Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: YzdUPp9IdvZ5m7o/YakloSNF1+tXnQqVHUa5VQFK2o8=
Subject key identifier: 5E:2D:86:78:55:B2:A2:79:1F:29:E3:F5:61:AE:1C:21:1F:5A:E2:BD
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019F8E346DD1B5723A3C1362A6C1B259BA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 099F
Signing time: Thu 23 Jul 2026 09:00:28 +0000
Manifest this update: Thu 23 Jul 2026 09:00:28 +0000
Manifest next update: Fri 24 Jul 2026 09:00:28 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 3ayy8KhINwmZAZeKuRaGiNTgrtCIXdtO/LgXE151Kbo=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:6d:d1:b5:72:3a:3c:13:62:a6:c1:b2:59:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jul 23 09:00:28 2026 GMT
Not After : Jul 24 09:00:28 2026 GMT
Subject: CN=5e2d867855b2a2791f29e3f561ae1c211f5ae2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:46:5d:07:fe:58:49:e9:98:c6:0a:62:86:
c5:a1:d6:74:3f:b4:89:46:40:16:33:b3:c0:71:60:
73:c7:32:ae:b7:4d:2c:16:6b:7d:a8:ff:35:f6:8e:
17:0b:f1:1f:69:6c:ab:f3:09:b5:47:e8:41:a9:ce:
50:0e:cc:84:41:27:fd:c8:cb:96:d9:69:19:6c:12:
fc:a1:11:c0:21:f0:59:5c:cf:37:5e:e4:ad:94:a0:
44:11:c9:b3:17:fe:86:e3:c3:93:ec:0e:3b:9a:f6:
ee:12:4c:d3:d9:e6:b1:d3:44:85:b7:43:35:43:99:
d2:17:fa:a4:58:ff:3f:19:91:bd:a9:30:c7:70:40:
53:69:43:d6:c4:09:39:ce:a0:e7:97:f0:b9:7f:44:
67:e1:fb:c8:b6:05:e0:04:55:f4:54:52:4a:47:f6:
9e:5d:a6:ee:ec:f1:12:7b:08:7d:68:da:65:97:c4:
cb:69:8a:2b:51:1c:3e:03:6b:70:af:23:95:4b:e7:
59:77:c5:9a:ba:95:42:e3:34:7a:c9:2d:c7:b0:63:
aa:05:bf:73:d0:2d:48:9c:f8:ba:32:53:b1:bb:cd:
df:21:f5:a3:54:5d:16:56:8e:be:23:93:9b:9c:06:
d6:49:d7:ea:44:ad:69:14:ef:5b:52:85:45:5e:72:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:86:78:55:B2:A2:79:1F:29:E3:F5:61:AE:1C:21:1F:5A:E2:BD
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a2:30:73:14:32:13:25:e9:97:5d:9e:df:3a:fd:48:a1:03:
93:54:9c:32:f4:f3:06:8b:9e:b8:2a:1b:fc:cc:09:7d:0e:c3:
51:ad:50:13:39:5c:17:3b:90:b7:2c:e2:9a:31:d8:ab:38:c4:
c7:5d:b8:90:23:31:9e:ab:39:97:cc:1d:3f:16:d2:12:b4:05:
1e:d0:59:44:04:fc:3d:84:67:15:07:d3:a5:b4:75:9e:ec:89:
1a:64:50:26:da:31:45:f3:49:bf:29:a9:fe:e6:9b:82:b5:09:
74:3d:19:ad:39:26:af:53:83:78:0c:98:8a:15:2e:88:3d:e1:
55:71:7e:26:8a:94:68:b4:e6:95:c3:2a:05:4f:b3:23:a5:a8:
10:e5:c0:7e:a3:ec:a0:a0:dd:0a:40:81:b6:8f:36:53:08:eb:
5d:07:3f:3f:45:d6:77:a5:40:33:09:78:70:e8:1d:27:df:a2:
6d:c5:e7:49:a0:46:43:c4:da:39:bd:7d:05:7f:ce:30:e7:8d:
25:10:2e:c5:5e:97:aa:2f:f4:b5:d1:06:44:f4:3b:49:79:c6:
6d:a6:15:97:b0:48:80:7c:0a:8f:5c:88:43:b6:2b:15:53:8a:
ac:c1:3d:de:f4:12:e9:ce:3d:72:cd:f0:02:75:93:35:fd:21:
64:59:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:58:17 2026 by rpki-client