Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: jLN+KadlQeMLQA8QDcWJhWgrdY1yK7w1bRqZG8vvq5c=
Subject key identifier: 18:75:C0:B7:CF:AC:99:76:73:A3:B6:C0:B9:C3:F0:B5:AA:0F:EA:B4
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A1A336BE1E66439C4E0F84E14E0BF71B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0AB3
Signing time: Tue 03 Nov 2026 21:00:36 +0000
Manifest this update: Tue 03 Nov 2026 21:00:36 +0000
Manifest next update: Wed 04 Nov 2026 21:00:36 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: YF0y+m/ZEcnQTiRlBigvDsdRVWlV+fY3iw8CUwxGOCg=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:36:be:1e:66:43:9c:4e:0f:84:e1:4e:0b:f7:1b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Nov 3 21:00:36 2026 GMT
Not After : Nov 4 21:00:36 2026 GMT
Subject: CN=1875c0b7cfac997673a3b6c0b9c3f0b5aa0feab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:4a:b6:bb:e0:ae:69:ea:07:b3:f7:2b:4f:
fa:48:89:ed:3f:09:a4:ba:88:24:a1:f3:a5:63:83:
0f:70:05:78:fb:ec:60:5a:5e:b5:3f:f4:7e:9d:b6:
ec:96:24:ae:17:d7:52:2e:58:7d:74:55:66:b2:a4:
7c:5f:53:9e:5b:cd:25:9d:b3:9a:b6:53:8d:75:ae:
12:59:ee:1b:6a:89:db:fc:cc:a6:e2:79:d1:a0:e4:
6c:70:39:14:d2:3b:6e:d3:80:bf:64:07:be:9b:58:
d7:de:36:04:bf:32:a3:5a:c3:c9:da:c7:8d:29:14:
08:93:fd:08:68:d0:0c:e9:1f:31:44:8a:bf:0a:40:
bc:9f:73:0f:e9:4f:21:23:3e:92:bd:5d:67:e0:4e:
d6:7d:16:ca:f8:d3:ff:04:5e:08:b3:88:e3:e4:94:
d5:58:66:5d:90:8f:ff:90:33:4d:fc:34:27:6f:ee:
a2:93:b6:3b:6c:c2:a1:36:17:1a:40:34:72:64:b5:
bd:b2:e8:d1:98:b1:ce:62:29:bc:b4:85:19:41:06:
4b:a9:db:f2:9b:ad:05:53:90:93:f0:2c:c2:a6:d9:
a0:f3:e0:ab:a5:3b:a9:32:31:d5:58:0b:31:2c:28:
a0:d0:dd:7d:9e:86:dc:c5:6f:13:ad:d8:61:69:e3:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:C0:B7:CF:AC:99:76:73:A3:B6:C0:B9:C3:F0:B5:AA:0F:EA:B4
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:7c:ba:b6:c7:fc:15:ef:08:82:fd:2c:e9:47:11:f4:c8:
33:4e:3e:56:35:02:84:ae:8c:51:4e:b6:bb:87:69:45:5b:f7:
43:0f:58:e6:27:06:f0:66:e9:5d:3b:0c:10:fc:cf:66:f7:55:
1d:42:ea:5a:18:76:56:2e:f9:6a:46:fc:f2:7a:09:61:f2:77:
be:e2:2a:04:53:be:75:f6:77:fd:53:ac:22:5a:86:af:d6:fc:
dc:4c:0a:04:0b:21:14:d9:ce:ea:80:dc:bd:b5:65:bd:ac:35:
a9:5e:11:12:27:91:78:ab:ec:45:3f:62:c5:2a:47:7d:69:5f:
b8:83:1e:5c:60:39:6b:02:67:b4:38:ce:18:59:d5:f6:f8:d4:
e0:29:1b:f4:a2:3c:28:85:95:f6:2e:98:5a:f5:bb:1c:c7:ba:
63:69:d1:b3:32:66:4b:9a:64:3a:54:ca:b2:1a:e3:33:b9:47:
1a:27:cb:42:1c:dc:0d:b6:a6:15:16:40:c7:2a:41:0f:b1:72:
74:07:a3:c7:cf:52:6a:39:eb:2f:ae:21:09:43:a1:03:2e:a6:
0d:6e:26:1a:59:4e:3e:ed:be:f0:9f:55:4f:d8:c1:6c:ec:70:
5c:64:6d:b9:c5:42:8c:e3:bf:d2:18:5b:e2:e9:84:05:70:68:
f0:00:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:28 2026 by rpki-client