Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: aP7XeA46HoraTQl5nt9VbcoDfWcxQ442Mkf+FUjcOrk=
Subject key identifier: 64:DE:0E:4C:6C:35:AA:AF:BD:C1:7B:D4:C4:8E:6A:8B:49:95:14:9A
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019DED11C854615B1B1F4A4B8E5492229BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08C7
Signing time: Sun 03 May 2026 09:00:58 +0000
Manifest this update: Sun 03 May 2026 09:00:58 +0000
Manifest next update: Mon 04 May 2026 09:00:58 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: vCEYo+A0Y5rugUIoj8JlN4EEammBiogicX/M+0KnDh0=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:11:c8:54:61:5b:1b:1f:4a:4b:8e:54:92:22:9b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 3 09:00:58 2026 GMT
Not After : May 4 09:00:58 2026 GMT
Subject: CN=64de0e4c6c35aaafbdc17bd4c48e6a8b4995149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:d6:b8:dd:63:7f:54:39:2c:a8:33:1d:9c:
c9:ea:dd:7a:79:e2:45:73:99:d4:0f:6f:61:e7:72:
a2:c3:92:fb:32:e4:4f:fd:71:67:2a:62:31:ba:dd:
24:d4:37:c9:ab:65:06:a8:95:2a:d1:8b:df:30:ef:
08:3d:f6:58:8c:92:5c:6d:84:65:07:31:a7:e9:f9:
30:4f:ad:12:91:6f:7e:63:38:13:7e:a9:dd:07:78:
d1:3e:03:32:d0:7a:6b:8d:1f:14:39:15:cb:95:e9:
b8:b5:11:e0:6a:5e:04:46:40:2c:09:5b:05:f7:ac:
a6:17:ae:86:90:3c:50:d7:6a:3f:3d:88:85:2f:f3:
b9:bb:3e:8d:1e:39:ed:90:02:eb:b4:dc:cd:23:ad:
0f:60:f6:4a:26:11:2f:95:be:45:d1:1d:b0:2e:00:
a3:99:29:16:75:b4:df:98:b7:e0:33:d7:fc:e2:74:
94:b6:6c:b7:06:1e:92:d3:f1:65:c0:1f:20:0c:99:
5b:89:ba:a2:46:5c:1c:51:b6:eb:76:2f:3f:e7:40:
8b:90:1b:ee:79:b1:4f:4f:95:ae:f0:47:31:0a:3c:
a8:1d:ff:2b:5d:43:8b:84:1f:8c:46:7f:ea:45:d8:
c3:8e:83:fc:39:41:e5:4f:61:63:e9:ef:36:55:19:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DE:0E:4C:6C:35:AA:AF:BD:C1:7B:D4:C4:8E:6A:8B:49:95:14:9A
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c9:72:ec:29:31:26:26:f4:64:65:09:ab:83:4e:11:d4:18:
4a:92:96:77:6d:41:54:c3:ff:1f:c9:c8:f2:cc:b1:88:16:66:
2e:14:ce:cd:7d:44:dc:3a:70:75:1a:d4:67:b7:73:43:45:e9:
60:ab:ba:65:ee:67:bc:26:3d:52:c1:45:d1:a9:fa:55:68:25:
95:55:35:8c:45:fb:e2:83:5e:69:0e:42:ab:ab:c8:17:4e:fe:
87:2e:6b:e8:63:16:6b:0a:4f:1c:73:52:a6:43:a7:ea:ab:16:
6e:5c:5f:be:05:cb:31:f9:95:9e:9d:33:b0:47:48:bc:7a:98:
46:68:c8:60:ac:85:65:71:79:29:d0:6f:60:d6:bc:40:cd:91:
75:c0:fd:74:38:6b:6d:9c:08:98:43:70:06:77:f2:9d:07:f6:
55:5b:79:90:2a:25:ec:0f:a6:fe:df:d2:6d:04:a0:79:10:bc:
5f:09:aa:c6:96:b0:9b:da:d6:11:a3:7b:84:76:27:bf:9d:cd:
35:13:b9:14:01:b6:13:79:c5:12:72:9c:78:78:38:a8:17:b0:
83:a7:02:90:1c:ab:08:0f:e3:61:01:4b:cb:93:b6:06:28:c1:
d0:d0:ee:00:6d:20:03:cd:08:c8:69:fe:9b:0d:c4:09:da:99:
4f:db:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 19:34:56 2026 by rpki-client