Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: 6XcPeRYuqLpqne/xxmKQgq8fsm3l6PnJW5LEA4ibx9Q=
Subject key identifier: 2F:A8:80:68:F7:6A:81:B9:4E:7D:99:44:50:D3:A5:F9:48:7C:B7:78
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A08942F59BF085E235FAD082F028695804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A21
Signing time: Thu 10 Sep 2026 03:01:01 +0000
Manifest this update: Thu 10 Sep 2026 03:01:01 +0000
Manifest next update: Fri 11 Sep 2026 03:01:01 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: kvBYAplQ4vhJDzkUGGOWp6UqlOXRDYnCjY6QtRCpgEo=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:f5:9b:f0:85:e2:35:fa:d0:82:f0:28:69:58:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Sep 10 03:01:01 2026 GMT
Not After : Sep 11 03:01:01 2026 GMT
Subject: CN=2fa88068f76a81b94e7d994450d3a5f9487cb778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:ef:9a:86:36:de:fa:40:c7:97:ff:6f:2c:
ce:9e:44:e5:2b:fc:5d:e1:ed:1c:57:a0:f5:31:11:
f5:dc:e1:7a:41:79:8c:77:8d:e8:e7:ca:73:8f:a1:
5a:fa:77:07:d1:59:fd:00:44:26:ad:71:6e:ff:ec:
f8:2d:bd:bb:5c:08:c7:02:f8:44:a4:eb:88:fd:46:
72:4c:69:cf:70:f4:0f:c5:da:35:d6:4b:a8:09:32:
84:26:7e:d4:43:df:1a:d7:61:52:f9:6f:06:a3:f8:
7f:12:75:50:18:dc:d6:36:89:ff:6f:37:26:14:43:
8c:c4:18:33:99:4e:5f:79:4f:04:1a:f2:b2:11:80:
af:d1:90:72:db:d0:e7:64:3a:06:05:cd:dd:39:8b:
0c:53:9b:a1:4f:6b:11:c4:2b:c2:55:5b:f6:ef:48:
e5:c6:94:60:0a:32:33:7e:4e:ef:c3:ea:ef:21:4d:
77:c9:31:c1:eb:b6:cf:e9:57:a0:f3:5a:c6:3c:37:
66:2b:33:0c:c3:c4:67:d2:79:98:9e:cd:4e:bd:89:
ec:50:dd:f7:6f:f1:18:a4:0d:f4:70:8e:44:b9:79:
ef:5b:be:d9:79:21:9d:a9:56:e1:79:d4:d0:ff:78:
b8:3e:51:1c:df:47:8d:75:85:90:6d:80:69:c0:68:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:80:68:F7:6A:81:B9:4E:7D:99:44:50:D3:A5:F9:48:7C:B7:78
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:03:d6:2a:eb:5f:57:8c:d3:47:22:bc:db:2c:0a:66:4c:96:
c5:58:ed:9d:e1:95:a7:fa:2d:9a:f7:13:ac:66:14:76:50:97:
1a:aa:e8:8e:cc:af:5f:d0:db:81:13:75:fa:65:e1:76:df:3f:
bb:4c:00:54:af:ff:cf:3e:92:02:7b:be:9d:37:05:d0:5e:78:
5e:f7:4b:92:c4:73:53:49:fa:2d:68:bd:1e:36:28:84:f6:95:
2a:01:0e:bf:a3:c6:40:df:84:92:0b:1d:4b:8c:9b:f5:83:cb:
65:b2:59:a9:05:24:76:ea:bd:e4:c2:b2:ae:29:bc:ca:c1:85:
1e:d3:34:a1:d3:5e:10:1a:75:72:ca:af:3e:9b:f5:00:05:54:
65:ca:85:36:6d:b3:73:92:57:11:aa:15:38:a1:6e:78:81:de:
79:8b:63:e2:b5:6d:83:ff:9e:aa:1d:ef:71:92:12:9e:10:5b:
cd:be:d5:17:45:a1:04:36:b1:44:e0:84:e2:ec:50:f9:8a:9a:
b5:75:66:1b:46:0e:11:c1:f3:35:b8:7d:66:4e:54:ba:c4:e0:
de:98:7a:30:75:21:82:e1:6e:89:60:2a:88:b0:ce:a9:c4:8b:
cb:29:fe:58:0f:1c:25:44:eb:cf:03:34:61:c7:f8:18:d1:ce:
b4:d7:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:38:10 2026 by rpki-client