Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: cADA6aY2XKk8r7sevuN5DBLLXvjQMwFGAMgkirMsH/8=
Subject key identifier: 4C:D1:D7:09:31:E2:D4:38:A4:61:B7:91:8D:74:84:39:C3:D6:BF:BF
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019D924D97A232E0CB36293C24F031ED7ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0898
Signing time: Wed 15 Apr 2026 18:00:51 +0000
Manifest this update: Wed 15 Apr 2026 18:00:51 +0000
Manifest next update: Thu 16 Apr 2026 18:00:51 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Fylc9EPHpf5ukCVj7pWXNAUdZ0arS8eSABT5Q76ljI8=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:4d:97:a2:32:e0:cb:36:29:3c:24:f0:31:ed:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Apr 15 18:00:51 2026 GMT
Not After : Apr 16 18:00:51 2026 GMT
Subject: CN=4cd1d70931e2d438a461b7918d748439c3d6bfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:8e:09:2d:51:94:f8:a6:06:c1:3a:d8:54:
f9:f8:42:14:75:94:d4:4e:8b:19:bd:6e:39:84:ea:
5d:f9:28:12:db:44:cd:ff:36:f7:2e:5b:5f:13:0f:
a7:22:31:e7:9c:75:46:10:4f:ed:b6:50:54:0c:82:
b2:f2:40:c0:72:e4:26:9a:35:2a:79:ed:ff:3f:23:
3b:b6:b8:e5:19:9e:3e:b9:91:a4:64:d0:cf:63:b7:
0d:4b:bb:5d:23:92:4c:ed:96:a7:89:58:04:55:c4:
b4:30:e5:3c:d8:07:e2:38:9a:ab:76:1c:5a:09:18:
7e:3a:a9:0b:e7:98:14:f5:df:04:c9:28:c5:66:cf:
02:bd:d2:ac:f3:b3:14:43:d3:9d:03:ca:6f:25:d9:
3c:98:70:4c:4d:a3:e7:a3:f1:02:d5:3c:9a:40:88:
83:18:34:80:9b:c8:94:2f:a8:82:86:a7:82:5d:85:
49:79:48:bd:72:01:e9:94:b2:3a:15:ce:8b:5c:75:
b5:02:38:6e:39:da:0d:20:2f:5d:25:4b:16:88:35:
34:7b:86:91:ec:2e:c7:96:27:fc:c2:be:31:c0:ca:
14:e9:4d:37:d6:e5:7b:a8:08:b4:24:da:a3:a2:ee:
70:e0:07:5e:94:e0:2d:a7:1c:da:24:30:b1:51:e8:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D1:D7:09:31:E2:D4:38:A4:61:B7:91:8D:74:84:39:C3:D6:BF:BF
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:af:ec:73:ab:6d:86:57:7b:c6:24:cf:4c:68:7b:3a:43:e2:
7a:db:68:cd:5d:a1:8a:8e:a3:3f:a7:0f:dd:a0:52:6c:86:93:
00:37:61:c7:6d:cd:a2:fa:4f:6e:f9:21:78:41:cd:c0:87:39:
4c:ae:e1:5f:81:c1:5c:91:15:d2:a9:46:b1:18:4f:8b:d8:c3:
50:64:94:41:83:1b:a7:69:bb:ae:cc:ad:f5:f4:f1:f8:b1:65:
28:bf:e6:f8:19:e3:1b:ea:03:51:fe:c3:6a:9d:51:e3:5c:59:
92:15:d3:e3:30:82:05:95:d4:7d:c0:bb:c3:09:48:89:5b:ae:
76:79:53:62:2a:db:03:13:86:83:96:86:24:0a:ba:e4:cd:c2:
c4:f1:32:56:b4:bf:e1:9b:12:11:dc:c0:2f:1f:6d:58:7d:7f:
91:8b:88:04:b8:5e:1e:4d:82:36:dc:d7:e5:2e:41:ca:89:66:
ec:67:47:08:59:ee:d5:fb:c8:6a:3a:d3:75:61:b4:b5:94:23:
1e:ab:ac:1f:5b:82:7b:f8:69:e2:f0:44:20:0c:e4:f7:e2:88:
d1:3a:d3:e3:4e:9d:b0:bc:d0:8d:a4:25:b9:b1:25:31:a8:c5:
b8:89:39:19:16:32:a3:fe:50:64:92:e2:3d:e3:9c:ec:29:12:
33:d9:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 21:30:39 2026 by rpki-client