Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: DLj0TuXRdk/E34d0hinZo733yrosB78SVyTuhW5AH4Y=
Subject key identifier: 90:B2:BB:B8:D6:F5:3E:E9:52:97:19:A8:8B:83:F7:A6:B0:F8:BD:B1
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019D18A38EBF204A2580D8DEC0BA0DF7AFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0859
Signing time: Mon 23 Mar 2026 03:01:05 +0000
Manifest this update: Mon 23 Mar 2026 03:01:05 +0000
Manifest next update: Tue 24 Mar 2026 03:01:05 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: wdrQnceX2U8UP/Nlu+bFaBniAZNiiuqXdlICqD8rQr4=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:18:a3:8e:bf:20:4a:25:80:d8:de:c0:ba:0d:f7:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Mar 23 03:01:05 2026 GMT
Not After : Mar 24 03:01:05 2026 GMT
Subject: CN=90b2bbb8d6f53ee9529719a88b83f7a6b0f8bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:2f:41:b4:87:3d:d7:bd:c2:6c:bf:02:dc:
b2:04:6f:69:2e:2d:1d:0a:50:ba:30:55:10:62:2a:
3a:b5:8d:0d:e5:5c:5c:cf:ed:db:a3:6b:b3:23:c3:
ef:84:49:77:52:d8:15:4c:01:0c:f2:99:26:16:68:
f7:80:bb:a0:d4:7a:f0:5e:1f:23:2b:75:a0:1c:d3:
fd:bd:c8:d1:16:97:cf:f7:74:57:28:e7:cb:26:b8:
7c:49:80:a0:47:3a:8f:1d:25:83:51:e0:ff:ce:f6:
7c:13:e1:71:19:7f:3c:d6:ae:d0:b9:47:d2:54:28:
c7:7a:22:2d:9b:9d:b4:28:7d:0c:e9:a6:c8:3c:94:
eb:df:93:c7:c7:67:d2:ce:4c:5f:e6:5d:db:25:2e:
31:30:64:ab:2a:19:8b:b6:57:0b:f1:01:3f:f8:51:
82:b0:38:01:0b:eb:b1:9d:6c:aa:9d:81:a6:ee:8f:
c3:c7:80:ac:55:79:02:bd:ff:1e:93:db:19:04:02:
61:f6:78:d6:89:fe:76:11:9b:25:50:f3:24:93:da:
40:72:31:85:ef:17:c5:ef:ba:b6:eb:9a:c4:0e:00:
8c:00:62:86:53:cf:7a:ac:3f:00:e5:d2:d5:b1:18:
1e:95:6b:8d:e1:72:de:34:69:af:fc:37:1d:cf:05:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B2:BB:B8:D6:F5:3E:E9:52:97:19:A8:8B:83:F7:A6:B0:F8:BD:B1
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:40:16:6e:c0:19:3c:79:17:8d:49:98:af:f4:81:ac:81:b5:
3a:02:dc:3d:e5:03:98:a1:bb:5a:22:dd:7b:36:e4:52:c2:62:
91:a1:38:61:87:03:4d:11:a5:72:93:ee:f3:16:d9:9b:29:b3:
db:77:ee:15:02:19:d6:5f:8c:95:d6:05:d0:6e:ac:4b:e4:62:
c6:8f:97:22:83:be:98:e0:3b:29:e4:09:92:ce:e4:9c:bb:54:
4b:f0:da:59:ed:9f:b4:fa:c0:b9:76:d3:e6:0a:d0:18:a8:8c:
fa:fd:aa:b2:d3:dc:c7:8e:00:b8:2a:9d:67:dd:9c:ac:72:41:
63:35:76:d3:63:81:a2:27:01:1f:29:c1:be:68:3e:82:65:1e:
31:c2:ef:09:bd:31:73:1f:8d:55:92:f8:e0:c5:f5:6f:80:90:
d6:e5:40:30:0b:20:76:73:a3:44:af:3d:1f:ad:3a:65:7e:2e:
e2:cc:60:8e:a9:53:55:b2:db:e6:d3:4c:d0:0f:f5:ec:50:4b:
bd:d4:51:fa:5c:95:53:c9:7a:28:8b:d9:ba:c1:37:29:8a:78:
b4:28:9b:e4:32:63:57:85:8b:96:02:c5:35:63:52:bc:d1:b0:
dd:6b:34:04:0f:51:5b:f9:d1:1a:21:fc:74:1b:e8:92:b4:89:
5e:60:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:30:49 2026 by rpki-client