Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: KkU+2vwfdEw4zBeAG5NJPW6udZ80tYR5vCgMY80dgis=
Subject key identifier: 1D:10:06:A7:EA:1C:D0:5A:38:D6:16:90:04:F5:22:08:55:E5:7F:23
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E159F9540BFD1FAB2F55422A7EBAE11DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08DC
Signing time: Mon 11 May 2026 06:00:40 +0000
Manifest this update: Mon 11 May 2026 06:00:40 +0000
Manifest next update: Tue 12 May 2026 06:00:40 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 8L+b56piyA7xMV/xXz5RY9xyxMLP+1JLhJ8rIL00Fk4=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 May 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:15:9f:95:40:bf:d1:fa:b2:f5:54:22:a7:eb:ae:11:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 11 06:00:40 2026 GMT
Not After : May 12 06:00:40 2026 GMT
Subject: CN=1d1006a7ea1cd05a38d6169004f5220855e57f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:af:1d:62:e1:9d:2a:c5:e5:25:04:b1:f6:
ef:f3:9c:74:72:ba:8c:c9:37:42:74:71:41:c3:d6:
ef:08:07:59:2b:12:b0:d3:43:ae:cf:24:5c:26:88:
f6:b0:87:02:77:c0:20:32:40:4b:f5:f4:1c:0b:9c:
21:f7:2a:cf:01:01:44:59:d1:11:78:45:23:76:d8:
0b:b0:9f:96:af:0b:17:2b:04:ea:86:39:81:fc:ec:
aa:54:c2:77:be:22:5b:d4:cf:b3:5a:29:4f:f9:82:
f5:aa:a9:92:43:1b:60:90:3f:f2:60:81:a2:06:70:
2c:d7:de:44:9e:cf:50:51:fb:74:66:c9:eb:cc:e3:
31:ed:a0:92:8c:3e:d7:7f:4e:e3:b1:70:3a:31:a6:
a5:e4:3a:29:5b:92:a8:07:2d:9a:ef:02:1c:be:1a:
6f:6c:ab:9b:2c:50:59:0e:bb:b3:8d:8b:ac:36:c0:
82:d6:14:e0:ba:9a:76:46:df:6a:98:98:3c:c2:6a:
1b:31:17:37:ec:bd:e9:d9:b2:ee:44:04:b5:0e:42:
31:c8:a9:c8:f4:d5:0a:c1:b7:82:7d:f4:43:d0:eb:
a8:39:f6:07:70:bc:ca:d5:2b:c8:c3:21:1b:1d:df:
35:77:af:0e:8e:8e:bd:43:46:ae:48:63:20:d1:17:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:06:A7:EA:1C:D0:5A:38:D6:16:90:04:F5:22:08:55:E5:7F:23
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ce:51:c8:d1:57:3a:d8:51:88:8b:58:01:81:c6:53:b3:d8:
09:cf:b2:83:c1:cf:f7:bd:dc:90:f0:4f:48:dd:43:e1:1d:3c:
4e:79:7e:77:4e:9a:5b:28:ce:c9:c9:61:94:0d:01:cd:bb:f4:
b1:90:6d:dc:57:73:c4:07:d5:13:f1:78:fe:54:99:4a:6c:b0:
04:68:55:89:b7:9c:c3:6c:90:53:fa:5a:ed:8f:74:d7:dd:5a:
5e:fe:62:2f:c2:9c:2b:fe:c6:f2:f4:3a:37:d4:fa:23:0b:46:
9d:d4:99:f2:7d:27:a4:c1:4d:a5:32:9d:01:8f:6c:80:70:1d:
d0:5f:84:d0:c3:03:8a:4f:30:59:05:84:54:83:15:12:6d:bd:
df:69:75:ab:aa:76:c4:19:db:05:0b:20:5f:17:0b:94:9f:15:
ff:cf:00:88:2d:32:e7:aa:f6:b5:b1:4c:4d:05:f5:48:ab:d9:
40:17:4a:4d:fd:3e:e9:9e:60:52:46:cc:4b:be:92:e6:e7:1e:
8f:c7:46:52:d7:5a:91:7d:09:d2:4a:67:06:c1:ae:6d:3e:c7:
bf:db:fc:9d:36:16:67:eb:a9:f5:7d:f7:83:e2:9a:ac:61:46:
fe:f4:59:9c:ac:e5:40:13:73:eb:4d:82:ee:23:7a:4b:0c:23:
4b:65:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 15:18:56 2026 by rpki-client