Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: Mgns+JVLibjXgDkXvESih8jPVnIi/1Vd/4Qg7w6TBow=
Subject key identifier: 72:05:69:3C:3D:5A:51:66:2D:1C:5F:23:E7:C1:A5:78:27:9E:0C:47
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E401C98D9B6CBEA1D8F072EC144660B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 08F2
Signing time: Tue 19 May 2026 12:01:16 +0000
Manifest this update: Tue 19 May 2026 12:01:16 +0000
Manifest next update: Wed 20 May 2026 12:01:16 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: We8bnZBsigmuM1x7IU/rB9LQ722ZfiVwjgcAQK9UwgQ=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:1c:98:d9:b6:cb:ea:1d:8f:07:2e:c1:44:66:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 19 12:01:16 2026 GMT
Not After : May 20 12:01:16 2026 GMT
Subject: CN=7205693c3d5a51662d1c5f23e7c1a578279e0c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:12:f6:8c:b9:93:c4:1f:33:d5:e5:6f:97:
64:dc:57:93:b0:c1:c2:2e:b6:28:20:a7:70:cd:47:
e1:49:d9:2f:77:73:28:bc:b6:62:33:30:1b:4c:45:
cd:75:77:45:5a:2c:69:db:b5:9f:13:fb:d1:6c:e7:
51:87:75:3f:f9:35:3b:51:cd:0c:a6:9d:4d:09:31:
a8:12:2c:de:84:91:90:9e:b3:88:3d:02:3d:1f:42:
b4:6d:65:f5:e1:70:48:2e:83:dc:75:3b:a5:d3:15:
be:f7:41:af:d6:bc:64:10:18:4c:2e:16:f1:dc:55:
c3:2b:fd:7b:d9:5c:2e:3d:89:92:b0:08:87:cc:bb:
39:a0:a8:6d:4e:74:79:54:43:d5:e9:51:df:72:e0:
6e:d0:b0:b5:77:38:dd:a2:76:fe:9d:2c:8b:71:66:
22:fe:9f:e7:71:28:9a:a3:08:39:ae:2e:c2:a8:7c:
60:d6:07:1c:43:83:93:de:f3:2a:c3:f8:61:57:7a:
5a:53:b4:f0:82:3f:e2:eb:db:ea:fe:3e:16:93:ab:
35:f1:22:33:f8:23:99:e4:d7:2d:0e:b8:7e:1f:8a:
cb:22:68:20:d2:1e:a9:11:06:3c:93:e6:71:32:e4:
e0:63:44:6b:15:86:61:7e:74:a9:c7:b6:1a:22:fd:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:05:69:3C:3D:5A:51:66:2D:1C:5F:23:E7:C1:A5:78:27:9E:0C:47
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:b2:22:3a:d4:13:c7:b3:81:10:9a:ec:b4:61:ff:95:12:
92:48:2a:8e:ab:ef:b8:f3:62:0d:90:8e:ee:70:21:aa:73:2b:
c3:ab:8a:14:57:3d:b6:e1:b5:25:2d:0f:7b:06:1f:02:c1:3c:
96:33:2c:9f:67:60:f8:42:bc:15:fc:4e:2f:e7:87:16:85:37:
cb:b7:f8:3b:21:c8:5a:43:fb:11:f3:c1:56:c4:44:b3:cc:ba:
fb:ab:0e:64:5a:cf:75:44:5e:31:1e:a0:d7:0d:bd:6e:29:73:
25:41:63:12:eb:0c:d4:b8:c4:53:d5:19:59:48:b4:68:9a:f9:
c5:10:c4:8f:db:3f:a9:3b:de:cd:d0:8b:f0:77:7b:be:b2:b7:
b4:ad:86:5b:08:6a:99:ea:83:8d:8f:0b:81:b5:9a:b7:6f:8a:
ca:27:6e:0e:01:4f:db:e3:0f:a7:6b:b5:02:0f:1e:bd:6a:bd:
70:b3:83:3a:79:02:3f:dc:7a:5f:a7:85:2f:3f:91:ba:33:cb:
d4:fc:60:c6:6b:ef:9d:7c:b3:c7:68:f0:6c:ff:62:c8:cb:9a:
d7:98:25:89:06:a6:1a:40:c4:a1:3c:fa:cf:4e:b9:1b:cd:db:
34:b0:dc:85:c4:ee:dc:ce:ce:c7:ca:70:a0:ee:7b:4b:4d:46:
4e:eb:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 19:10:59 2026 by rpki-client