
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: qWCkfP/btVt7lguxrmgacKlF3hMgzjNPa3aTG2oxp9I=
Subject key identifier: 2E:22:B1:B8:58:26:8B:E2:1F:76:78:FE:2D:E3:50:A8:82:41:D0:C1
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A138FFF02177971DCB04BB24F9DC780701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A7C
Signing time: Wed 14 Oct 2026 06:00:59 +0000
Manifest this update: Wed 14 Oct 2026 06:00:59 +0000
Manifest next update: Thu 15 Oct 2026 06:00:59 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: TBUdRqJCDZcw2SjzHsFYTSZWQ6gCbzRVOMtvgVpBEnM=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:f0:21:77:97:1d:cb:04:bb:24:f9:dc:78:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Oct 14 06:00:59 2026 GMT
Not After : Oct 15 06:00:59 2026 GMT
Subject: CN=2e22b1b858268be21f7678fe2de350a88241d0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:92:44:65:8e:17:82:6c:04:d6:cf:60:66:
c3:2d:6e:20:0c:6c:04:20:1b:f3:ed:f0:5d:f3:0d:
fb:b2:69:65:da:6b:a2:78:4c:52:60:f3:db:cf:d6:
e0:de:e2:48:32:58:fe:6b:4e:10:44:f3:a6:b2:12:
97:33:f3:92:70:de:b4:c0:3c:79:45:1a:7d:2f:27:
fe:af:b5:b6:f2:1b:1f:41:8a:84:3a:84:b2:60:46:
9b:82:a0:da:42:00:68:ac:ed:e0:60:7a:8b:ee:17:
1b:fe:4b:24:f7:cd:bb:ce:b8:0f:88:aa:8f:25:fa:
ec:48:2f:d3:0b:95:cf:83:49:74:4a:a7:1e:63:a6:
fd:58:db:48:28:c2:ee:8a:52:13:74:5f:e7:5b:e5:
08:8d:7b:8f:2d:d5:00:d9:cd:50:8c:b1:a5:99:d7:
94:22:0c:98:47:6a:ff:fd:ce:3c:c3:b6:80:e9:07:
36:4d:ba:2a:69:7b:4e:e4:dd:97:b2:71:89:c1:00:
7c:c7:8d:2a:7b:ed:49:68:9b:70:4e:38:3e:01:c3:
57:de:ac:ca:52:1d:52:f2:69:ff:6c:e9:d1:6b:d8:
43:6f:25:8c:47:44:5d:54:14:da:89:88:37:b0:7a:
fb:fc:c2:df:f9:a6:bb:08:db:e1:e0:0b:19:6f:aa:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:B1:B8:58:26:8B:E2:1F:76:78:FE:2D:E3:50:A8:82:41:D0:C1
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7e:da:37:a5:36:22:ee:22:54:ef:dc:31:d5:be:50:18:bb:
51:84:c0:d6:9c:15:a8:c2:d7:cb:ea:5c:eb:3b:1b:91:30:46:
e5:b4:48:e8:4c:36:c2:dd:11:ba:47:7d:ea:a3:57:f8:77:70:
36:d7:50:5d:77:fd:cd:2e:d8:cd:ec:41:4c:7f:d5:f5:19:c2:
35:fc:97:1b:3e:e6:c7:51:42:e7:70:63:05:6f:ca:67:da:a2:
31:ea:3b:67:d9:99:9b:ed:fa:44:34:30:7b:29:bf:4a:36:bc:
80:57:a5:26:65:8a:ce:ec:bf:6e:a4:9a:22:49:dd:1b:bc:3d:
9e:cf:61:bb:eb:b3:9c:6b:77:46:d8:c2:ce:28:50:d3:cb:21:
74:fb:5a:f3:0a:3d:26:ea:ff:68:b6:2d:4a:71:f8:2b:6c:94:
6e:8a:bd:75:1c:75:70:6a:85:e7:12:58:a3:eb:0a:63:5b:49:
25:33:67:e8:f9:dc:fd:c4:6c:61:98:89:1f:2d:60:3d:33:4a:
2f:69:ad:ab:7e:11:c5:0c:bb:c4:7d:e8:b2:65:fc:37:53:aa:
27:1d:5c:66:43:1a:a4:35:f9:c0:58:f6:f7:23:ee:88:29:4c:
53:af:fb:73:81:1a:ee:cb:16:17:52:05:09:75:22:94:d2:0a:
d6:d2:c3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4//Ahd5cdywS7JPnceAcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjYxMDE0MDYwMDU5WhcNMjYxMDE1MDYwMDU5WjAzMTEwLwYDVQQD
EygyZTIyYjFiODU4MjY4YmUyMWY3Njc4ZmUyZGUzNTBhODgyNDFkMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+iSRGWOF4JsBNbPYGbDLW4gDGwE
IBvz7fBd8w37smll2muieExSYPPbz9bg3uJIMlj+a04QRPOmshKXM/OScN60wDx5
RRp9Lyf+r7W28hsfQYqEOoSyYEabgqDaQgBorO3gYHqL7hcb/ksk9827zrgPiKqP
JfrsSC/TC5XPg0l0SqceY6b9WNtIKMLuilITdF/nW+UIjXuPLdUA2c1QjLGlmdeU
IgyYR2r//c48w7aA6Qc2TboqaXtO5N2XsnGJwQB8x40qe+1JaJtwTjg+AcNX3qzK
Uh1S8mn/bOnRa9hDbyWMR0RdVBTaiYg3sHr7/MLf+aa7CNvh4AsZb6rt8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4isbhYJoviH3Z4/i3jUKiCQdDBMB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn7aN6U2
Iu4iVO/cMdW+UBi7UYTA1pwVqMLXy+pc6zsbkTBG5bRI6Ew2wt0Rukd96qNX+Hdw
NtdQXXf9zS7YzexBTH/V9RnCNfyXGz7mx1FC53BjBW/KZ9qiMeo7Z9mZm+36RDQw
eym/Sja8gFelJmWKzuy/bqSaIkndG7w9ns9hu+uznGt3RtjCzihQ08shdPta8wo9
Jur/aLYtSnH4K2yUboq9dRx1cGqF5xJYo+sKY1tJJTNn6Pnc/cRsYZiJHy1gPTNK
L2mtq34RxQy7xH3osmX8N1OqJx1cZkMapDX5wFj29yPuiClMU6/7c4Ea7ssWF1IF
CXUilNIK1tLDFw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:56:26 2026 by rpki-client