Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: zXR3w5lEMNs1GW6atL6oGqIY0Sb3GPjedG8LF81P9jc=
Subject key identifier: 1D:C0:07:34:A4:3E:5A:C4:FB:4D:94:AF:28:2F:FA:B2:36:1A:96:65
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 019D3940BFD904E61FFCCF9FE96AF6DA74C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: 3JDOgau4GXIlP-8TxtcC06uAWi0.roa (hash: QjML2vUB5G/DnLmOZku9aV5tntgCQSEVJ8kdiDg/M3E=)
2: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: touejCyeLiEzfMj20l5t/jrvQFHNuQ/XtBYDrGHtFQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bf:d9:04:e6:1f:fc:cf:9f:e9:6a:f6:da:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=1dc00734a43e5ac4fb4d94af282ffab2361a9665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:67:ec:99:52:7b:e3:d2:f6:c4:b7:22:2c:
56:50:22:d0:74:67:57:b9:8c:c3:fe:6f:5f:90:77:
47:f4:95:b9:3a:7b:3c:fd:dc:8a:ef:af:d2:50:68:
15:82:61:28:48:7a:b3:48:85:af:1d:84:c1:da:02:
97:f3:8a:98:53:fd:cb:d3:08:e8:08:54:d3:36:67:
4b:a9:41:58:bb:fe:c7:fc:fb:7d:b5:d0:3f:ae:91:
58:38:02:06:73:a5:cd:80:d9:5f:ff:0a:18:3c:3a:
eb:b3:31:14:b5:d7:61:2e:13:3d:a9:08:cf:25:37:
33:bf:19:3e:00:ba:35:1e:c9:d6:0e:eb:cf:8c:ae:
c6:3e:06:3a:f1:75:92:06:3a:bc:45:64:f0:2d:f4:
a6:e0:12:92:05:5e:eb:9e:c0:cf:17:58:c6:2d:c6:
d3:b9:4c:0d:14:ad:f6:03:d7:46:0d:a9:09:99:fc:
77:39:b3:36:84:19:df:4f:15:aa:84:ff:ba:55:eb:
27:2c:5b:7e:f8:ca:00:4e:8b:9c:ed:a1:f6:a5:a2:
76:ec:7e:6a:dd:e8:9c:26:e3:88:e5:dc:f8:1b:92:
74:7d:5f:0f:a6:6e:0b:84:50:20:6b:ea:3a:c6:e8:
40:35:32:99:ac:06:a1:f5:c5:de:f9:7f:bc:06:84:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:07:34:A4:3E:5A:C4:FB:4D:94:AF:28:2F:FA:B2:36:1A:96:65
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:f5:df:ab:92:d7:7f:bb:84:33:2e:cb:de:ba:e2:3d:0d:
fb:e7:c8:31:f4:e2:f9:1c:8d:7e:00:6d:97:b8:f5:32:fa:07:
af:bb:4c:4c:49:44:ef:f4:22:58:8c:ab:81:38:3c:82:22:b9:
f1:96:0d:35:44:3f:db:9a:3c:06:15:7d:44:81:54:bf:79:07:
75:0c:f0:eb:16:f9:73:07:df:aa:83:dd:1c:f9:fa:29:8e:99:
09:d5:aa:bd:33:29:c7:81:06:f0:52:ba:1b:0b:b5:a5:37:f8:
11:33:87:84:a1:40:2c:a1:cb:69:a6:4d:9d:bc:e4:8e:25:73:
f6:b9:6a:5d:ee:d3:ae:67:16:40:59:b4:66:71:bd:7e:7a:27:
fb:4c:50:07:c6:94:3d:f6:0c:ea:5f:bb:2b:09:d9:a7:25:29:
00:8b:93:cf:8c:43:24:b0:93:cb:c9:4b:76:a2:9a:62:31:c2:
1d:53:ae:36:b8:95:31:23:8c:11:80:a1:73:08:07:25:f6:52:
c2:c9:3c:80:01:30:a1:36:dd:c2:df:2f:47:dd:8f:13:16:02:
29:12:4f:b9:e4:c7:59:d2:fb:06:de:33:0e:54:c6:da:f4:a6:
3e:9d:2d:7b:d1:9a:db:6d:ac:01:0d:82:23:0c:3d:78:74:4f:
e4:ed:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:52 2026 by rpki-client