Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: 5RjGgh1Mbq2vXHbVWKTk2+FbhuGVewJBedpqFas4GA0=
Subject key identifier: 0E:4C:CA:AB:F0:06:FF:0C:72:16:D0:CE:5D:CA:B9:34:F9:07:2F:EF
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019F5068E6DD7C6650D3417E8F60F93CCED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 097F
Signing time: Sat 11 Jul 2026 09:01:19 +0000
Manifest this update: Sat 11 Jul 2026 09:01:19 +0000
Manifest next update: Sun 12 Jul 2026 09:01:19 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: nlAQZXsJRIGYmt3AE2knr4RQc2WFT+k6rWEvyJVCKxQ=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:68:e6:dd:7c:66:50:d3:41:7e:8f:60:f9:3c:ce:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jul 11 09:01:19 2026 GMT
Not After : Jul 12 09:01:19 2026 GMT
Subject: CN=0e4ccaabf006ff0c7216d0ce5dcab934f9072fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:75:68:d8:2a:bc:b3:bb:8a:9f:a8:5f:4c:
af:be:12:09:fd:4a:fa:5f:03:53:00:5b:03:32:30:
19:ab:0d:2f:f9:b6:b8:85:90:16:19:c2:1c:10:31:
cb:c9:da:96:12:3e:96:22:8d:ef:52:46:7f:45:1b:
ef:6f:bb:8d:63:2c:c5:4b:32:43:76:c1:40:ce:97:
c8:42:8a:df:f0:63:c0:8a:27:5f:43:6d:21:6d:a7:
94:2d:fd:80:9e:ec:47:a7:7a:ce:45:f2:46:19:1a:
5a:37:fa:c1:99:4d:b0:d6:cc:d5:f1:3a:30:6f:7d:
3b:44:42:7e:91:13:a3:43:d3:69:08:32:e7:55:bd:
51:81:46:38:04:f6:b6:ca:13:ff:a6:8d:e6:9b:bb:
08:3b:b6:2e:9e:63:ee:6c:cd:f7:a7:99:a3:2c:37:
d9:70:6f:ae:44:fd:30:38:84:b7:95:eb:9c:f1:34:
b1:2c:e5:f8:2f:2e:08:58:52:e0:aa:0f:87:ce:43:
44:f4:34:71:61:d1:2a:ee:34:c1:42:70:8f:c0:5a:
52:ae:7a:07:04:4a:00:38:f0:81:4d:bc:de:df:d8:
55:c2:a4:db:82:82:43:3e:d1:b4:05:e4:ba:37:d2:
15:da:3b:0b:97:17:32:26:39:87:4f:0e:51:f5:b4:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:CA:AB:F0:06:FF:0C:72:16:D0:CE:5D:CA:B9:34:F9:07:2F:EF
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c0:12:06:3a:51:2d:ac:65:b4:be:3f:4c:62:ba:63:72:d0:
73:c9:4d:72:2a:ba:5e:09:a9:1c:10:32:8b:3f:c2:39:15:50:
2e:69:3f:39:8e:72:8c:21:41:12:97:a6:05:8c:82:70:57:f8:
ec:4c:a6:b1:77:26:4b:26:0d:b9:fb:ef:95:53:fa:c8:17:65:
6b:43:ad:d0:79:08:71:27:96:c8:ed:6d:45:67:76:e2:07:36:
86:78:fd:57:e1:cb:ff:8b:4e:49:7a:16:19:dc:8f:84:63:38:
24:6c:45:6e:1b:13:d7:7b:aa:ce:e0:e5:47:31:df:a2:cd:35:
02:36:5b:c2:9d:c3:77:87:34:77:d8:49:f8:6e:ce:2b:cc:75:
f9:5b:88:33:8f:a9:bf:9c:2f:d1:49:71:68:4a:3c:8c:2c:52:
ad:a0:16:cc:34:41:20:bf:bc:07:94:bc:5d:79:9f:0f:ff:91:
ef:ef:50:32:4b:8e:51:94:66:ec:1c:42:b4:1b:71:f3:a3:0b:
21:fc:8b:0b:5e:20:2e:b4:96:85:c0:11:88:01:d3:e7:f8:1a:
1d:0c:dc:da:ba:57:b0:4a:7a:f7:0e:66:fc:88:4b:7c:c2:0d:
01:e9:c1:01:1a:0b:43:47:25:cf:6f:86:da:31:ef:0e:ed:06:
52:5a:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 14:14:09 2026 by rpki-client