Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: iYKAq8iE+8l80Hi7Svz9v97d+U3sKbbdEh2v+niydPk=
Subject key identifier: A1:06:97:91:2B:CB:59:2B:93:EE:B5:FF:22:87:7B:0C:31:03:DE:4F
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019DB32213E6177D235422D47A21E71C2901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08A9
Signing time: Wed 22 Apr 2026 03:00:48 +0000
Manifest this update: Wed 22 Apr 2026 03:00:48 +0000
Manifest next update: Thu 23 Apr 2026 03:00:48 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Amt2QqczPgHCJI0+cRt4pm59hTapvi3p8aNk/EaByXg=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:22:13:e6:17:7d:23:54:22:d4:7a:21:e7:1c:29:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Apr 22 03:00:48 2026 GMT
Not After : Apr 23 03:00:48 2026 GMT
Subject: CN=a10697912bcb592b93eeb5ff22877b0c3103de4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:9e:ed:d4:66:a0:ec:79:22:b7:89:83:79:
10:bc:fd:58:bc:56:06:19:98:a7:66:08:ca:2b:bf:
d3:10:2b:44:a7:c9:35:97:57:28:92:77:ed:30:f0:
61:68:78:a1:81:ae:d4:88:7a:da:37:af:f6:e2:9b:
a5:ad:52:70:1f:88:54:5f:b8:7b:36:52:7d:d4:b1:
c3:52:0e:d2:00:48:38:a9:95:a0:29:5f:58:97:fa:
11:9e:77:93:aa:ef:6d:99:31:b0:f5:06:76:0a:fd:
16:ce:97:6f:b6:97:2a:0c:06:7b:07:1f:39:67:1d:
0a:03:fb:bc:11:51:79:a2:43:a3:b2:bb:6f:f1:81:
65:c9:92:45:2a:6d:59:dd:a9:2d:3b:67:cd:25:e4:
43:4c:3d:f9:32:4c:32:2b:ce:da:8c:ae:c6:35:6d:
69:84:3a:3f:9a:6e:f0:8f:5d:47:44:de:ba:15:ed:
c0:73:76:b3:53:59:c8:fd:d8:a8:c5:d7:d9:c5:9a:
c8:84:bf:85:a0:aa:25:83:2a:08:09:0b:94:47:7e:
97:77:2b:fa:27:7e:f5:55:b4:3c:98:a1:55:aa:63:
64:8b:d4:b8:83:eb:bf:8a:e2:15:58:13:db:81:16:
92:e9:2f:45:9d:69:db:1f:b3:fc:a6:00:fb:1c:5f:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:97:91:2B:CB:59:2B:93:EE:B5:FF:22:87:7B:0C:31:03:DE:4F
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:43:fd:b8:d3:12:7a:6a:e5:22:c1:9c:00:73:cb:9d:95:3b:
17:81:e6:29:a4:15:47:75:51:65:58:8d:2a:dd:ce:0f:f2:d4:
78:60:6c:5f:60:8f:54:22:4b:9b:56:17:ca:2e:20:94:48:c8:
f8:cd:de:04:5d:93:5d:66:fe:c4:52:8e:cd:ac:29:d6:2e:31:
aa:8b:2b:b6:62:1d:48:13:9a:c9:81:b9:49:bb:b1:50:56:7d:
d2:68:5b:cf:97:f2:11:0c:1c:d0:05:31:a3:64:14:51:4a:2f:
cb:eb:3f:50:09:b5:db:53:7d:e9:2d:29:f4:e2:de:64:05:3a:
4a:a4:03:d1:2e:88:35:ed:53:57:df:d6:36:57:0a:6d:f6:01:
14:79:bb:20:ec:9a:ac:05:2d:c5:14:80:60:85:e8:1f:3e:88:
ed:b9:f1:c3:27:fd:a2:c4:2d:37:5f:19:94:9b:21:4c:b7:a6:
f3:d7:aa:1e:9e:c5:41:79:b8:42:23:88:5d:0a:12:a7:bf:79:
4f:58:43:03:b1:fb:8b:65:d0:a7:8a:13:99:ef:a9:d8:80:de:
b0:e7:80:8b:8d:ac:7a:68:13:73:6a:9e:bc:7a:2e:0b:5f:9a:
b6:3c:2c:f6:79:73:cc:8c:42:a6:b3:f1:b2:18:af:1b:8a:0a:
46:af:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 14:07:52 2026 by rpki-client