Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: SN8ecaiIFvGiGc10CUwih3L/4Cw4mddHQ2qCo0iKSmo=
Subject key identifier: A8:33:92:F6:35:93:C2:91:3C:F7:AF:09:C5:8E:23:BF:BE:74:BC:EB
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 01A0889F37B942B499F50E58F96A115118D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 00:02:10 +0000
Manifest this update: Thu 10 Sep 2026 00:02:10 +0000
Manifest next update: Fri 11 Sep 2026 00:02:10 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: C6DiSQ3MvdtOhFml21kFoLypXwAmzYuRQWh1AEO7dk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9f:37:b9:42:b4:99:f5:0e:58:f9:6a:11:51:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Sep 10 00:02:10 2026 GMT
Not After : Sep 11 00:02:10 2026 GMT
Subject: CN=a83392f63593c2913cf7af09c58e23bfbe74bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:70:6b:06:e6:c6:e2:01:1c:9f:dd:db:67:
6c:1b:dd:22:d9:86:51:f9:c5:91:41:e5:b7:d2:62:
1e:85:c5:99:c7:d6:ca:62:71:95:26:b3:68:9b:80:
8f:89:b7:c4:d0:11:a2:76:a3:36:d0:c2:ed:b9:ed:
1a:da:06:d9:c9:9d:af:45:cc:0c:80:89:98:df:db:
7f:78:59:74:51:2a:ef:7c:f5:14:23:b5:1f:92:2e:
72:ef:82:eb:b4:ef:f2:bc:5b:ee:78:26:eb:01:3c:
85:36:45:fc:8d:3e:92:f2:83:9b:d7:5f:f9:9e:32:
ea:9f:bb:49:7e:15:a9:54:0c:31:88:01:f2:48:c1:
b7:1e:a4:b4:58:2d:a5:49:bd:d3:89:11:2f:6f:31:
8c:b7:d7:a2:91:ee:6d:4f:bf:83:e3:07:45:64:20:
0d:7e:e3:49:13:74:b3:f5:e1:1a:52:4b:3c:1b:c4:
1f:6b:92:9e:e0:e8:f1:db:d0:12:d3:96:ac:37:f6:
c3:cd:a5:41:13:61:b7:95:d5:60:16:dd:28:ce:09:
34:61:7d:8b:20:f7:42:44:26:f3:c0:b4:45:f5:cf:
97:00:35:fd:30:d5:6a:35:a1:0c:22:8c:d8:5d:a1:
54:dc:f0:14:89:4f:0d:38:9d:9e:cf:97:bf:b3:46:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:92:F6:35:93:C2:91:3C:F7:AF:09:C5:8E:23:BF:BE:74:BC:EB
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:d9:3d:e9:c2:85:85:5d:0e:3c:b9:19:0d:46:95:97:9b:
d9:95:8f:81:79:1f:a1:ae:a0:e0:d1:1e:2b:b1:68:95:39:4c:
1d:a7:e8:15:9b:cd:b3:58:f4:b3:d4:54:d8:c0:f7:39:dc:97:
2d:3b:1e:bf:03:89:2c:7d:0f:17:c8:f9:b7:a5:df:db:9a:2c:
55:15:6d:c0:81:b5:e2:30:11:08:e3:36:80:de:cc:08:f8:aa:
67:4b:74:a2:b2:4d:4e:f2:36:16:c2:ab:e9:15:c0:aa:81:5e:
49:cd:7d:9f:af:d3:e0:02:d5:84:99:eb:85:72:ec:d7:95:86:
21:1e:64:f0:76:bd:f6:85:17:95:e9:af:7e:f4:a7:d3:c9:1c:
85:25:3d:56:4d:ec:da:3f:b2:1b:c9:51:ea:6b:b9:5a:a1:66:
99:0f:b9:88:b5:9e:91:fd:28:50:21:5b:db:fe:e4:41:3d:6c:
1f:e6:e7:ac:67:53:99:2c:1a:54:e2:d0:98:09:84:00:ac:42:
4a:10:45:3c:33:09:41:e3:19:e7:79:89:d8:3c:e8:1a:9f:5f:
59:8f:5a:a3:68:50:69:e7:35:56:65:9a:ae:a7:73:51:e2:75:
42:3d:01:a5:47:d3:e4:c9:86:c0:2b:ac:51:e7:d4:21:b8:05:
ab:6b:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:26 2026 by rpki-client