Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: JRl7dJFUZqE1jXxUsJl/jM66qA0LEK5zDF3wHGh0DN0=
Subject key identifier: 34:9C:0E:62:37:9E:08:B5:CF:60:FC:EB:81:58:3E:0A:CF:5B:1D:97
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019CA6B2D38A9B1E8654A401B0F8658AA6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 081E
Signing time: Sun 01 Mar 2026 00:01:03 +0000
Manifest this update: Sun 01 Mar 2026 00:01:03 +0000
Manifest next update: Mon 02 Mar 2026 00:01:03 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: xNbyQAbuoYZBVokbUL/BgRN4/1wQcAEQa1hwsyWfiMA=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a6:b2:d3:8a:9b:1e:86:54:a4:01:b0:f8:65:8a:a6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Mar 1 00:01:03 2026 GMT
Not After : Mar 2 00:01:03 2026 GMT
Subject: CN=349c0e62379e08b5cf60fceb81583e0acf5b1d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:ff:39:76:2b:8f:29:f6:5c:23:0c:80:7c:
98:31:23:44:f7:89:a9:61:d2:a2:58:73:ec:9b:69:
85:d4:2b:5f:af:eb:7d:42:3f:25:90:d4:2c:b6:70:
3d:37:8f:2b:cf:ce:f5:2b:47:c1:21:db:0f:2d:1d:
90:11:4c:aa:81:8c:b3:cb:a0:cc:a5:b2:e9:37:bc:
92:cb:d4:8d:5d:f2:c9:50:32:37:1c:13:75:64:6d:
54:78:2a:02:d7:4c:ee:9e:f9:04:09:f1:ad:ec:73:
c3:50:7b:e1:0e:86:9b:0a:05:40:1c:2d:b4:1b:7e:
52:8a:d8:4c:d9:01:14:9c:e6:f0:16:33:63:57:a6:
15:4d:83:ca:b0:34:06:d1:7b:f6:6b:e7:74:96:1a:
04:84:c0:93:41:bc:d1:82:e6:87:37:17:c6:bf:65:
ae:18:8e:ed:08:91:92:02:5c:ce:bf:6d:b7:82:bf:
c0:99:20:1e:8a:ae:0b:64:00:54:c5:a4:e8:40:99:
e5:c6:36:b4:b6:f4:78:24:e6:1d:e8:37:1f:45:05:
ba:9a:7d:e6:76:cc:65:01:4b:c7:2d:8e:e4:7e:34:
64:9c:22:83:ce:71:28:6b:23:f4:5b:db:93:bc:12:
27:a4:82:15:3c:8b:84:ea:9a:6e:2a:76:d2:72:91:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:0E:62:37:9E:08:B5:CF:60:FC:EB:81:58:3E:0A:CF:5B:1D:97
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:04:9c:50:67:ce:fb:33:ff:b7:a1:66:b7:54:63:fc:ab:3f:
0f:25:00:9c:0a:56:65:bc:c0:13:e8:4a:01:d2:92:09:09:28:
8d:52:85:8e:90:61:4c:6a:24:a8:49:c8:f1:73:80:3d:14:f9:
be:3b:ac:45:6d:73:e8:7e:b2:0f:bc:a0:2c:81:b4:bf:c3:a0:
aa:b0:da:17:e2:af:4c:81:6e:fa:b1:8c:3d:4f:b0:b1:be:20:
d9:b8:f4:36:11:da:da:ac:4b:08:4b:0c:87:a8:b9:93:34:b6:
5a:a9:00:b7:2b:c5:14:3f:73:3a:29:5d:73:29:a8:89:b0:0b:
a3:cc:48:17:21:90:79:8d:99:cc:ba:d7:d0:2d:05:da:b7:e7:
33:bf:16:3e:27:cc:58:a3:a1:71:08:d8:d3:9f:13:de:38:29:
2d:e5:f9:21:e8:00:e3:62:03:dc:c0:b4:14:ea:2a:7e:c8:90:
3e:46:79:50:c6:9b:4a:88:60:ae:fb:b2:45:00:57:57:bc:49:
f0:da:a5:51:5e:16:95:3c:d5:d0:65:8c:92:63:28:bc:30:24:
06:38:4b:b4:f2:03:b7:62:92:7b:d4:26:d2:cf:c8:4a:6f:07:
be:42:bc:29:47:92:1c:6b:cf:32:28:1a:88:e7:58:e7:80:5f:
69:55:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 09:49:44 2026 by rpki-client