Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: OSJ3CJSJIlyJif09cWebD9YCcqcq+JMJFB6d3XWLzSE=
Subject key identifier: C7:89:64:65:BC:F5:68:85:B5:A9:17:5B:DE:8F:28:E3:7B:30:BB:5E
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019DA979EED87D48DE6E36F4EE7FDA1BCDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08A4
Signing time: Mon 20 Apr 2026 06:00:33 +0000
Manifest this update: Mon 20 Apr 2026 06:00:33 +0000
Manifest next update: Tue 21 Apr 2026 06:00:33 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: lZWpRYgGsOC/ieCDqT/4I5ETy9vB+mYJ4nulXA1QsE8=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:79:ee:d8:7d:48:de:6e:36:f4:ee:7f:da:1b:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Apr 20 06:00:33 2026 GMT
Not After : Apr 21 06:00:33 2026 GMT
Subject: CN=c7896465bcf56885b5a9175bde8f28e37b30bb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:42:36:57:ff:60:9a:16:85:e1:76:83:12:
22:70:e0:bd:eb:1d:b7:95:f4:ee:2b:ca:af:30:c5:
78:77:dd:35:25:3c:d1:b8:e1:34:18:6d:3f:7d:fc:
0d:b0:be:6e:13:93:02:8c:07:e9:fe:d3:8b:1e:d0:
46:2e:41:0f:0f:e2:e0:d3:39:f8:52:04:85:85:22:
c4:69:30:10:7b:7e:62:1a:80:b6:1d:e4:2e:e4:e4:
1c:38:dd:b0:38:f8:2f:08:a0:5d:2a:6b:6e:56:52:
be:13:81:3b:a9:c0:c1:ee:01:b8:bc:d4:2a:4d:0e:
7e:bb:eb:55:b4:42:52:ae:1f:ab:18:ae:02:c9:82:
5f:9e:c5:20:f9:cc:19:74:a0:fb:50:11:0e:49:6b:
a7:f8:83:83:f5:9e:8b:b7:51:0b:f2:a1:e7:1f:cb:
1d:ab:66:ee:55:01:9f:31:7a:be:4f:82:67:91:97:
82:58:00:f5:dd:86:c2:be:0d:27:60:d1:31:e7:5f:
de:ad:e9:b7:fc:e7:1c:76:5b:1c:98:23:da:50:23:
e7:02:13:dc:7c:55:87:7c:b7:c1:5b:e2:cf:d4:60:
84:3b:f8:89:94:5d:e4:da:9b:b0:5e:27:98:2a:6a:
22:ae:47:5f:22:aa:36:4e:a4:9e:89:31:dd:e2:16:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:64:65:BC:F5:68:85:B5:A9:17:5B:DE:8F:28:E3:7B:30:BB:5E
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:0c:e8:c3:f5:f7:93:12:d0:e8:c8:b6:4b:30:28:de:bf:
6a:b7:2a:a8:4f:e4:a1:d2:e1:05:6e:b0:e8:88:41:97:5d:05:
b5:4b:a4:f6:fc:e4:65:d6:6b:5f:d8:7e:15:0c:ee:48:01:26:
13:2d:cd:58:66:8b:1d:1c:fe:c4:67:c5:6c:80:9b:26:70:48:
f3:2b:8c:04:db:57:a9:0d:74:fa:f2:c4:a5:88:3b:6c:95:6a:
d1:c1:ec:94:85:ed:c5:fd:5d:24:48:db:ed:6f:07:c7:da:e8:
33:77:e4:c0:38:89:bb:c5:35:80:d3:9c:85:9c:7b:08:94:8f:
8c:50:d6:d9:88:8a:c9:bb:a4:72:23:86:9a:b8:61:d7:d1:ec:
2e:8b:eb:f6:dd:ce:2a:c2:2c:8f:ab:9f:73:5a:5a:ab:13:07:
a1:b0:e1:7d:9d:aa:14:72:1f:46:a4:4b:ec:cc:ba:49:bf:16:
76:fd:5d:e5:a3:18:f5:b2:d5:5a:14:82:d4:9c:3a:11:88:4f:
2d:e0:40:b1:aa:66:37:ce:85:24:b3:44:b6:d4:cb:7c:5a:29:
18:69:d6:40:e4:7f:4a:46:63:17:40:41:77:8d:57:5a:96:e3:
9b:74:b9:6f:f7:d0:34:69:11:91:4a:b2:34:40:95:1b:c6:09:
5c:a1:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 11:54:00 2026 by rpki-client