Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: t7ERn2QlJgDim9qKaFiX3CdEt11bg02MiTXa5IIEPS4=
Subject key identifier: 8D:C0:1C:A2:60:E0:97:B9:C8:EB:B6:4E:EB:82:6C:E9:8D:7E:24:B4
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019FECD6572AD14359A5CC9BF279D5B065EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 09D0
Signing time: Mon 10 Aug 2026 18:01:37 +0000
Manifest this update: Mon 10 Aug 2026 18:01:37 +0000
Manifest next update: Tue 11 Aug 2026 18:01:37 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: cF3xP90cgX4oyAevO14rtVEJ43rNBJtuDW5Mn38h4fY=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 14:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:d6:57:2a:d1:43:59:a5:cc:9b:f2:79:d5:b0:65:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Aug 10 18:01:37 2026 GMT
Not After : Aug 11 18:01:37 2026 GMT
Subject: CN=8dc01ca260e097b9c8ebb64eeb826ce98d7e24b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:60:38:29:80:86:29:dd:de:d7:cb:96:8a:
b1:85:11:12:85:96:14:48:cf:7b:60:3d:62:23:4e:
c6:d9:47:43:ef:3e:e7:4e:8f:b1:1c:ea:85:d5:49:
67:ad:eb:24:3c:7c:5e:13:60:57:bc:9d:d6:60:ed:
e8:3f:af:b5:81:c8:86:af:e8:d7:d2:b5:07:a7:80:
56:ce:ea:04:1d:c0:cf:59:80:37:c7:79:01:6e:85:
fc:6b:4d:38:75:02:03:9a:3e:06:36:69:18:08:ce:
14:16:42:db:20:fb:ba:a9:ea:c4:66:a9:fa:52:13:
21:41:68:89:86:f6:7f:18:bd:ba:cb:c4:fa:28:10:
57:16:47:02:fe:f3:fd:e4:f1:9a:8a:84:d9:91:68:
49:2b:a0:de:12:bf:f0:24:1a:9d:e3:3b:ee:3a:61:
6c:8e:f1:a1:f3:0f:be:71:78:8f:fc:a9:80:a4:d1:
92:9b:2c:16:9f:5f:86:ed:9a:84:86:fc:57:a4:d9:
a9:3a:6c:a6:48:6a:22:fc:a2:55:d6:a5:19:5c:ef:
08:ed:6f:7f:e6:8b:46:91:53:4c:3c:91:cb:7b:e5:
69:c9:17:fe:42:57:40:96:d2:98:24:d8:d3:f8:12:
15:0e:e1:69:8f:98:6a:bb:b6:17:f3:90:dd:0d:28:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:1C:A2:60:E0:97:B9:C8:EB:B6:4E:EB:82:6C:E9:8D:7E:24:B4
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:85:34:56:17:b4:3f:90:12:4c:53:5b:df:1b:b1:3f:29:17:
59:6f:57:29:80:7d:7f:27:1a:c6:59:08:ce:63:96:31:4f:55:
7b:e4:b5:00:f6:3f:25:79:4a:63:7b:68:64:d5:61:53:c3:fa:
06:0a:d8:cc:f7:47:c6:f0:36:3d:54:ff:4d:0a:5b:d1:d7:91:
1b:b2:b9:f2:f8:03:6a:fc:fa:47:72:f4:69:92:bc:97:04:54:
ff:cf:05:eb:f7:91:52:63:89:1b:db:26:fa:14:a1:22:bc:48:
9e:a3:17:d3:36:ee:6e:94:3d:8f:cd:77:7e:2c:52:6a:65:34:
41:0b:69:c7:d9:8a:b3:7d:6b:b1:e9:90:d5:bb:d7:10:87:e1:
6f:66:b4:6f:1e:4a:7b:9b:b2:94:da:1c:3a:f8:4e:1c:21:27:
35:2c:6e:12:03:df:28:b3:e2:51:95:6a:70:3e:8f:b6:dd:dd:
81:aa:14:83:63:02:59:7d:b8:41:6e:7d:cf:38:a4:84:29:1d:
85:20:75:eb:c6:74:6c:0b:b1:67:28:49:89:85:b5:c1:56:64:
32:c1:c8:b0:a2:bb:2c:7f:25:94:8e:2e:68:cd:b2:8f:56:2e:
9c:7a:d1:87:67:cc:32:ad:90:bb:3a:40:ca:64:c3:4a:b8:e5:
1a:53:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 23:13:08 2026 by rpki-client