Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: dkgSuAA5y7Vua7M2CLMaknfbNJVEtkwg7IflVbWfjDY=
Subject key identifier: 99:A8:11:4D:43:AA:50:1A:55:C0:2C:A6:A2:B2:65:7E:FB:CF:A5:B6
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019EF1C7D6E1946DF3C801A0020D38F6E861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 094E
Signing time: Tue 23 Jun 2026 00:01:06 +0000
Manifest this update: Tue 23 Jun 2026 00:01:06 +0000
Manifest next update: Wed 24 Jun 2026 00:01:06 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: iwlfTZoQZ77HlIgw2Nh2/o1zt5GznDLVaskmgHaiqw4=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:c7:d6:e1:94:6d:f3:c8:01:a0:02:0d:38:f6:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jun 23 00:01:06 2026 GMT
Not After : Jun 24 00:01:06 2026 GMT
Subject: CN=99a8114d43aa501a55c02ca6a2b2657efbcfa5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:be:73:b2:18:5b:b2:31:dd:b0:6b:0b:4d:
8c:5c:85:e4:d3:c2:81:87:50:91:f5:2b:5f:4f:c5:
33:ce:d9:66:a9:89:f4:cf:c4:a5:57:13:91:72:27:
33:2f:0e:6a:6b:a4:ad:d0:d8:bf:b3:b3:63:e1:a3:
77:9b:67:de:66:fc:c7:49:30:56:b1:7c:54:44:1e:
b7:0b:8e:3d:6a:82:55:50:f2:4f:20:b6:7f:fb:6e:
51:29:db:78:4d:71:92:49:3e:f4:90:e3:c7:96:99:
4d:4e:6f:1c:1b:aa:e6:3d:c7:36:4c:9f:f5:9a:24:
df:15:bb:92:d1:28:67:81:e1:da:b9:d8:ad:89:3a:
1a:d0:c6:51:a0:0e:92:28:14:58:d6:0a:eb:53:f3:
1f:5c:c9:09:8e:e0:e4:8d:58:8b:c3:11:18:59:d4:
b4:d7:06:a4:9d:d6:20:7c:01:36:b0:0f:9a:4d:63:
a7:94:b6:3f:59:e5:03:fc:40:54:75:a5:15:6d:34:
fe:e0:74:55:bf:97:97:ab:6e:5e:f3:e4:5c:91:88:
39:1b:7c:b1:07:fe:e9:78:53:7f:d4:32:b2:af:8f:
32:e9:34:ff:fa:13:5d:f5:a7:eb:33:54:0a:c3:86:
77:d8:38:3a:cb:c8:09:fc:88:a0:fb:0d:bd:13:e6:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:11:4D:43:AA:50:1A:55:C0:2C:A6:A2:B2:65:7E:FB:CF:A5:B6
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:f4:78:9a:a1:1c:34:01:35:8c:76:e3:9a:8e:75:d7:02:
8b:20:7b:b1:b7:f0:89:46:c6:31:b1:3a:49:7b:a3:c6:d4:3e:
d6:5b:be:fe:23:8d:05:76:6c:a4:10:8a:b4:66:ad:a1:0d:54:
b4:f5:6c:f2:33:67:b9:61:ac:be:1c:8c:89:b9:fa:bb:56:ee:
4f:15:26:10:9b:de:a1:de:9b:d6:49:c1:70:2b:05:c2:ad:5c:
52:e7:3b:cb:e7:a3:47:b0:16:64:09:54:ef:77:dc:ba:ee:13:
de:6f:e6:16:12:3d:f7:47:d0:d1:e2:57:73:d9:ba:1f:cf:52:
bb:e8:43:f3:8f:2a:98:eb:26:52:83:a5:bf:fe:8a:e8:f2:7e:
2a:bd:5c:34:9c:8c:4d:60:04:59:5d:03:48:80:53:6a:20:ec:
84:20:68:43:78:14:7a:a0:fc:3e:3e:8e:52:a7:45:e1:1a:01:
13:51:04:c3:c4:22:4c:75:0c:1d:1b:7a:e8:1c:41:b6:5f:25:
3c:46:ab:8c:17:f1:8b:64:25:35:0d:23:c9:1f:75:81:1d:60:
bb:15:0b:b7:bc:a3:5d:50:83:c2:9f:27:a4:1b:b8:09:54:8e:
82:8c:4c:6c:da:ae:1a:75:83:c7:51:41:91:29:31:6c:98:00:
9f:7c:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 09:37:49 2026 by rpki-client