Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: qzVHMgQjEf2rQjCiUYGu7scBLoB+fPTlOA2zERk9iDs=
Subject key identifier: 25:6F:DC:66:7F:13:FA:25:FB:55:01:E1:4A:C0:9C:AD:DA:F5:F0:29
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019F5FDC28E404C0E73E7906A0BAA63FDBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0987
Signing time: Tue 14 Jul 2026 09:01:31 +0000
Manifest this update: Tue 14 Jul 2026 09:01:31 +0000
Manifest next update: Wed 15 Jul 2026 09:01:31 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: IDo32RdWJSRAb9HTnMvaEuhGulpbtmTF8TmF5v4SQBE=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:dc:28:e4:04:c0:e7:3e:79:06:a0:ba:a6:3f:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jul 14 09:01:31 2026 GMT
Not After : Jul 15 09:01:31 2026 GMT
Subject: CN=256fdc667f13fa25fb5501e14ac09caddaf5f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:a5:63:5f:64:20:12:43:2f:38:3b:0a:6b:
0f:46:1a:59:69:93:9d:27:a9:3f:14:cd:5b:f0:89:
cb:e7:dd:8c:ae:a0:0a:00:3f:32:fa:8e:ac:bc:91:
01:ce:dc:1b:31:b0:52:47:a0:70:e1:8d:6c:73:ed:
44:ca:29:a7:49:fd:02:aa:0e:bb:0c:78:0e:36:49:
23:7d:92:cb:98:cb:10:ad:b5:76:79:20:7d:15:06:
27:7d:52:a7:92:64:86:29:65:e5:e9:fa:ae:6b:b0:
e9:0d:ba:9c:13:30:a7:87:bf:99:3b:52:f8:a9:05:
e4:7f:7d:2c:93:8c:30:17:40:2e:60:2a:55:61:ff:
b8:fc:57:95:b7:8b:fe:56:18:ce:61:16:18:fb:17:
bb:03:14:b2:12:42:db:a5:a4:35:d3:84:64:ab:08:
af:c9:95:a2:42:ac:05:12:c8:1b:42:fc:9d:65:3a:
b1:74:dd:48:63:53:a6:87:5a:96:4b:29:17:62:d9:
ad:aa:0e:6a:08:81:e8:c9:05:23:13:88:1b:39:d7:
10:50:3b:cb:53:76:17:97:94:7c:11:9c:1e:22:5a:
b4:b7:d6:d4:af:59:25:19:7d:90:90:7f:34:c6:09:
9b:76:dc:65:7e:8b:62:ef:31:f8:f0:5d:d5:e9:99:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:DC:66:7F:13:FA:25:FB:55:01:E1:4A:C0:9C:AD:DA:F5:F0:29
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:55:20:0a:5a:22:fd:09:5c:b9:fb:63:60:d1:f2:53:7c:
3c:3d:45:a4:58:76:fb:59:39:e4:87:42:b0:70:6f:ed:c4:be:
72:00:5b:aa:b9:cd:07:1b:c3:ac:2f:4e:e1:48:3a:2d:4a:d5:
be:b0:16:62:dc:91:67:fd:c2:c6:f3:54:bd:8b:1a:4e:bc:bb:
e1:58:72:2b:c9:f6:0b:c3:33:91:e1:ca:2b:d9:cb:45:f7:e5:
65:52:d7:78:bf:f5:54:98:63:41:9b:ea:69:18:ac:93:6c:83:
bf:52:76:2a:f6:ed:44:be:01:e7:e1:ff:c7:1f:8b:b2:45:11:
ee:70:8e:23:6c:79:88:d7:22:43:0d:70:e2:88:5b:e4:b8:dc:
57:86:98:84:13:4d:ff:3f:ff:64:42:b9:ab:f1:a3:a6:6a:40:
2f:63:03:9a:2b:a5:3e:a2:e2:0f:5f:28:d7:7c:bd:40:a9:9a:
82:fa:f3:04:cb:f3:57:f3:54:bf:51:fd:4e:f0:6b:4b:78:33:
d1:c7:d0:3f:fd:f0:61:cb:72:b8:73:80:25:64:92:14:f4:99:
ec:e6:d9:35:de:a4:f5:0f:e6:cb:ea:90:b8:aa:7a:5e:22:c4:
df:93:c3:e2:d8:01:70:d5:8c:d0:12:c9:2d:11:39:27:84:f0:
cb:16:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:24:30 2026 by rpki-client