Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: nLD/H85Q9GHha7JaiQqldqY2ZevUe8PA0m2ZYCKh+kE=
Subject key identifier: 18:8E:D2:3B:7D:46:27:99:61:B9:10:A1:ED:F5:0B:A5:50:A8:B4:24
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A1637CB0D226D8834C582B8FA494711BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A92
Signing time: Thu 22 Oct 2026 12:01:18 +0000
Manifest this update: Thu 22 Oct 2026 12:01:18 +0000
Manifest next update: Fri 23 Oct 2026 12:01:18 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: TqqaQ1bobvD8odUWNb38pjgaxOTJEGNJ20VvmnlANCQ=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:7c:b0:d2:26:d8:83:4c:58:2b:8f:a4:94:71:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Oct 22 12:01:18 2026 GMT
Not After : Oct 23 12:01:18 2026 GMT
Subject: CN=188ed23b7d46279961b910a1edf50ba550a8b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:0a:fd:56:c8:4b:87:ec:77:f9:9b:63:75:
19:72:e7:49:19:de:07:f8:2f:f0:f5:b8:93:c7:d1:
3c:b8:5c:1f:ba:a0:6f:ba:c5:1f:ab:d2:b3:88:4c:
6b:0b:58:4d:61:ab:f9:3c:d9:b4:ba:b6:f8:7b:9e:
a4:84:85:e6:6d:f6:d6:37:06:6d:cc:1e:92:7e:8e:
81:29:54:18:54:11:b5:2c:3b:c3:07:9f:f7:d2:b1:
a9:85:46:fa:fd:b1:9b:69:fe:42:20:48:5b:b2:9d:
72:8c:76:b8:31:b0:45:ef:26:b0:a6:ca:b7:0e:da:
c1:43:ac:62:68:56:ce:87:1f:97:df:6e:fc:a6:a6:
93:87:7b:bb:6f:37:ee:26:a9:13:41:26:89:8a:ce:
49:58:50:94:ff:70:fd:0c:27:5d:ee:a8:91:6f:ba:
53:29:e2:b1:21:79:da:5c:8c:7e:b3:8c:b7:bd:3c:
64:85:4c:83:d6:0c:72:7f:66:1c:12:d9:34:d3:c9:
c8:9d:0e:c0:20:f7:0a:75:35:63:c7:b7:d2:04:52:
de:06:f6:83:4b:b0:c4:48:f9:99:2d:a2:92:bc:94:
a9:a1:aa:27:4a:f6:dd:91:dc:41:38:ae:b0:95:e6:
38:94:be:7b:32:a4:6a:5b:ad:0b:89:fe:6d:d4:99:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:D2:3B:7D:46:27:99:61:B9:10:A1:ED:F5:0B:A5:50:A8:B4:24
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:06:b4:dc:bd:80:b3:0e:0d:fb:4f:ea:11:37:a0:d9:83:98:
65:17:19:12:d8:90:54:ab:47:45:bb:60:25:bf:56:d8:45:30:
04:53:0f:82:d5:46:9c:25:08:48:6f:b7:88:2b:5f:f1:9e:aa:
9d:6d:fd:a9:d9:86:15:27:ae:08:9b:bd:47:8a:94:8b:a4:62:
9d:8a:51:c6:20:13:dc:43:76:b9:8c:65:93:56:c2:1e:fe:dd:
7f:9c:3e:13:ed:0e:92:fa:ce:39:8a:d3:b3:6e:ba:8e:2a:9c:
98:87:97:03:10:51:0f:d4:8b:86:7b:b3:64:dc:df:f3:c6:6c:
55:7a:d0:7d:47:4b:5a:f1:5a:93:dc:d7:d7:12:5e:d7:dc:57:
c8:5a:46:7d:8b:4f:f4:06:b9:72:17:ec:0e:c5:25:18:4b:d2:
b3:a2:73:fd:25:05:5d:5c:c2:39:aa:20:6a:8c:26:27:62:00:
59:b6:2a:5e:1d:63:79:5b:84:3c:62:b7:9a:4f:63:54:16:f6:
34:05:59:3b:d3:22:59:d9:96:9c:8f:1c:b0:f2:68:6b:57:bb:
12:b0:f2:be:9a:e9:d0:18:b5:44:ba:3d:2a:ac:6d:87:44:e1:
71:c1:2f:96:d0:b5:56:f2:f1:df:ad:8b:54:d2:ab:2e:cc:6b:
41:5b:3c:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFjfLDSJtiDTFgrj6SUcRvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjYxMDIyMTIwMTE4WhcNMjYxMDIzMTIwMTE4WjAzMTEwLwYDVQQD
EygxODhlZDIzYjdkNDYyNzk5NjFiOTEwYTFlZGY1MGJhNTUwYThiNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q0K/VbIS4fsd/mbY3UZcudJGd4H
+C/w9biTx9E8uFwfuqBvusUfq9KziExrC1hNYav5PNm0urb4e56khIXmbfbWNwZt
zB6Sfo6BKVQYVBG1LDvDB5/30rGphUb6/bGbaf5CIEhbsp1yjHa4MbBF7yawpsq3
DtrBQ6xiaFbOhx+X3278pqaTh3u7bzfuJqkTQSaJis5JWFCU/3D9DCdd7qiRb7pT
KeKxIXnaXIx+s4y3vTxkhUyD1gxyf2YcEtk008nInQ7AIPcKdTVjx7fSBFLeBvaD
S7DESPmZLaKSvJSpoaonSvbdkdxBOK6wleY4lL57MqRqW60Lif5t1JmytwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiO0jt9RieZYbkQoe31C6VQqLQkMB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAa03L2A
sw4N+0/qETeg2YOYZRcZEtiQVKtHRbtgJb9W2EUwBFMPgtVGnCUISG+3iCtf8Z6q
nW39qdmGFSeuCJu9R4qUi6RinYpRxiAT3EN2uYxlk1bCHv7df5w+E+0OkvrOOYrT
s266jiqcmIeXAxBRD9SLhnuzZNzf88ZsVXrQfUdLWvFak9zX1xJe19xXyFpGfYtP
9Aa5chfsDsUlGEvSs6Jz/SUFXVzCOaogaowmJ2IAWbYqXh1jeVuEPGK3mk9jVBb2
NAVZO9MiWdmWnI8csPJoa1e7ErDyvprp0Bi1RLo9Kqxth0ThccEvltC1VvLx362L
VNKrLsxrQVs8Zw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 22:02:35 2026 by rpki-client