Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: 4djV4rXuIspVaAA5T4t2CuV5vjAqL8E1uqe+oz8YK+o=
Subject key identifier: 49:AA:B7:23:12:FB:E6:78:00:F6:B1:89:03:E7:27:22:DD:C9:2B:71
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A098B63FCC70F7FD8B57C9D7CE17DCBEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A29
Signing time: Sun 13 Sep 2026 03:01:15 +0000
Manifest this update: Sun 13 Sep 2026 03:01:15 +0000
Manifest next update: Mon 14 Sep 2026 03:01:15 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: g8FOTwBRQCTbcnzHZhDVm7WQiCewDzD6fs/djLFuacc=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:98:b6:3f:cc:70:f7:fd:8b:57:c9:d7:ce:17:dc:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Sep 13 03:01:15 2026 GMT
Not After : Sep 14 03:01:15 2026 GMT
Subject: CN=49aab72312fbe67800f6b18903e72722ddc92b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:40:3c:01:0c:e6:4f:ad:bc:68:d6:1c:0d:a4:
a6:a0:c1:bb:83:94:56:90:fe:8d:0a:85:db:d4:e7:
f5:73:83:c2:f5:48:d5:e1:2b:5c:17:04:30:8c:49:
5f:89:ac:d5:15:e8:e9:c2:6b:c6:2a:47:24:31:88:
18:65:c6:26:40:ee:55:27:6a:64:4a:dd:b9:31:db:
f6:f0:4e:6a:19:d6:48:47:bd:62:c6:ef:02:43:43:
8b:55:f1:36:78:86:db:56:a9:93:31:68:91:d4:c0:
c0:e3:4d:bb:a4:b8:10:21:bb:5a:b2:b6:f2:7a:dd:
23:0f:34:77:f8:51:75:d0:a1:7c:14:54:d6:f5:98:
fe:d6:73:01:fa:37:36:e4:53:7d:6b:9f:50:06:08:
c2:6f:7b:ed:b6:b3:2b:61:72:6d:65:44:b9:af:2d:
4b:bf:bd:2a:31:15:aa:f0:3a:e2:1a:1b:5c:e1:c3:
1d:39:65:49:36:07:e1:ca:03:14:61:39:c7:8e:92:
52:ea:89:0f:04:4f:6f:35:69:c8:78:0b:b3:b8:dc:
45:13:ab:c3:b6:07:ae:d5:c4:19:5f:55:6a:bf:e4:
e5:dd:94:5c:ca:80:88:f2:c5:0b:36:69:89:cf:2f:
90:bf:a9:7d:4c:59:e0:b3:43:0e:03:b2:d8:2c:3c:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AA:B7:23:12:FB:E6:78:00:F6:B1:89:03:E7:27:22:DD:C9:2B:71
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5c:cc:f6:7d:ae:33:8b:c4:ab:3b:bc:b4:91:5e:f3:ab:7f:
74:93:77:c3:91:20:fa:93:c0:7a:d8:37:f8:27:4e:ad:fc:36:
ab:f3:08:78:01:a0:cc:a8:1f:b0:50:02:a6:75:48:67:d3:6e:
2a:41:6e:09:33:34:47:6f:4e:4c:02:e8:14:05:b9:3c:5c:cb:
f4:b7:e8:47:46:a4:ef:82:17:19:52:4a:c8:32:a9:d3:92:40:
05:4b:f5:cf:a4:85:64:0b:1a:e6:77:9f:cc:9f:a9:23:87:3d:
54:9b:8c:d8:2d:aa:11:80:e4:4f:bf:a7:79:f1:8c:08:28:05:
eb:a9:af:32:7c:71:ad:6e:e3:2f:08:bb:06:65:9d:75:07:da:
49:ea:61:ef:c0:a7:cd:8a:81:2a:4b:3b:2b:9e:d6:f1:fe:73:
8f:d5:bf:37:fc:f9:a9:60:32:ea:4e:8a:f5:8d:60:20:6f:5e:
d4:97:28:c9:30:1d:75:32:0b:26:7a:64:23:8d:78:4d:4a:4a:
83:21:8b:2c:50:a0:58:24:84:7a:b2:ac:48:27:d1:1e:c0:46:
6a:fb:34:d8:3a:f6:df:ee:d1:1d:00:0f:16:12:8d:98:a4:bd:
69:d9:8a:f4:14:ca:46:5f:9b:09:e5:2a:15:82:fb:6f:24:08:
e5:92:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:55:39 2026 by rpki-client