Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: XzEWhKgD0+EOtXWFKcfl6gA91VHvldYGV9mKtV8thN0=
Subject key identifier: 25:42:E9:32:82:C0:EB:9B:AA:07:F0:27:72:82:C6:88:0C:98:3C:BC
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A079CFE146473FC4B853F41133F7170CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A19
Signing time: Mon 07 Sep 2026 03:01:01 +0000
Manifest this update: Mon 07 Sep 2026 03:01:01 +0000
Manifest next update: Tue 08 Sep 2026 03:01:01 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: cJy0ta2cTP/sNxm3S5IVWQdTdXITp1sut3KmH3X9EPY=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:79:cf:e1:46:47:3f:c4:b8:53:f4:11:33:f7:17:0c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Sep 7 03:01:01 2026 GMT
Not After : Sep 8 03:01:01 2026 GMT
Subject: CN=2542e93282c0eb9baa07f0277282c6880c983cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:05:44:75:98:60:4d:99:08:0f:51:23:58:
43:56:e5:3a:25:eb:59:88:37:0a:40:b2:da:0b:ff:
1d:a1:bf:9f:75:09:c0:32:55:28:a2:c1:58:ad:23:
d5:bb:8e:00:5e:0a:6b:ce:21:57:1c:40:b1:92:b8:
8f:34:32:4d:77:4c:7d:29:db:29:7d:ec:10:8e:20:
03:93:82:94:80:72:b9:b0:51:2e:aa:dd:39:e6:d0:
62:89:78:77:62:3e:8f:11:c8:b6:7a:a1:ff:a6:4f:
0c:d9:2e:19:64:49:35:78:b7:9a:2d:61:48:43:38:
4d:fb:cc:10:da:7e:c8:c8:b9:a0:1f:07:fe:70:a1:
a5:00:43:eb:8a:6d:b4:6b:df:95:ce:4f:f5:94:d3:
02:9a:e9:e4:20:3f:99:24:92:f1:cf:26:b2:c8:9f:
f1:f5:06:d1:81:dc:c2:6d:da:17:7f:91:1e:c0:3e:
0c:f8:ee:87:da:dd:b4:7d:84:71:7b:73:6f:3c:64:
c2:cb:df:62:ed:e7:b3:e8:3b:04:eb:b9:95:0e:ed:
37:24:da:3b:d4:fe:71:96:aa:23:58:ce:9e:25:ee:
32:91:e9:34:e3:de:23:47:11:4a:9b:4a:76:d4:50:
bc:55:2f:eb:fa:6a:5f:cc:53:65:b8:84:93:1f:37:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:E9:32:82:C0:EB:9B:AA:07:F0:27:72:82:C6:88:0C:98:3C:BC
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c0:63:4f:84:ee:4c:a5:76:37:cb:a4:1c:02:b9:80:6b:11:
e6:37:35:12:15:db:59:f1:ea:98:ca:a7:a7:ff:a0:fd:5d:21:
f5:f0:60:76:08:28:ca:54:9a:f3:df:fd:9b:ad:55:87:d9:c9:
bb:09:d7:6c:c4:e6:7a:83:77:2c:2a:1b:bd:af:57:53:b2:4f:
ec:7e:2e:df:d7:00:58:43:41:c1:03:cd:c8:67:db:c3:a0:e2:
56:18:e7:a0:f3:77:8d:2a:f6:35:3b:4f:07:fe:8f:77:4c:f9:
92:f3:e5:08:19:bc:08:47:4f:32:0a:95:81:38:d8:ef:3f:30:
50:96:c1:76:d9:ce:16:81:b4:88:ca:82:34:b5:8d:ea:f3:b2:
70:19:01:26:bf:2e:36:ee:08:20:58:ac:80:55:33:d9:73:96:
51:2a:dd:ac:99:04:7f:6b:b4:cc:2b:64:da:db:6f:69:6e:47:
d4:50:26:03:f8:25:de:da:5b:b5:15:19:44:9f:94:75:46:83:
b1:aa:d7:5a:ef:5b:d9:4f:7e:10:8e:9d:a8:d6:51:37:3a:fc:
ff:53:68:2c:b1:8b:39:29:55:81:4c:aa:91:dc:27:99:cd:cc:
74:1a:05:cc:6e:13:34:5c:2f:28:44:9e:1e:c5:2d:8d:ff:7e:
92:26:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 05:39:51 2026 by rpki-client