Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: ULlGxvRaK8jDp27Ls1TbDXWIwP/B1mXmt5Bc6C/jdak=
Subject key identifier: ED:A3:1D:FD:FD:0D:8B:77:30:B5:5F:1B:F5:7A:90:3B:D5:02:74:86
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019D3D542D2715C3D550D7C55C927D01FBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 086C
Signing time: Mon 30 Mar 2026 06:00:19 +0000
Manifest this update: Mon 30 Mar 2026 06:00:19 +0000
Manifest next update: Tue 31 Mar 2026 06:00:19 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: i1f5AMhy+NzXrACTNKHNHQ6zFE4WkWE5qEZrBca5DFY=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:54:2d:27:15:c3:d5:50:d7:c5:5c:92:7d:01:fb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Mar 30 06:00:19 2026 GMT
Not After : Mar 31 06:00:19 2026 GMT
Subject: CN=eda31dfdfd0d8b7730b55f1bf57a903bd5027486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:af:ee:b4:54:68:cd:97:58:08:cb:18:be:
d0:d8:00:b9:f3:d3:04:b2:04:50:ef:9f:0c:52:75:
90:7c:59:fc:a2:0c:a2:09:1d:fe:0e:73:7a:f7:0c:
b1:b3:92:9e:ff:2a:fb:cf:35:2c:28:f8:c7:2e:ac:
15:73:8c:11:da:23:b2:2f:bf:a8:c9:e2:a1:f2:59:
1e:57:ff:70:d7:47:88:49:24:64:e3:22:96:f9:15:
80:bd:7d:0e:86:bd:21:30:d6:b7:f0:99:f3:9c:8f:
fd:cc:5c:a4:08:60:c6:7a:44:c7:15:90:ae:62:d5:
c2:17:f5:46:69:f0:b1:26:3e:7c:81:00:45:12:60:
09:8f:29:2c:ea:4f:4f:54:21:45:da:0a:25:a1:7a:
ff:f1:af:17:09:99:ce:29:fc:2b:8c:0d:fb:96:3c:
82:50:cc:f7:d2:bd:ae:fb:04:29:d5:de:1d:c8:b8:
97:54:89:a6:6e:0b:0b:af:c9:c3:89:28:ee:ca:cd:
cb:fb:ca:6d:a8:6d:f6:f9:6c:79:54:75:f2:bc:b9:
b0:b3:0e:d2:6e:03:6e:a0:9f:d0:84:73:72:6f:53:
9b:e9:c1:05:c1:bf:26:f0:66:5d:93:a2:53:a9:22:
3d:8b:02:6c:87:2a:7d:dd:c1:62:20:3e:35:97:33:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:1D:FD:FD:0D:8B:77:30:B5:5F:1B:F5:7A:90:3B:D5:02:74:86
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e1:85:ed:31:e0:03:a5:3f:e4:c6:1c:d2:07:d8:d1:17:ad:
28:9d:eb:6e:d7:4c:ca:cd:16:84:30:43:c1:ba:90:54:a9:99:
d4:d5:7c:e1:d9:50:94:09:63:8e:1e:e4:12:c3:92:5c:4b:8f:
3d:6a:b4:a1:ec:80:ce:70:ce:13:8c:fe:84:3b:02:b5:83:4a:
e3:53:3a:17:c3:21:0c:94:3a:4c:0b:e5:7e:70:58:e1:26:d3:
18:f0:b5:c6:5f:c5:cd:b3:67:6f:c2:74:08:b9:54:d3:2c:58:
ba:e4:a2:13:48:78:5b:eb:6a:d4:f8:2a:74:44:b4:90:71:d6:
1f:4d:f4:c4:ea:d8:38:de:1a:4a:b0:8d:a3:a2:87:8c:63:d6:
6b:72:39:45:14:c0:26:d1:08:91:e6:51:29:57:84:2e:e7:6a:
26:81:fb:ad:c1:61:70:bb:82:1f:aa:f6:78:1b:7e:0e:76:cc:
77:b9:5f:17:ae:40:30:3f:39:5f:8c:cb:a1:3f:30:a3:63:a4:
ba:fd:68:c1:93:97:6e:ec:e2:f0:6a:d1:8e:1b:96:29:ec:bf:
4e:01:7c:59:be:fd:8e:25:f3:73:e4:f7:ef:2d:64:ee:fb:fe:
db:4b:4a:bd:82:6d:15:84:f3:c0:74:1e:a2:e3:56:51:ea:a9:
7f:46:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 16:08:42 2026 by rpki-client