Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: FzT4M/+OSK2NjpnMBhdPao/R/zlBp6xa2NDeSxEaAWM=
Subject key identifier: 86:26:DC:F3:6D:49:02:CE:28:21:D1:24:57:9F:CC:DE:97:22:36:41
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E024FCAE447231F5D78DA5495FA185F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08D2
Signing time: Thu 07 May 2026 12:00:44 +0000
Manifest this update: Thu 07 May 2026 12:00:44 +0000
Manifest next update: Fri 08 May 2026 12:00:44 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: vX41kDj1egh+qxu1mssLwSBKYY9lwwgDIltBZbq9H/4=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:4f:ca:e4:47:23:1f:5d:78:da:54:95:fa:18:5f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 7 12:00:44 2026 GMT
Not After : May 8 12:00:44 2026 GMT
Subject: CN=8626dcf36d4902ce2821d124579fccde97223641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4b:25:08:ab:db:fd:e4:32:6b:ca:1e:43:3c:
6c:06:31:9c:01:ef:cf:c5:54:ed:d4:5e:72:82:c9:
fa:d5:fc:37:b0:66:20:e3:0f:4b:f8:2f:ca:03:17:
3d:73:2c:94:a3:cf:fb:df:e4:4b:78:d2:77:c9:d0:
b4:ac:bc:38:b2:44:62:1b:76:66:58:40:62:7d:95:
ac:4b:03:21:7d:ad:75:47:69:39:75:61:e1:34:0e:
b7:40:31:2a:4b:6c:9b:5b:30:61:1a:4a:e3:61:3b:
51:b6:fb:ee:4e:a1:ab:84:13:bf:e3:84:ee:67:a2:
e5:e5:13:70:68:ef:73:f5:9e:f4:37:55:8d:e9:9e:
13:9c:a5:6c:2b:a7:ef:73:ba:9f:a0:b1:73:45:79:
b9:d5:5b:54:6a:a7:d7:a7:07:18:d9:34:d0:88:46:
6f:8c:7e:b9:ce:38:45:e5:a2:7c:fe:7b:4d:6a:53:
b8:ad:93:9c:6b:27:2b:60:5b:f3:e2:e4:be:bc:45:
37:b4:24:8f:ce:ec:62:60:68:0f:7f:c9:0d:54:39:
38:00:82:87:dc:88:95:7b:ad:c9:cb:4a:28:51:e8:
65:b4:ba:10:f1:36:13:e2:57:37:61:91:0c:af:3e:
ba:1f:c9:86:f7:26:41:42:a8:fa:15:03:97:4a:9b:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:DC:F3:6D:49:02:CE:28:21:D1:24:57:9F:CC:DE:97:22:36:41
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:42:a1:84:78:04:ef:67:2c:f0:8d:42:eb:5e:80:47:d8:12:
c6:4d:30:81:a4:34:50:d3:e3:3c:45:70:94:48:17:b2:17:90:
a9:ef:7e:26:88:1b:02:5e:1e:6f:06:a2:26:e0:17:d5:13:61:
00:0b:a7:44:b6:aa:e3:ea:f5:5e:30:d1:ac:95:43:f7:85:30:
da:19:1f:51:1d:c5:24:06:5e:6a:aa:02:13:14:fe:9c:49:3e:
59:40:e3:7f:92:58:36:58:10:ff:f0:1a:f3:81:bf:52:8c:c9:
4d:c5:ae:88:d0:30:3e:49:b9:f5:32:ff:54:cb:70:7c:ee:8d:
88:1b:d3:2d:54:e8:d9:66:9e:2c:bd:17:d7:06:63:db:df:a2:
a1:68:69:5e:35:69:5c:40:de:74:c6:63:d8:ad:2b:89:72:7d:
f6:b2:4f:aa:17:1a:f1:94:86:cf:3d:ad:5e:6b:f8:51:32:01:
48:2a:88:e7:2a:b5:cc:f4:b2:2d:65:b6:a5:81:3e:08:7f:e1:
0b:09:81:12:b8:04:7c:40:0f:d3:7f:86:94:6f:33:7c:ff:ae:
05:b0:89:e0:60:80:f5:f6:c2:ff:d3:b4:e4:1e:79:ca:d6:54:
9a:76:f5:f2:dd:cd:ce:03:82:a1:3e:35:a3:17:aa:a2:57:fa:
80:ed:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 15:01:28 2026 by rpki-client