Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: GhioGV/HeX4tV97rejkm2Bo+z1mmT8adZOLDI7kITpk=
Subject key identifier: 9C:F8:B2:22:2A:EA:7C:CB:DE:91:50:FD:7E:CD:8B:C2:A6:F7:56:AC
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E062CD8193E0A276D894EEFE50BB286CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08D4
Signing time: Fri 08 May 2026 06:01:02 +0000
Manifest this update: Fri 08 May 2026 06:01:02 +0000
Manifest next update: Sat 09 May 2026 06:01:02 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: YotpAQy2+Kf3//KLkeBfIolYfILK5hcgin6xh/2Pm0M=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:2c:d8:19:3e:0a:27:6d:89:4e:ef:e5:0b:b2:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 8 06:01:02 2026 GMT
Not After : May 9 06:01:02 2026 GMT
Subject: CN=9cf8b2222aea7ccbde9150fd7ecd8bc2a6f756ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:a6:bd:d8:e0:b0:e3:11:e3:2e:18:5c:b5:
ed:a0:05:94:88:a8:35:21:40:84:98:00:d9:d6:d3:
d5:7c:5f:58:76:b7:17:d0:0d:c4:d7:3f:c9:60:d2:
e7:02:0e:fc:7f:7c:ae:a1:58:be:54:4a:c2:ef:2d:
12:e9:0f:05:1a:7e:1a:1e:f5:60:66:55:5d:9d:68:
e5:ca:cc:c6:5a:14:c0:8d:13:36:72:bb:5c:eb:7b:
5a:ab:0a:cf:8a:cc:30:89:55:48:00:32:85:af:8c:
05:44:4d:95:2d:92:08:30:9e:2e:2c:c4:73:23:62:
d5:7a:e7:ba:f3:ba:b6:e7:e7:00:49:f9:5c:ba:7c:
b6:72:7f:ee:40:a0:2d:ff:ee:f0:be:a6:b8:23:f2:
98:28:19:4c:a5:6a:ed:c8:29:d0:b8:b9:63:b0:9a:
a5:bc:6f:ad:20:59:7a:01:40:26:96:a5:f8:31:c9:
6d:e5:f2:5e:2e:e6:06:09:3c:25:b3:3e:97:6d:e2:
3e:56:72:63:a7:90:d9:a3:a2:1f:ff:94:d2:1e:60:
60:30:28:4d:aa:7f:13:db:be:d2:9e:ca:69:0b:f1:
f7:82:4b:18:53:53:88:45:80:32:b2:eb:0a:a3:0f:
a6:81:a7:f1:8a:ad:23:42:b6:e7:cd:b2:9c:49:d7:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:B2:22:2A:EA:7C:CB:DE:91:50:FD:7E:CD:8B:C2:A6:F7:56:AC
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:af:79:6f:fe:2f:cc:51:ce:51:9c:b6:7f:ec:d4:0d:9a:28:
3b:93:25:a8:22:70:ca:9b:9d:97:9f:54:3d:2c:1e:59:91:be:
cc:20:2d:b5:7f:cd:79:c1:03:79:0f:db:1f:69:ea:e8:fe:4e:
a7:e6:a9:f5:90:42:18:fa:d1:86:bb:82:21:b9:be:82:d8:08:
02:f7:9c:03:03:ad:64:5b:45:9d:fb:1e:69:7a:64:e5:06:a1:
bd:26:84:60:22:3a:47:f4:2c:0c:8f:3f:1a:d3:64:2d:1b:62:
8e:df:d3:b7:ae:f3:51:74:f2:ca:c2:84:7f:5b:5d:03:0d:49:
62:c4:2b:13:37:6c:0d:9d:61:9e:c3:df:42:c0:53:1d:f7:81:
dc:d5:f9:86:21:f6:80:fe:46:81:01:0a:44:f8:c3:df:bb:d6:
ae:0a:f1:21:69:57:dc:89:b3:f4:50:e5:47:83:3b:95:99:80:
80:2c:d0:9d:2e:e8:98:0e:83:a1:7e:64:73:28:a0:a6:47:33:
54:4c:14:ce:86:79:bb:02:bc:24:be:15:2b:3d:78:25:ba:52:
08:bb:a5:a8:7a:a9:c5:04:f7:97:a9:e0:9c:13:16:68:73:70:
26:e3:64:71:ba:1d:30:7a:90:13:36:02:7d:1f:05:10:a2:18:
3b:4f:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 15:45:12 2026 by rpki-client