Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: k3/eQlM+jij9Ic2nFWqLoGYcCuzvSnB7HNmJRPIQh5w=
Subject key identifier: 12:7E:08:7A:AE:70:D6:DC:5B:61:E8:B5:96:10:D3:8C:92:77:DE:93
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019D717A09913CCE08914CD735F25C790804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0887
Signing time: Thu 09 Apr 2026 09:01:56 +0000
Manifest this update: Thu 09 Apr 2026 09:01:56 +0000
Manifest next update: Fri 10 Apr 2026 09:01:56 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: LSll70izd/8gVDIHsieO3ePslpRJQ0zfNmue41fo3D0=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:7a:09:91:3c:ce:08:91:4c:d7:35:f2:5c:79:08:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Apr 9 09:01:56 2026 GMT
Not After : Apr 10 09:01:56 2026 GMT
Subject: CN=127e087aae70d6dc5b61e8b59610d38c9277de93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:7e:9a:97:34:fe:d5:d0:e8:8a:48:00:6e:
a5:1f:e8:f6:cf:60:cd:62:2c:61:60:f0:2a:43:0c:
d1:2f:ac:c8:a6:09:b4:70:bf:07:af:55:af:07:4f:
b9:18:ca:4a:57:30:66:f2:57:9f:90:36:33:87:c9:
3f:94:b6:2f:71:ca:40:53:70:3f:ee:b0:ab:2d:99:
95:92:ae:38:ec:4b:a8:39:3a:c5:66:fa:a0:45:b1:
c8:8a:ec:35:68:7d:b0:2c:3f:41:41:e5:ae:3e:26:
03:65:3d:13:e2:65:d1:6c:ec:8a:54:db:b6:89:c6:
e7:ea:80:27:24:c9:cb:a2:d9:30:12:a6:58:14:70:
8d:ea:c6:19:6d:c4:c1:6f:99:95:e3:33:9e:42:53:
7f:db:48:ba:fb:8e:bb:af:a8:48:5e:80:82:32:d8:
ed:eb:1f:37:2b:ba:35:c2:32:79:f9:bb:95:ba:1b:
1a:a2:83:09:28:a3:8f:a1:28:9f:df:70:53:6f:4a:
1e:83:4c:06:a4:b8:90:22:7b:db:55:c2:98:6d:e4:
f6:ba:4b:98:64:bc:cb:f8:a7:3a:f3:28:6b:67:25:
9d:86:40:e3:47:05:a6:5a:34:93:a2:ce:cd:55:44:
91:c1:3d:13:7c:6e:41:e6:75:a9:2e:ae:81:c2:10:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7E:08:7A:AE:70:D6:DC:5B:61:E8:B5:96:10:D3:8C:92:77:DE:93
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:79:27:30:47:74:f9:07:00:f5:c5:91:ec:1b:fc:e1:c1:
36:6d:72:00:e2:63:3f:96:37:85:01:b1:bd:b6:2d:c2:41:d7:
69:ae:af:4f:15:27:a1:ca:bc:71:c5:7a:3d:51:65:5b:c0:99:
e2:ce:2c:e2:04:81:2f:0a:7d:6b:31:1e:cf:58:ab:bc:d3:9b:
31:4d:d8:18:4d:08:dc:8a:3a:cf:fa:95:ed:47:63:0c:f0:af:
f4:17:4e:34:73:2e:a3:ce:87:d9:6e:ec:1d:8a:ec:ee:74:8d:
da:ba:b4:40:23:2d:67:1a:9f:24:24:0b:60:75:d2:e7:69:3b:
33:4c:04:83:77:b1:f5:f2:2e:f4:a4:91:80:64:82:85:df:e1:
16:22:81:52:db:3b:ad:6b:5e:10:38:1c:8b:bd:4e:f9:da:f9:
94:71:dd:e8:50:73:fa:28:85:2e:f0:24:96:46:aa:8f:09:35:
a2:85:5e:eb:c8:d5:6c:89:22:ea:bf:a2:0d:fe:d8:85:2f:6a:
1f:cf:1f:9e:bb:ab:3f:9b:9b:36:86:54:ad:e8:f4:76:55:bd:
05:c7:b0:be:ad:80:fd:96:79:ca:15:8b:b9:42:e2:7f:1c:44:
ba:94:85:9e:8e:da:27:13:c0:cd:04:7d:05:af:e4:bd:94:cb:
6f:9a:37:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:20:42 2026 by rpki-client