Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: PRM0+KEvelQi+Wm0d65qRlsjcszyU92DapCtvBY9Das=
Subject key identifier: 33:A2:63:89:38:07:ED:DB:75:9C:9D:A8:29:BC:8C:DC:23:B5:B7:09
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E49C49491BC4221F103119D85D04C251B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08F7
Signing time: Thu 21 May 2026 09:01:20 +0000
Manifest this update: Thu 21 May 2026 09:01:20 +0000
Manifest next update: Fri 22 May 2026 09:01:20 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: XovJiqlD4v7oGnZun92PjvYGUnAY+LfS3J6HhRjdLSo=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:c4:94:91:bc:42:21:f1:03:11:9d:85:d0:4c:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 21 09:01:20 2026 GMT
Not After : May 22 09:01:20 2026 GMT
Subject: CN=33a263893807eddb759c9da829bc8cdc23b5b709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:d0:10:45:17:fc:e9:b1:16:2d:6c:44:ee:
8e:20:05:c2:f6:8a:06:44:49:30:2f:83:d4:d6:ac:
c3:fb:11:c2:33:71:b9:14:c0:0e:f4:4a:09:d3:82:
c5:af:15:63:47:59:b0:a2:68:cf:98:16:e1:b1:e2:
9b:0a:3d:56:9a:67:5c:74:99:c5:79:b2:76:c9:32:
d6:f5:f4:bd:a7:12:d6:d8:54:55:05:2c:77:52:19:
45:07:35:cb:e1:34:c3:c7:69:c8:75:d6:4a:23:f0:
f6:d9:a8:71:b2:c4:77:bb:1f:74:bc:ae:0f:71:f9:
de:04:7d:8f:75:19:78:b6:8c:09:f7:29:86:32:37:
4f:20:4c:a3:f0:96:dd:60:4b:e3:3f:d6:d3:af:cd:
09:1d:91:b1:cf:eb:d8:66:d3:57:a2:23:7e:48:e0:
f8:c4:a3:69:21:56:3f:7e:a0:d8:49:9c:06:ca:d0:
7a:70:e4:20:71:87:f4:ae:7b:76:1e:12:68:5e:d9:
9b:7e:58:8f:8a:24:bc:26:06:26:36:b9:1c:15:5c:
25:5b:6d:a4:41:f2:07:15:8c:9d:04:b8:3f:d8:ca:
2e:b2:99:a2:3f:fa:36:e2:7c:19:b2:f2:45:cf:11:
3c:09:35:33:aa:b7:13:c4:88:c4:5f:df:a0:d5:6a:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A2:63:89:38:07:ED:DB:75:9C:9D:A8:29:BC:8C:DC:23:B5:B7:09
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:80:48:5e:13:2a:2d:26:ca:37:6b:92:21:98:9f:e2:6e:
ee:09:7e:5a:c3:49:72:a9:ba:ce:9e:63:a5:fb:07:fe:79:20:
97:e2:a1:ac:89:4c:3e:35:d9:b1:7b:ce:72:0e:59:f5:4b:c4:
48:c6:2f:05:46:0a:79:ce:08:85:5b:ba:e1:94:de:f7:f3:3a:
55:cb:62:ed:85:0e:55:c5:e4:b7:e7:62:cc:b1:76:2c:9b:07:
b1:47:68:7d:f6:a5:18:61:ed:fd:8b:b9:bc:6b:69:f4:ec:82:
3e:4b:fa:67:d5:16:0a:6b:5f:bf:6e:83:c0:56:11:57:01:e8:
de:cf:6c:08:53:97:1e:74:0d:13:45:f1:0b:a6:9e:26:d2:8d:
bb:ab:66:45:a1:12:20:72:5a:a7:f6:b3:28:05:6b:56:1a:bc:
19:f8:22:1b:f6:a8:82:a3:d4:3b:d9:08:93:e8:6d:18:45:b6:
bf:45:b3:3b:56:83:98:82:89:8e:bb:69:26:8e:03:3f:d1:ef:
f1:9c:3e:d4:de:6c:17:82:eb:2f:e0:70:eb:20:76:cc:34:75:
26:bc:5b:73:f3:cf:0c:c3:82:62:3a:1b:3e:b8:b6:b9:f5:e6:
27:45:92:f0:81:5c:95:57:3b:0e:ea:60:36:67:67:1f:19:5e:
9e:5f:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 19:39:15 2026 by rpki-client