:0d:51:
c6:03:59:d1:07:47:d5:ab:1f:69:24:dc:03:42:19:
17:18:26:1d:96:e0:75:99:81:b5:7b:78:66:ec:5b:
80:18:41:fe:f4:7a:87:9a:e4:52:07:f6:bd:41:5c:
62:d4:70:1e:fe:9c:a7:ab:cf:ad:66:dd:1f:ee:85:
f8:b4:2c:c8:3c:ef:78:83:32:c3:b8:4e:03:47:0b:
c2:5a:51:0e:46:f7:c1:02:dc:9a:a6:b1:8f:11:b9:
a2:f9:96:16:f5:d2:cc:1a:00:0e:3c:82:00:f1:a7:
8d:e1:f4:bb:b7:26:d0:cf:fa:74:1c:3d:32:6f:d4:
ff:9a:86:5f:04:36:5c:36:43:85:21:fa:b6:d4:fb:
ef:80:35:a1:f5:12:9d:d6:6c:4e:f8:e0:4b:a2:44:
10:95:da:58:9f:97:46:42:92:e2:6d:97:9f:89:14:
ac:57:6c:b3:d4:94:05:bc:27:93:34:93:70:70:44:
9a:b6:f7:66:90:cf:6c:41:62:e4:c0:86:0e:39:b4:
0a:88:6e:9c:61:5b:9b:b7:0d:4f:d1:1b:e6:45:8e:
49:de:f3:f9:c1:0f:9b:47:19:97:5d:32:53:7e:64:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:30:F3:E5:F4:FF:6D:AB:F1:16:AA:71:6C:CB:1A:F5:CE:A5:8E:41
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e1:7e:47:54:75:1b:2a:84:57:4b:d6:75:b3:06:3e:78:b4:
4f:85:8d:7b:96:4f:76:0c:ab:7d:25:e4:5b:41:b5:ea:66:f5:
45:fc:88:66:d1:ee:a3:3f:42:d4:72:40:57:90:ae:7a:33:84:
ad:cd:14:dd:32:a3:fc:f9:e3:f3:3c:f0:2e:41:2a:0e:c5:75:
49:72:d0:d4:66:0d:8a:06:f5:5d:2d:2e:87:49:ab:e5:44:25:
6e:af:b3:ff:ec:51:83:37:ae:63:a6:72:76:3b:a8:62:f6:e4:
8a:4e:9a:77:7e:99:86:1d:2c:c7:b1:d8:3e:19:81:4b:3f:6b:
05:e3:f7:7b:70:1a:18:75:0e:bb:9e:ae:df:a5:2e:f5:e9:dc:
c2:a5:5e:8c:fe:8d:2c:04:6b:69:b4:34:0b:e6:a3:a8:91:be:
7a:e0:93:f8:5e:41:ca:f2:dc:27:60:87:c1:26:84:db:5b:18:
2c:dd:39:67:09:ae:44:e0:0f:6c:d6:72:02:23:c0:82:2e:d6:
05:ac:68:a0:a8:fc:70:80:a1:db:82:28:0c:60:e5:e9:3c:2b:
4d:ca:21:f4:f2:12:0a:fc:16:e3:66:33:2f:1c:b3:37:9d:d4:
32:1c:f2:c9:21:78:41:b7:68:a8:7b:77:ca:8d:fa:33:82:75:
20:fb:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 19:19:56 2026 by rpki-client