Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: ZpyzrWTvr/kjmQyAWX5YW78HwB3f+vu1kmfOWbajoXU=
Subject key identifier: 71:D2:E5:0B:05:CD:FA:51:C9:13:3F:43:C7:BC:8F:37:66:D8:3C:FA
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E4F8FD763539A28ACEAB916E603E3BEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08FA
Signing time: Fri 22 May 2026 12:01:27 +0000
Manifest this update: Fri 22 May 2026 12:01:27 +0000
Manifest next update: Sat 23 May 2026 12:01:27 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: nm7MoioN+h6GVd0xsMKuKOWA5DnYvLOzn+CnZm0Ba8w=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:8f:d7:63:53:9a:28:ac:ea:b9:16:e6:03:e3:be:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 22 12:01:27 2026 GMT
Not After : May 23 12:01:27 2026 GMT
Subject: CN=71d2e50b05cdfa51c9133f43c7bc8f3766d83cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:70:f2:46:a7:3e:2b:d1:5a:cf:56:77:e2:
7c:f5:7d:d3:1b:2a:fc:f8:6d:d8:3e:8d:90:c9:5b:
68:74:a8:54:a1:82:31:16:96:d4:b6:cf:00:e7:aa:
20:b7:00:5c:a3:74:af:03:29:dd:47:08:24:66:19:
08:08:00:bb:0c:72:09:6f:b7:5b:7e:06:6a:a8:c1:
1c:3d:d4:6d:b0:d3:22:69:23:47:ca:c5:00:b9:5d:
09:67:d1:c5:a7:0b:5f:41:90:6a:3a:ca:74:8f:21:
c0:fc:a4:42:7e:5f:ce:ec:89:9d:f2:36:d8:86:5e:
12:24:cc:46:4a:a9:8e:9f:4b:ac:bd:21:57:b0:7f:
89:d2:da:62:28:61:af:bd:de:97:1b:6c:3c:22:25:
f8:08:c2:88:0b:88:4b:92:24:68:be:83:f0:78:87:
f4:e4:20:0a:0c:74:96:ac:fb:f0:cb:09:51:47:52:
2c:a0:7e:4e:42:fd:a6:79:f3:cc:42:5c:ac:cf:2a:
67:7d:c2:3c:33:20:05:0f:40:86:8b:8b:73:cc:68:
b9:8f:83:fb:44:d2:e7:23:01:b1:64:c6:99:c3:74:
2f:9d:54:a5:91:f4:40:1f:4c:55:fc:c7:e6:ef:99:
ef:ed:55:89:74:64:22:31:76:91:b1:39:a7:09:69:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D2:E5:0B:05:CD:FA:51:C9:13:3F:43:C7:BC:8F:37:66:D8:3C:FA
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3f:c3:02:71:f3:d9:17:d2:2e:b0:3f:a5:79:ec:4d:9c:63:
00:98:92:db:48:2f:13:01:65:ff:44:90:51:8a:08:e8:16:b1:
4e:d1:58:7c:d5:78:aa:b0:61:bc:c1:37:6f:ca:8f:42:50:a7:
34:dd:81:1d:0e:e5:d7:5f:48:6e:d6:e3:44:3c:b8:bb:e6:1b:
27:c0:ab:dd:78:55:0e:08:4a:13:7c:c4:0f:08:09:55:24:38:
06:4f:ef:a5:63:36:b9:ba:1e:11:15:2d:12:61:9d:57:85:56:
d7:55:87:6d:01:e3:4c:fb:62:b3:bb:05:41:72:e4:ab:fc:c1:
74:91:9f:c1:c4:a5:22:58:16:ed:16:ed:a8:dc:e5:cf:fa:17:
d3:2c:f7:af:6c:27:63:90:93:91:89:ea:08:ec:c3:7d:64:0d:
b6:c1:85:54:a9:71:06:86:06:50:31:96:29:2a:e3:91:c0:b4:
d1:58:b5:9c:27:85:29:16:97:fb:46:77:7b:d0:00:5c:fe:65:
c7:ad:6a:16:84:bf:d6:af:48:a0:dd:f7:b2:5b:15:98:de:64:
4f:ea:7e:8e:ce:2e:d5:4c:f6:f7:75:61:15:af:6f:b3:88:ee:
8f:a9:d0:bf:50:2b:01:c4:2a:46:67:26:d9:5c:c4:fb:8c:b0:
d0:cd:b0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 21:21:43 2026 by rpki-client