
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: kfupPD1cQ58Mz1Nz1bdxRz/4Wc+u1gz8FZgz9SDCsNA=
Subject key identifier: B4:5B:42:5C:33:F0:B8:AC:A7:73:87:6E:D3:A3:39:51:97:8F:20:22
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019EE254C04BA16118F4139314BA07B70B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0946
Signing time: Sat 20 Jun 2026 00:01:05 +0000
Manifest this update: Sat 20 Jun 2026 00:01:05 +0000
Manifest next update: Sun 21 Jun 2026 00:01:05 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Zm7O6vPjF3HiqKszx2RwYVZ4N03RDFM2dIv7hI3zANw=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:54:c0:4b:a1:61:18:f4:13:93:14:ba:07:b7:0b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jun 20 00:01:05 2026 GMT
Not After : Jun 21 00:01:05 2026 GMT
Subject: CN=b45b425c33f0b8aca773876ed3a33951978f2022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:11:f8:0b:2c:c3:14:77:45:a5:72:44:f7:
57:cc:bb:ac:97:05:b1:53:9e:4d:93:1f:a6:f3:29:
80:aa:d7:54:4c:1e:a2:2c:af:32:ef:8d:3d:95:4f:
0d:1e:b1:b4:be:aa:51:3e:96:cd:66:d8:21:97:83:
90:52:8b:9f:94:76:77:f3:23:b3:ff:85:ed:e4:1e:
2d:ca:65:1e:6c:ce:c2:6d:8a:c4:8c:94:7a:97:9c:
a4:c9:63:ec:e2:65:65:35:12:3d:42:f0:cf:b0:82:
3f:87:54:f2:e4:34:60:65:da:5e:ca:f7:3e:9e:b0:
72:90:90:ee:2b:82:4c:3e:dd:27:10:9d:f7:bf:81:
96:b0:47:15:95:ff:65:af:60:8b:9e:65:94:63:e3:
12:7f:e5:4d:18:c5:7a:61:a0:c7:cb:c6:e9:31:e9:
ec:04:79:57:ad:25:07:92:93:60:22:e3:b1:44:ed:
43:13:94:08:74:3e:47:b6:24:ab:e3:65:38:26:fb:
df:12:c5:30:c9:b7:f4:a7:70:a2:1d:47:40:71:49:
ee:1f:fa:e7:44:04:67:44:69:60:cd:d2:d4:ed:d6:
27:4c:1a:39:11:5e:9e:f7:6e:3f:84:f8:1a:d4:dc:
93:02:88:af:3a:50:4f:54:9f:e9:f8:27:63:0c:0a:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:42:5C:33:F0:B8:AC:A7:73:87:6E:D3:A3:39:51:97:8F:20:22
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1a:c5:b1:c8:50:51:91:d7:ef:90:96:a2:89:da:de:ea:52:
ec:ae:90:a8:63:de:21:8a:b7:69:2c:bb:1c:a3:0a:0f:f2:19:
5e:f8:d4:f7:c4:4c:ed:f9:2b:ee:42:b8:11:7a:8e:63:7f:98:
6a:d2:cf:ee:3b:09:df:0e:7d:e0:fc:f2:fa:8f:41:e6:65:37:
59:a3:e1:8b:ac:05:3c:78:43:eb:a3:35:b5:3d:81:83:88:0a:
69:a0:d3:0a:81:c9:82:f4:2e:db:17:df:a8:f9:0e:f0:1b:a1:
88:a2:d6:9a:0a:bc:b2:5f:30:ba:d1:65:11:81:7c:e8:02:6b:
d9:e9:f4:ae:97:9c:02:27:9b:90:a0:ec:ae:e6:3f:10:a4:d7:
13:17:fb:a3:80:10:e5:97:92:d6:4a:8d:97:e7:c8:5b:37:4a:
0d:88:66:59:a0:66:fc:f2:e2:7f:a6:52:90:e9:33:18:5e:13:
cf:27:9b:a2:bd:95:c6:81:27:77:64:17:22:47:6a:db:3a:43:
89:2c:2a:8e:df:f0:63:bd:af:47:3a:35:78:c0:f2:d1:ee:35:
4c:20:3f:37:ac:81:57:ad:39:00:ec:f2:e7:05:e3:a9:6e:77:
92:fc:8f:23:d4:67:62:1d:5f:ff:65:a3:b3:9d:01:cd:62:ff:
48:ad:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:05:50 2026 by rpki-client