Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: at6iahyT/42eikRM9zFIjgL0J4w/xs7IUM06u67ZbFc=
Subject key identifier: D1:FD:FE:CF:20:F5:2D:E7:15:1A:7F:46:4D:99:E5:8E:6C:E5:33:C7
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E60F128CC6814D56BAF96F7DCD9C72519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0903
Signing time: Mon 25 May 2026 21:01:17 +0000
Manifest this update: Mon 25 May 2026 21:01:17 +0000
Manifest next update: Tue 26 May 2026 21:01:17 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: OBmYjvtGsxEd6o9Cg17Zs2liK6ECfRSampJrJnXKLcw=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:f1:28:cc:68:14:d5:6b:af:96:f7:dc:d9:c7:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 25 21:01:17 2026 GMT
Not After : May 26 21:01:17 2026 GMT
Subject: CN=d1fdfecf20f52de7151a7f464d99e58e6ce533c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:8e:77:b7:dd:27:83:b4:7f:3d:20:26:e4:
fc:c5:51:93:b5:43:eb:ae:dd:45:74:73:da:59:35:
e7:16:c9:e5:28:74:46:f8:a8:1e:4b:af:37:94:fb:
48:1c:c6:81:74:d5:0c:44:b1:79:78:2c:ca:a5:7f:
7c:a3:00:00:db:79:6f:c5:42:50:2c:1d:2b:82:e2:
63:50:ef:43:75:1a:09:f5:87:52:8c:90:3e:a5:ca:
13:ac:90:3f:c5:15:c0:d2:91:ee:92:b8:d8:46:e5:
e7:7d:3b:98:b6:ad:d5:ea:15:4c:3f:ca:17:4d:15:
35:2e:cb:16:60:eb:02:e6:63:5c:22:10:de:8c:69:
c8:fd:51:36:71:ca:d5:29:52:b6:49:29:c4:ab:da:
2c:63:d1:69:d4:fd:26:12:6a:6a:70:17:d9:84:0e:
2f:e5:a5:f6:b5:c7:9e:67:08:55:2c:f6:81:58:74:
16:b4:56:e9:d6:7b:ad:02:25:47:eb:27:6b:dc:83:
2b:8f:65:6d:ce:64:e6:f3:a3:83:e3:d4:0f:8a:c9:
0b:58:4a:ec:e1:3e:ee:3f:ea:04:59:0c:b7:fb:2c:
9c:a1:9b:db:b0:60:98:1e:bc:e1:7e:27:70:32:21:
d3:c1:80:79:81:f6:1e:77:53:63:91:2f:49:f9:9c:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FD:FE:CF:20:F5:2D:E7:15:1A:7F:46:4D:99:E5:8E:6C:E5:33:C7
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5a:64:6d:70:c9:c7:d8:9c:fa:11:9a:f0:56:4e:05:c9:dd:
61:91:c2:f3:81:4d:70:2d:e4:af:04:91:a7:cc:67:bc:ed:2b:
aa:0c:b7:a1:53:a7:c3:fd:57:88:f5:c7:74:c6:5d:9a:12:fc:
f8:23:a9:08:e5:e0:ba:c7:05:fc:d9:bb:17:14:13:02:46:76:
74:ee:0c:4b:83:c5:00:45:b5:3a:96:f7:d7:15:1b:ec:a0:aa:
dd:fb:37:14:11:bb:84:49:86:51:45:9d:51:b7:c2:16:ef:2e:
33:df:e4:03:46:a7:62:c3:85:13:95:a0:9a:c4:a8:a0:ed:e0:
73:c5:1a:c5:93:15:7c:77:e5:e6:df:8b:17:be:41:af:8d:ea:
00:2b:31:ff:c9:e0:7e:9f:10:83:6f:74:8e:9d:a8:67:81:7e:
a5:4d:fd:82:53:9b:8b:65:ae:bf:e8:c9:d0:74:4d:9d:78:3d:
09:fd:3b:93:b5:72:98:0b:f8:27:2f:17:0e:b4:f7:e1:7e:8b:
f4:93:f3:bc:ef:91:70:00:26:e4:5e:23:4a:33:f2:83:07:57:
a7:33:f4:be:fc:f3:55:2c:9f:b0:42:bf:b6:b9:c2:a9:dc:4a:
73:c5:91:f6:4b:2d:44:27:93:6e:15:21:f9:55:b9:9e:b5:46:
9f:69:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 23:05:50 2026 by rpki-client