Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: QKD9nLW0sNJHvL/HJBBP9h/i4Bb6OodZJeGeey0j87o=
Subject key identifier: 9A:96:B7:CF:9D:9D:B2:52:CB:0B:A3:12:2D:B7:47:1F:60:5E:E3:0C
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A03DF187A2A912613CCBB6E2AC2F3649AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 09FA
Signing time: Wed 26 Aug 2026 12:00:34 +0000
Manifest this update: Wed 26 Aug 2026 12:00:34 +0000
Manifest next update: Thu 27 Aug 2026 12:00:34 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: jrKrK1nhPEimjTagadv+B0ssewJsZTO4fQNo/ZnFNfY=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:f1:87:a2:a9:12:61:3c:cb:b6:e2:ac:2f:36:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Aug 26 12:00:34 2026 GMT
Not After : Aug 27 12:00:34 2026 GMT
Subject: CN=9a96b7cf9d9db252cb0ba3122db7471f605ee30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:50:2c:06:6b:73:b4:94:3c:73:45:77:ed:
00:48:96:31:01:be:4c:26:5a:92:72:6b:d0:b4:8b:
2b:f5:80:7a:40:91:66:68:9a:3d:5c:19:f0:67:f9:
5c:66:66:cc:71:b5:13:f9:c6:e3:9a:40:6f:b2:b9:
ad:18:90:3c:e5:07:5d:18:eb:4b:db:a9:87:8b:07:
81:f4:4c:d2:f4:b2:75:8e:7a:b5:ae:5c:53:4c:ca:
77:77:f0:ba:7e:4d:bc:66:76:96:3e:38:f1:81:4f:
df:46:05:86:84:e4:05:e1:82:3e:4c:b5:48:eb:34:
fe:c7:cf:1e:9c:2e:b7:57:d5:a0:08:8d:25:ae:45:
d7:69:97:eb:b7:31:6f:29:b5:88:43:95:82:b2:36:
00:f1:a4:f3:ec:d0:c1:96:26:c1:30:99:9c:a5:91:
56:df:1e:d1:76:80:59:99:52:21:d3:50:bb:4b:4a:
1b:72:1f:8f:1d:13:d1:a8:aa:5e:ff:45:69:dc:0b:
4a:c7:17:f5:26:ea:e6:f3:47:50:e2:6b:ec:85:61:
34:ef:5a:ea:33:7c:75:d3:49:a8:40:04:ff:36:00:
71:1f:4a:58:95:ed:9a:6e:b2:24:bf:ea:81:10:13:
57:20:0c:21:0c:b7:28:f6:b3:50:91:66:55:52:52:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:B7:CF:9D:9D:B2:52:CB:0B:A3:12:2D:B7:47:1F:60:5E:E3:0C
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:24:2b:ae:5a:56:8e:5f:7b:75:6b:db:96:ea:92:a8:e4:48:
a5:32:2f:d2:7c:49:15:5d:63:08:76:f2:ff:f9:82:65:1e:c6:
30:3a:c0:7b:fe:e7:f3:50:22:e8:5e:55:ce:af:22:85:83:02:
a6:ba:0a:65:f4:c2:c8:0f:6e:62:ee:ba:bf:f4:71:b9:35:0e:
56:b2:26:3c:75:e7:7d:ac:97:98:cc:bd:5c:65:2f:35:1f:15:
c1:1d:dc:b2:c7:31:a3:56:03:16:86:da:a4:ff:5f:e5:5d:d8:
e3:a3:85:49:58:a6:be:55:76:5d:9f:4b:e9:cb:4f:a0:1d:51:
32:47:45:7d:ff:f9:ae:23:21:d0:19:d3:39:34:53:52:d8:52:
3d:69:49:32:7c:53:86:a5:0f:30:2a:dd:db:1d:cf:e8:d8:67:
6e:e4:13:bd:78:4e:37:01:33:2f:82:7e:93:5f:e8:d9:ed:b6:
ec:4b:06:06:5c:4c:fd:62:7c:ea:23:27:2a:ae:30:de:70:1b:
af:ca:c2:68:11:51:cd:69:4e:03:2e:7c:81:9e:07:54:66:19:
8e:c2:ac:47:fb:28:11:4a:b8:88:8e:9c:bb:8a:a7:ee:24:36:
61:64:a9:44:6e:92:b6:ce:36:48:f0:db:51:dd:67:49:27:15:
01:d4:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:29 2026 by rpki-client