Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: nDu03y7uLo6vbbsS3H/kDdTvxlybLOz9ofTURuS37g4=
Subject key identifier: 57:90:51:5E:C9:F1:59:E9:50:82:FF:42:88:B5:8C:4C:07:21:9D:C2
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019D82DAA09827E3C936238B9EA0D23F811C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0890
Signing time: Sun 12 Apr 2026 18:00:59 +0000
Manifest this update: Sun 12 Apr 2026 18:00:59 +0000
Manifest next update: Mon 13 Apr 2026 18:00:59 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: aDwWeziMB1D0cZOgHFYglfjZObJbfP+Ajs9pUg5Ivrw=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:da:a0:98:27:e3:c9:36:23:8b:9e:a0:d2:3f:81:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Apr 12 18:00:59 2026 GMT
Not After : Apr 13 18:00:59 2026 GMT
Subject: CN=5790515ec9f159e95082ff4288b58c4c07219dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:6b:cb:bf:f7:e1:9f:17:9f:2c:d7:cc:5b:
57:3e:5d:a9:a7:21:fb:ea:02:4e:51:22:e8:10:7b:
83:41:4a:06:43:cd:64:07:6d:cd:fa:b8:59:a0:a3:
28:90:df:7d:26:5e:7b:2d:de:11:01:73:0e:ed:c8:
d4:05:6c:13:b8:04:0f:66:64:48:70:2e:d4:ca:ab:
44:88:e7:cd:10:48:43:b0:75:43:17:11:85:c9:69:
9e:12:75:e3:ba:34:c0:e6:6a:01:7a:a5:ad:61:8c:
c0:7f:dc:4e:5c:e0:36:ec:dd:7b:9b:6a:25:64:17:
99:7e:b3:cf:8b:6d:1c:b6:2c:f8:cd:bb:e7:10:58:
eb:76:94:5b:1e:02:d8:8b:80:a3:e4:48:7d:05:7b:
92:27:16:b7:9d:00:8e:12:e7:c4:6d:cd:8b:85:76:
31:dd:0e:f8:9f:51:49:f7:8d:2d:56:e9:9a:c5:4b:
61:30:58:39:27:68:ce:3f:00:f8:f0:26:16:3a:6d:
92:de:ff:b2:f7:df:9d:41:b1:7e:d8:04:6f:b9:4e:
75:50:88:6f:f0:4f:bc:d0:6b:e3:3f:40:06:ea:3c:
20:40:86:08:fa:79:e5:fd:63:fa:8e:67:b3:c9:56:
cf:45:d3:d7:a0:02:e1:c9:0e:b4:b0:f5:75:48:bd:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:90:51:5E:C9:F1:59:E9:50:82:FF:42:88:B5:8C:4C:07:21:9D:C2
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:57:8d:c7:44:1d:d7:de:b0:c8:af:c1:8b:05:ae:fb:cc:5e:
8c:ed:35:db:cd:59:95:28:85:a9:38:f3:e9:12:a6:84:d9:c4:
93:fc:9f:ce:80:37:e2:07:6b:2f:2a:e6:fe:dd:97:9b:26:f1:
ef:9d:5c:07:4b:0c:95:45:93:b2:7d:ca:e8:90:ac:16:e6:7b:
de:ce:06:cc:66:b7:8b:db:16:da:4d:c0:90:9a:ae:21:5c:b3:
3f:11:b3:e3:58:8e:d2:85:e1:a9:2e:37:16:45:e1:ad:3e:85:
16:c2:4f:6a:84:37:2a:87:f8:61:9d:56:60:82:d8:e6:c4:8d:
64:56:60:fa:d2:90:a3:c4:f1:0b:29:11:98:0f:7b:b6:86:c4:
22:f0:b1:fc:59:e1:ec:89:aa:bd:56:d1:c3:d2:ff:4b:db:c9:
76:15:d5:6c:b7:8c:b2:dc:e2:2d:7b:64:28:db:70:9c:12:83:
bd:9f:2a:9f:c0:ba:81:91:99:e9:75:35:aa:3b:7c:16:04:9d:
cb:36:05:ab:9b:6b:3f:6c:42:4e:0b:ab:20:88:57:83:b7:87:
c7:0e:a0:fd:83:b4:3a:bd:9c:b2:fb:cf:50:4b:b4:91:51:40:
44:9c:b0:c7:b4:54:2a:c3:d1:99:d5:b0:a1:fe:00:ea:86:03:
51:6d:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 20:21:48 2026 by rpki-client