Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: u1Qde8bEgspcyi8naSwoeI+hc2xqEPCelMgKqpDzyM0=
Subject key identifier: 87:DD:EA:3F:4A:55:B8:32:C9:6F:45:CB:1A:2B:99:54:B1:A9:E7:F6
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019DBADBAE103C821DD1E0BB69883EC572CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08AD
Signing time: Thu 23 Apr 2026 15:00:52 +0000
Manifest this update: Thu 23 Apr 2026 15:00:52 +0000
Manifest next update: Fri 24 Apr 2026 15:00:52 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Rp82Bfnhkcqs/itvKcdPDZbffWX0lE3daA3PCFMVN9M=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Apr 2026 14:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:db:ae:10:3c:82:1d:d1:e0:bb:69:88:3e:c5:72:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Apr 23 15:00:52 2026 GMT
Not After : Apr 24 15:00:52 2026 GMT
Subject: CN=87ddea3f4a55b832c96f45cb1a2b9954b1a9e7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:34:69:c2:e0:10:07:63:fd:4c:04:68:85:
f1:96:3b:b4:16:a8:0c:2e:a0:4f:06:0b:89:2e:46:
cb:5d:fb:7d:f3:b9:e0:9d:02:14:13:7e:e6:49:90:
50:2e:8f:de:01:bc:bc:68:0e:fe:a8:d4:83:9f:75:
a9:db:09:db:3d:98:2f:5b:e0:7f:c0:bc:4c:82:49:
df:af:19:29:a6:46:1b:0f:ba:0b:a7:ea:f6:35:99:
7b:43:60:61:6a:23:e6:c3:07:c6:24:aa:c0:86:50:
e9:42:4c:64:4b:59:5d:09:35:82:f1:41:98:01:d0:
5b:f6:5b:e9:6e:e4:5d:06:2d:96:7b:cd:f3:63:1c:
dc:fa:e0:75:f7:d6:f8:a0:cd:4c:1e:d2:f3:8a:2f:
5c:f1:38:5b:3e:32:97:75:f8:c3:e2:44:b1:a1:f4:
ac:b8:bc:91:38:33:fe:a1:84:75:c7:2a:d5:6d:c9:
82:81:ab:b9:4f:f4:d1:e3:f0:4c:43:ae:ef:83:9f:
49:c9:47:d9:ec:2f:a7:37:a5:0b:ca:24:b6:c7:b9:
a2:e5:df:e5:e0:b5:c3:77:2d:86:08:df:4b:b2:c1:
93:b1:94:2a:27:1b:0e:99:26:fb:65:6c:de:ac:1f:
4a:e4:9e:54:81:57:d4:12:2c:30:4c:34:ed:26:75:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:EA:3F:4A:55:B8:32:C9:6F:45:CB:1A:2B:99:54:B1:A9:E7:F6
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0d:14:ea:61:5c:82:16:82:cc:98:30:f2:99:46:dd:57:42:
c1:aa:13:de:0e:55:93:67:45:d9:12:ad:a4:35:4e:73:08:2e:
e6:cc:2b:fd:38:15:0d:a7:fa:8d:fd:b0:50:c4:f0:cb:b7:6d:
8a:a1:a1:ca:26:f1:a4:3d:b3:55:11:64:93:93:07:58:8e:c0:
24:b1:2e:d9:90:eb:9d:62:45:52:dc:55:82:6b:15:dc:b3:d6:
1b:6e:36:45:72:e5:c3:1b:fb:21:30:85:88:06:61:5f:f0:ea:
79:5f:39:5a:63:a3:a4:27:4b:f6:c2:21:6c:37:ce:d5:3f:b9:
98:74:9c:d3:9f:47:26:29:1c:88:97:5c:3f:d7:09:a1:b5:d8:
a7:e4:f5:9b:5f:74:26:ca:a9:2d:e6:55:7b:bb:99:af:f0:1c:
50:5c:bd:62:53:80:5d:57:6b:75:f1:0c:03:48:c7:db:66:e1:
1c:57:36:66:46:73:60:37:68:49:ea:a3:3e:83:a9:74:71:b4:
dc:68:9d:db:1d:ff:f3:4c:12:29:2b:84:a2:8d:06:bb:c9:79:
32:48:d9:f0:42:12:1d:59:0a:63:48:53:a0:42:34:06:c8:f4:
f6:9d:c8:3c:b2:ca:a2:41:b9:59:34:26:05:dd:c6:2a:d0:3c:
c6:56:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 18:53:26 2026 by rpki-client