Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
File: momArWm4s3dOSrL3BbUlO0CT2rk.mft (raw, json)
Hash identifier: 7b0CKXoy2mdJh3SfCJBcesjNQC30RuBBsEjttdbrC2Q=
Subject key identifier: F7:37:EC:23:A8:7D:1F:FE:F5:96:19:3E:60:41:CB:1D:90:0E:53:B5
Authority key identifier: 9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9
Certificate issuer: /CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9
Certificate serial: 019D72F9DB353DDC9EB87586D23B32A16EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
Manifest number: 01AC
Signing time: Thu 09 Apr 2026 16:01:10 +0000
Manifest this update: Thu 09 Apr 2026 16:01:10 +0000
Manifest next update: Fri 10 Apr 2026 16:01:10 +0000
Files and hashes: 1: CGv011R0BsXNsx4-mbDVixNDbcA.asa (hash: K18DfUdhfOGHjsr8lcJu0G/LrevSlYi+SwrddtBXAps=)
2: momArWm4s3dOSrL3BbUlO0CT2rk.crl (hash: zrvhMeMl2TCp+ZbJczd7Nfl49aUtfUbmOve1M3dKA/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:f9:db:35:3d:dc:9e:b8:75:86:d2:3b:32:a1:6e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9
Validity
Not Before: Apr 9 16:01:10 2026 GMT
Not After : Apr 10 16:01:10 2026 GMT
Subject: CN=f737ec23a87d1ffef596193e6041cb1d900e53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:f8:68:ce:8e:78:0e:81:5b:2e:b2:5a:29:
0d:8a:eb:4c:93:b5:25:ef:ea:ac:dd:3f:24:57:f7:
0a:fe:87:2d:7c:e5:e4:7b:dc:8b:f1:c9:53:89:40:
61:ea:19:f3:a1:e3:8b:d2:e3:34:3b:a9:2e:a2:58:
96:24:70:e6:4e:c8:86:83:a1:4d:7e:8b:3a:af:50:
83:f3:af:5d:39:ff:d8:0c:4b:94:c5:df:3e:0a:2b:
7a:d7:91:df:35:86:3a:13:44:ae:0a:c9:ad:ab:63:
8c:d5:d6:90:56:f5:ea:3c:8b:83:0e:b6:34:2a:de:
6c:56:ba:98:84:09:74:c7:61:16:17:01:b9:59:7c:
41:ed:f9:48:b6:b6:32:58:12:ec:71:df:c0:5c:47:
31:15:09:98:21:65:05:cd:fa:fb:fa:c2:e4:7c:8f:
a0:9f:8b:0d:fe:e6:2f:b9:b9:cc:3a:59:28:5f:5a:
ab:ef:bf:52:57:df:11:eb:8a:1b:47:19:e3:10:03:
8f:d7:5c:ef:b4:7e:5d:be:be:85:4c:11:93:16:86:
60:98:30:8a:67:62:13:18:76:b3:a8:c5:5d:c4:23:
72:51:8e:2f:cd:5e:ef:8d:b6:ec:d0:b1:8c:2f:bd:
a7:41:d4:0a:a9:ae:ea:8a:42:1f:80:fc:78:a0:3d:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:37:EC:23:A8:7D:1F:FE:F5:96:19:3E:60:41:CB:1D:90:0E:53:B5
X509v3 Authority Key Identifier:
keyid:9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:c7:7b:a3:59:dd:ca:ce:34:91:88:7a:87:d1:88:0c:29:
08:83:14:14:bb:88:ab:4b:59:d5:e6:16:9e:b1:5d:62:f0:f9:
b1:b6:72:bb:0e:7c:b9:21:df:e8:6d:70:f0:09:ea:02:99:94:
96:fb:5f:f4:c2:70:c9:21:fb:da:0e:2d:38:32:93:91:b3:0a:
2b:55:66:52:28:7b:fc:ec:1f:c8:e3:17:ba:7d:c4:62:38:f9:
96:f0:22:e0:15:f0:9c:8f:d7:38:ef:9d:18:5e:74:82:b4:68:
e0:66:ad:68:93:82:d1:42:2a:25:7f:47:7e:c7:f1:ec:c5:d5:
ef:31:19:61:bf:6e:1a:73:82:c7:e9:2f:c9:c9:a5:cf:6b:64:
51:4e:f4:fa:e5:52:a4:7f:21:31:ef:75:a0:6b:6c:2b:5e:55:
a9:5a:e7:2d:91:21:cf:a1:83:52:3b:c3:e2:01:f3:e0:69:73:
0b:c7:fd:06:db:8d:92:38:68:7a:44:9c:0e:12:a0:26:02:59:
2e:02:72:6d:26:ed:7c:16:31:ff:f1:6f:ad:9a:be:b0:d6:53:
fe:57:73:81:65:25:7c:34:e6:78:1a:89:2f:66:0c:84:80:bb:
29:e0:28:26:f1:b0:ae:48:9a:1b:86:1c:53:22:2d:f9:db:17:
15:7d:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 23:58:33 2026 by rpki-client