Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: QFl1xfKIV/g5OtQjvd7Y7TcB+B7A+DOXUa/ZDlHCVso=
Subject key identifier: 07:CB:91:F1:3C:56:95:05:ED:D5:DF:42:F1:1E:60:FB:81:EE:2E:1A
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A106CA56A5926C893E1C62C304C4B7642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A62
Signing time: Sun 04 Oct 2026 12:01:26 +0000
Manifest this update: Sun 04 Oct 2026 12:01:26 +0000
Manifest next update: Mon 05 Oct 2026 12:01:26 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Euh/JgTjC6jxm6X/De9TYbBHmbw1vSOmT/kcgH6gtb8=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:56:a5:92:6c:89:3e:1c:62:c3:04:c4:b7:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Oct 4 12:01:26 2026 GMT
Not After : Oct 5 12:01:26 2026 GMT
Subject: CN=07cb91f13c569505edd5df42f11e60fb81ee2e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:2f:b2:b9:5a:73:81:63:5f:44:a6:fe:e6:
7a:25:2e:95:3f:b9:41:05:24:0d:10:16:86:fa:fd:
f0:71:14:25:d4:e8:29:f6:a2:de:4c:fe:16:67:aa:
eb:83:fd:24:f1:44:55:27:d1:d4:c9:4b:f9:ce:60:
75:70:92:c9:3c:ab:d2:e6:ff:68:9d:22:47:b6:e6:
f1:c9:cf:a1:4f:93:c8:dc:d7:4a:9e:b7:59:94:72:
59:c0:2a:62:2f:28:f0:d1:2c:6f:25:e9:12:2b:56:
5d:aa:ff:46:fa:ff:55:1b:57:51:56:09:4b:3e:e5:
40:77:a5:48:e8:7c:7f:eb:4b:90:17:49:08:2b:d1:
76:f3:ef:09:92:b1:76:03:37:56:ba:36:ad:8a:59:
76:cc:48:79:a7:30:93:bb:b8:2c:be:0b:68:46:45:
03:7c:a1:ff:3d:cd:54:6e:3a:52:6e:a5:1c:3f:4c:
d2:eb:56:b8:bb:b7:bc:b1:c0:92:93:43:17:03:24:
c5:15:e3:0a:36:88:0c:c9:e7:cd:dc:30:99:08:69:
75:e4:93:c8:09:11:ed:22:76:64:3f:3b:8f:09:44:
43:b3:4e:95:ba:7c:67:01:22:20:e9:7c:ea:b6:34:
9c:7e:ed:d1:0a:2e:de:0c:65:62:28:61:8a:74:89:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CB:91:F1:3C:56:95:05:ED:D5:DF:42:F1:1E:60:FB:81:EE:2E:1A
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:18:a2:7c:00:a5:00:bb:a3:09:31:c0:f9:0e:97:64:ec:ea:
f8:c7:30:4c:88:e5:3d:1c:71:04:c8:d6:dc:31:2a:d7:ad:d7:
fe:c0:96:8c:c7:ef:25:ab:08:fc:6b:a9:fd:dd:17:4b:69:8b:
8f:ba:ce:f8:d9:a6:7e:59:8f:0c:2a:f1:01:99:37:fc:a7:77:
b2:1b:17:f6:72:47:86:23:32:99:a6:cc:0a:df:60:a3:1f:5e:
f6:d1:60:ed:93:af:19:ed:97:af:bd:01:49:c9:62:71:09:64:
5d:8c:47:32:b0:fe:93:d4:75:45:6b:10:0a:e0:f1:8f:41:f8:
21:30:47:94:4a:57:dc:f0:6b:e0:af:b4:d5:df:fe:11:aa:4c:
48:85:70:fc:c9:cd:2c:8f:40:a4:a3:67:b3:fa:3b:36:04:ee:
94:c6:12:42:ed:f0:71:a7:06:36:39:a3:29:25:f7:7b:b3:c3:
cd:c8:1d:c3:3b:75:4f:df:d2:bb:ef:46:50:fb:a5:7e:33:95:
28:f4:2c:99:9d:39:4c:42:b9:3a:8e:11:a8:b0:3c:89:76:97:
e5:4a:1e:34:1c:65:7d:b8:fc:95:4d:c8:0b:a9:cd:a9:a4:24:
de:1f:9e:8e:dd:da:19:79:e7:cc:cc:89:05:a4:cb:b1:8b:c7:
7b:c4:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:27:16 2026 by rpki-client