Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: ic9OwZbWTTgqtsnq/N49gJLVdXcKM6H+YhwGU3hUP9s=
Subject key identifier: 4A:CD:4E:16:D3:55:EA:EC:05:B7:A0:0D:A0:A6:B3:3D:BF:A5:E6:E3
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019E64CD8E452C95C731FF7F97BD7E3BB744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0905
Signing time: Tue 26 May 2026 15:00:53 +0000
Manifest this update: Tue 26 May 2026 15:00:53 +0000
Manifest next update: Wed 27 May 2026 15:00:53 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: PAI3BHtw/bnfYexoJ1aqlEx3swPKIuryzJO//PuH2bc=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:cd:8e:45:2c:95:c7:31:ff:7f:97:bd:7e:3b:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: May 26 15:00:53 2026 GMT
Not After : May 27 15:00:53 2026 GMT
Subject: CN=4acd4e16d355eaec05b7a00da0a6b33dbfa5e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:ba:a0:5b:a8:4e:2c:75:ee:2a:0d:fd:22:
14:33:7d:c7:21:6b:43:85:94:47:df:58:65:ea:d4:
dc:6d:9a:4e:9c:35:06:f6:4b:84:12:9e:8a:98:c3:
f3:45:00:fd:d2:81:14:e3:98:d9:96:7a:5e:4c:c3:
c7:2d:c9:1d:e8:80:d6:5c:6e:79:26:fd:b2:05:a8:
11:5d:8d:f0:11:45:18:66:33:99:86:ed:2b:0b:a7:
50:1d:be:a9:a1:cc:cb:7a:53:6d:ee:b8:c7:8c:49:
0d:1a:73:66:52:dd:72:90:f0:d9:1e:fc:90:3a:51:
de:5b:d0:91:a0:ec:ca:cc:9e:32:a4:4c:6a:e6:c3:
a6:08:0d:23:e7:99:fa:59:3f:6a:ba:5c:8e:46:57:
95:1f:56:72:67:ee:29:c9:c4:23:a6:8e:2e:df:b3:
da:bf:0b:c2:5c:75:72:e7:b3:ee:b1:08:3d:fd:05:
52:06:b4:21:d0:73:6f:53:c8:50:e2:2a:02:d6:1b:
48:ad:46:88:44:40:9a:a4:77:a8:56:40:88:2b:da:
06:97:89:ea:19:f8:50:8b:a0:49:4f:e0:06:d2:3b:
40:28:ac:93:34:4e:46:a4:d2:99:f0:df:ec:32:0d:
b0:79:da:04:70:21:15:94:0f:a1:bd:72:40:da:64:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:4E:16:D3:55:EA:EC:05:B7:A0:0D:A0:A6:B3:3D:BF:A5:E6:E3
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5d:92:88:22:3e:95:37:77:d2:f3:d0:2d:dc:d0:6f:5d:dd:
6a:47:c4:40:d8:41:91:7e:c9:81:72:29:dd:0e:1d:ea:ec:0b:
49:99:76:8b:94:4d:e8:34:20:ff:ea:99:0e:46:85:5b:24:e8:
26:9d:57:4a:e4:93:bf:e4:08:e1:6a:10:a5:3c:15:4d:39:46:
16:4e:7f:55:24:15:7a:6e:48:2a:b7:4c:f6:05:de:b0:ab:1a:
f8:3b:c9:2d:e4:6e:e2:19:74:45:63:54:f2:80:64:53:27:e4:
69:8c:75:c0:c9:95:5e:4b:93:ae:37:e6:2a:a0:af:89:43:96:
18:d2:73:53:cd:da:d0:cb:11:67:5b:79:4a:8e:6f:e0:02:71:
01:b9:cb:24:d8:f3:15:b9:3f:09:9f:c9:cc:3c:7f:7b:05:bb:
de:e7:bd:b7:8c:82:5c:6b:a5:7e:95:b0:52:a2:94:65:d2:67:
04:7d:b6:aa:ff:46:3d:79:c3:20:02:5b:fb:78:50:66:bc:00:
31:8b:eb:7b:3b:4d:c9:c6:2b:cb:bd:da:84:7a:89:4a:17:73:
45:02:57:52:7b:f5:c6:59:a7:ab:aa:33:ba:d2:21:b5:1e:16:
60:fa:fe:d7:db:a0:a2:fb:6a:a1:86:93:41:97:61:50:19:bb:
4c:fb:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 01:17:40 2026 by rpki-client