Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: MDrzdolNTzSOJwGq0ILifjyfF7h7iUtWnQboOZMvuZw=
Subject key identifier: 5B:DD:58:22:DF:E4:82:64:D5:37:CC:A9:47:31:EA:21:63:0F:90:AE
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019CF0162781C930942EE7D0D2FBB1AED04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0844
Signing time: Sun 15 Mar 2026 06:01:49 +0000
Manifest this update: Sun 15 Mar 2026 06:01:49 +0000
Manifest next update: Mon 16 Mar 2026 06:01:49 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Aj9ULGbZlDdu0wjB7n+BloHfg0PZbIyMkd5alwFzbXs=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:16:27:81:c9:30:94:2e:e7:d0:d2:fb:b1:ae:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Mar 15 06:01:49 2026 GMT
Not After : Mar 16 06:01:49 2026 GMT
Subject: CN=5bdd5822dfe48264d537cca94731ea21630f90ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:00:7c:07:ab:af:11:82:de:2c:b3:8e:62:
a6:ed:7d:b1:fa:80:e7:4a:3e:02:4f:db:77:27:61:
07:71:a9:e8:eb:28:e0:3e:3a:d5:17:8f:9e:da:c5:
6f:54:f6:05:08:0f:2e:2c:43:01:08:d3:a6:b4:cb:
81:09:e2:6f:c1:dd:76:00:02:71:a9:75:9e:2b:93:
ba:d6:8b:75:66:82:dc:2e:4b:92:ce:f9:38:5f:42:
cb:12:a9:fb:f6:fe:99:54:11:d8:eb:cc:0c:8f:81:
96:e3:98:b8:9c:ae:0d:18:fb:7b:84:a9:60:f7:f6:
b0:c9:e9:98:c8:d5:92:de:e5:a5:ef:bd:0e:25:ad:
9b:2d:17:79:52:9d:35:f3:31:f9:0e:bb:ce:d5:c9:
bd:e2:78:0d:e4:c3:82:84:2f:dc:1a:7a:46:3a:11:
e0:00:1a:0d:89:34:3f:20:a4:91:20:02:0b:53:2b:
cb:c0:d9:fa:53:08:46:c5:df:d1:6c:e0:de:cd:d2:
6f:61:ff:80:ce:19:b5:12:75:df:b2:86:a0:2e:60:
a0:60:eb:64:20:0c:6e:35:84:d6:bb:98:0a:56:e2:
47:96:9f:a3:de:91:3a:4f:aa:34:52:6a:f9:24:0e:
25:2e:10:a1:f8:9a:5b:c0:31:f3:63:e1:52:86:67:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:58:22:DF:E4:82:64:D5:37:CC:A9:47:31:EA:21:63:0F:90:AE
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bb:3e:b4:5d:df:6d:ae:ee:31:42:3d:45:63:fb:3a:47:b0:
20:67:2c:9b:66:0c:82:46:29:39:83:52:6b:2a:91:c7:99:ad:
c0:ca:97:72:53:7c:15:a5:05:de:cf:57:5f:bb:73:db:d8:d9:
2e:6b:3c:83:dd:1a:b9:0c:b9:55:d7:94:0d:fe:71:9d:8c:b2:
47:ba:72:21:30:79:c1:a5:25:9a:c9:1c:9c:46:9b:cf:bb:d5:
de:6b:42:c1:f8:1e:8f:33:f6:7d:3d:b9:55:0d:e2:59:2c:88:
a5:54:cd:85:01:f8:6d:b4:ae:16:72:da:9e:9f:8b:b4:24:90:
fa:83:01:38:07:cd:63:80:91:f2:a2:33:0e:69:6a:e3:c4:03:
e5:b2:19:c6:e5:03:5f:4e:a2:53:91:c1:2f:bc:45:2b:70:00:
3a:a0:0a:9c:58:b5:cf:0c:bf:71:94:87:fe:73:af:4c:7f:21:
c0:2d:9e:8d:64:82:8e:aa:16:e5:b7:7d:a6:2e:b6:dc:43:b9:
5c:b4:39:26:73:0a:b9:11:0a:41:ed:6d:78:b2:ff:32:4b:14:
e1:84:1b:e2:5e:59:81:67:db:77:ae:a1:04:f9:86:c8:6a:19:
d5:e9:09:0a:e0:c5:b3:d2:77:11:89:24:e4:95:5c:7c:98:af:
23:1d:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 11:49:14 2026 by rpki-client