Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: OFaJlGaNchBfLaG6GIKqoTAhFLkfAlPBdLBOWihlROw=
Subject key identifier: 2F:F4:02:6D:C2:C8:EB:60:B3:F6:3E:60:F9:24:48:38:EB:55:AA:E1
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A0EBC1004FA07A76A6DFD73894EC193BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A54
Signing time: Tue 29 Sep 2026 06:01:29 +0000
Manifest this update: Tue 29 Sep 2026 06:01:29 +0000
Manifest next update: Wed 30 Sep 2026 06:01:29 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: JGzyUENmhKSQNL7F5IcVa921QSVqb8FfPTJFCAUgpQo=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c1:00:4f:a0:7a:76:a6:df:d7:38:94:ec:19:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Sep 29 06:01:29 2026 GMT
Not After : Sep 30 06:01:29 2026 GMT
Subject: CN=2ff4026dc2c8eb60b3f63e60f9244838eb55aae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:6f:c2:07:19:89:b0:fd:12:dd:d1:a7:10:
7a:12:33:ed:a1:d6:3b:c8:14:cb:3e:88:4d:b5:a9:
21:d7:d0:d5:c2:d0:11:76:c6:ce:20:86:cc:d0:7d:
71:25:7a:c5:2b:e3:c6:7d:83:ff:cf:a9:a8:ed:50:
a5:bb:d4:91:df:55:ac:6e:0b:f0:a4:34:c3:4e:9c:
18:a0:e5:90:ca:54:1d:8c:21:ea:41:e6:bf:f4:b8:
6a:ac:fa:45:4d:d0:07:f8:6e:63:f8:4f:95:0c:82:
d2:7d:dd:76:af:d9:2a:82:29:8b:5e:8c:9c:95:a5:
e7:72:dd:ad:b7:8b:db:12:67:12:80:03:76:cc:77:
fb:ad:c4:9e:a4:a7:77:a3:1f:b0:57:df:91:a7:cd:
3b:54:fd:0c:aa:84:f9:ba:b3:f3:49:1c:4d:3c:9d:
2b:86:6c:ad:6e:b5:33:24:ff:14:c5:83:71:ef:d6:
55:1c:45:6f:0d:c7:06:4d:20:c9:ae:cf:c9:13:b5:
fe:83:07:d9:5a:b8:48:fe:f9:47:41:8b:83:0f:1c:
37:07:de:40:e9:b9:d3:ce:5a:a0:64:45:6d:3b:74:
70:e6:f5:02:5e:a9:ff:83:fe:15:7e:fd:e2:30:6d:
3f:e4:8a:14:c3:85:51:9c:cd:8b:7e:32:18:13:61:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:02:6D:C2:C8:EB:60:B3:F6:3E:60:F9:24:48:38:EB:55:AA:E1
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:67:d5:44:69:99:ba:8f:5b:0f:f1:b8:7c:ba:be:9e:69:6f:
02:34:5d:c4:e9:14:27:a2:55:7f:c6:7d:58:ff:08:a5:10:86:
a7:05:90:50:d8:77:94:63:7e:72:dc:7d:b1:cf:e3:d9:15:a0:
7b:b4:02:e2:f2:68:ee:37:6b:58:e1:d1:26:a6:02:4a:d9:80:
cc:01:95:bd:e1:c7:6d:ba:92:6c:39:62:0b:af:7d:dc:94:08:
ac:b6:70:10:41:34:0d:f2:28:a9:3a:47:f6:95:2e:3a:39:42:
3a:f3:77:48:47:57:05:77:85:69:eb:c4:98:99:bf:74:20:3a:
e2:d9:6b:f4:0c:01:3e:aa:b0:08:6c:ea:cb:68:8e:8d:47:2b:
00:c1:30:a2:84:4a:dc:31:66:f4:7f:92:a4:39:ce:76:07:8c:
8c:62:a9:28:00:88:6c:0b:e7:97:ea:ec:33:08:95:55:fb:3c:
9d:9b:38:6f:76:7b:39:9e:ec:65:79:c7:74:2b:e2:cc:b1:3b:
55:eb:75:7e:01:91:de:fe:79:c2:49:b4:fe:f4:3e:9c:aa:ba:
77:4f:7d:fd:58:7c:23:83:6f:d5:40:9b:a9:28:53:d9:8c:97:
7b:0e:c8:b0:62:9a:91:64:d2:5e:52:fc:16:68:58:12:1f:6a:
7a:b2:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:44:43 2026 by rpki-client