Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: CBoqoJrkDwjyASglh0PE3ia95ZutEHH51Eh+T5srW00=
Subject key identifier: 49:42:98:73:04:3C:20:8F:18:9B:39:65:8F:65:54:C0:6E:1C:6D:8F
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019F013A9B75277EE019EBA429DB089FB98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0956
Signing time: Fri 26 Jun 2026 00:00:45 +0000
Manifest this update: Fri 26 Jun 2026 00:00:45 +0000
Manifest next update: Sat 27 Jun 2026 00:00:45 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: ICTBYczCb5V6ujyO1nzlu6qAUU5ZZoHXGIRwgm/4Isg=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:01:3a:9b:75:27:7e:e0:19:eb:a4:29:db:08:9f:b9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jun 26 00:00:45 2026 GMT
Not After : Jun 27 00:00:45 2026 GMT
Subject: CN=49429873043c208f189b39658f6554c06e1c6d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:06:fb:07:e7:ea:f3:41:cb:35:18:a1:45:
f6:3a:0d:23:38:b6:fc:84:2c:e0:9a:42:eb:39:6e:
cc:9b:1d:11:13:24:a4:5d:b6:b2:eb:49:e3:8b:f1:
b1:22:79:4c:60:47:0e:c3:bd:70:07:b1:aa:11:97:
bc:bf:e9:60:ea:a9:38:42:46:9b:04:b6:71:a3:e7:
ae:d6:86:93:6e:7e:e6:26:54:13:37:ae:69:1d:f6:
04:8c:c7:57:30:36:78:51:df:23:8b:bc:69:12:37:
a9:d7:0b:b8:d7:69:28:80:ec:fc:20:a6:32:5d:c0:
5f:c2:94:9f:7b:ab:9d:7b:48:a7:cc:00:cb:88:2c:
cb:da:38:ea:15:0e:6f:5c:8b:70:74:37:68:a9:4f:
07:18:f0:b6:c5:5d:55:6b:c6:0d:d4:48:78:5d:35:
d7:62:33:d2:d2:6d:e4:0a:78:41:62:9b:5d:35:74:
3a:f5:be:e0:41:b9:8d:ac:c4:67:b9:13:dc:f7:f4:
b7:10:7b:f3:00:c3:bb:3a:9d:b6:8a:62:3f:25:2f:
d4:d8:12:0b:27:70:75:cf:86:99:ea:2f:43:f1:38:
58:18:c0:f5:cc:68:4a:da:6c:a5:6f:f8:da:a1:9d:
8b:b7:ab:c3:b6:6e:52:de:2c:9c:8f:46:bf:0b:4d:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:98:73:04:3C:20:8F:18:9B:39:65:8F:65:54:C0:6E:1C:6D:8F
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:07:cd:5f:2c:97:01:4b:5a:f4:0e:fa:8c:61:36:b4:3b:20:
83:16:51:a0:0d:15:df:e8:bb:2f:b7:84:49:ec:ff:a1:bb:b6:
ba:76:e0:0e:ee:48:19:f5:42:b9:9d:ae:d1:17:58:b2:39:67:
dd:e7:1c:07:90:86:0d:55:98:88:45:5e:97:ad:69:de:00:2c:
3a:95:41:fd:e7:6e:88:c1:0a:67:c2:1f:12:66:f7:f1:a6:48:
59:b1:bc:a7:26:d0:c0:3b:a2:34:23:54:04:db:48:62:b1:2a:
d7:c8:fe:8f:d7:39:cb:8c:04:e6:69:ba:c3:3e:6a:c2:9e:5b:
c8:59:82:b2:e8:fa:a5:da:11:70:0a:b8:90:0d:31:3b:1f:de:
ea:46:ed:35:fe:5e:80:25:18:31:1f:4a:77:05:8a:f7:62:60:
df:ec:85:a6:1e:98:55:d1:d4:04:4f:09:54:af:4d:ab:44:8f:
ff:fd:2e:90:da:ad:95:91:cc:08:3a:6f:d3:bb:6e:d0:6b:9a:
ac:9b:ec:16:c8:5b:18:b2:84:53:73:22:32:0b:a2:2b:1e:80:
e1:e9:bc:b3:12:b3:88:e5:c5:fc:12:99:0e:6b:41:b3:35:bb:
b2:37:da:37:c0:66:30:18:f5:5d:3a:4c:04:f4:74:82:0f:24:
f7:cc:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 10:07:03 2026 by rpki-client