Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: sA2tqVI/itMoF6gaKDk6k9UVG/ugI2wkkt/iJgP+1O0=
Subject key identifier: DA:8C:5F:B8:5E:52:7B:A5:C7:7F:60:60:A3:B2:F1:49:85:69:D0:58
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019F6F4F0E55A49000BAA5BB18F51777D94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 098F
Signing time: Fri 17 Jul 2026 09:01:19 +0000
Manifest this update: Fri 17 Jul 2026 09:01:19 +0000
Manifest next update: Sat 18 Jul 2026 09:01:19 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: /SazjNrGn+RYMXDXiMaQOWsWuzBhjb2Camd2XTX7vH8=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:4f:0e:55:a4:90:00:ba:a5:bb:18:f5:17:77:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jul 17 09:01:19 2026 GMT
Not After : Jul 18 09:01:19 2026 GMT
Subject: CN=da8c5fb85e527ba5c77f6060a3b2f1498569d058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:b2:64:19:cf:fd:ef:13:f9:a5:5c:aa:d5:
81:df:d5:3b:65:1d:ce:07:c4:eb:23:9c:e5:9b:61:
5d:a7:e7:d3:b5:fe:a1:59:47:40:4a:fb:d0:10:46:
79:ae:ac:cd:ce:3e:ee:12:3b:90:a9:45:00:09:40:
4c:d4:41:fd:e7:32:9e:38:16:05:1d:02:23:03:64:
c7:5f:38:2a:15:55:cf:8a:44:bd:ae:88:00:a4:b9:
64:44:cb:8b:c4:b9:a2:e7:04:b7:51:7b:f5:10:6a:
45:95:45:c6:60:f0:1c:a3:63:82:92:ac:d7:b0:ac:
14:47:c2:55:3f:bb:4b:ba:ce:8b:c7:0f:69:e7:72:
b1:b9:fd:ec:49:47:71:1e:b5:ff:65:f3:d5:3a:36:
69:ff:bf:87:cf:88:e1:fb:37:78:38:0b:42:17:41:
28:b1:92:e9:3d:f6:28:1b:50:fb:4b:36:9e:53:28:
a6:0c:96:91:5f:ca:b8:c3:be:ff:0b:73:4c:02:76:
42:4c:af:6a:51:fb:99:ce:22:2e:c4:dc:31:10:6d:
7c:1d:15:9e:ad:e9:05:51:18:bc:3a:d6:dc:49:81:
e8:10:6d:f6:7f:29:f1:18:3f:5b:3e:83:49:65:8f:
68:80:c3:63:88:bb:35:b6:84:e3:4b:0e:f2:24:7a:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8C:5F:B8:5E:52:7B:A5:C7:7F:60:60:A3:B2:F1:49:85:69:D0:58
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:71:35:a0:78:15:fe:0f:e9:db:6e:bc:1c:16:ed:10:9f:4c:
91:41:f1:b4:da:24:27:21:4b:bc:ca:09:1f:da:0b:e4:a0:c8:
c9:73:62:a7:1d:05:6e:2c:b0:59:9f:74:9d:57:26:74:3d:73:
e3:fe:5b:32:34:f8:1f:df:0a:f7:e6:5d:16:92:19:2d:22:9b:
df:fd:30:02:ab:95:d1:bd:a1:24:67:5f:7d:ce:f5:e3:2c:33:
e9:ca:28:b3:c9:21:cc:f0:b4:27:ad:94:5d:c7:a7:db:07:e3:
6e:c7:e4:a6:57:8b:f7:7f:c9:8b:e6:9d:a4:ad:79:65:2f:f4:
e8:7c:17:ee:7a:9e:47:38:85:fb:96:da:16:e4:48:4c:32:3b:
5d:74:e0:0f:73:d0:db:39:e0:02:7c:8f:fc:04:2e:75:70:39:
93:90:05:ff:4b:00:03:85:f4:3f:34:54:b1:68:ce:ed:a6:41:
af:77:8f:0a:6a:8a:d1:04:d0:26:4c:62:25:b3:b5:0a:d3:26:
23:c3:cd:e7:f7:f9:20:a8:fc:85:20:6e:90:f1:48:66:5d:bd:
8a:15:21:94:4c:71:ae:50:25:07:3b:75:06:97:f4:d9:c1:57:
83:f3:15:12:b0:99:c0:c4:9c:6b:ed:c1:f2:55:80:db:c7:89:
bc:a1:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 15:55:41 2026 by rpki-client