Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: QkAl+mRZ2pf5CV8jVzhpCRZ2ln/QfeSfUPIfJq5K7Mw=
Subject key identifier: F4:CA:60:80:93:F7:B2:9B:D0:BB:A3:6F:66:DD:20:36:18:92:AB:95
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019CE4EC4EC2DF8960076FD6AECA0711796C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 1020
Signing time: Fri 13 Mar 2026 02:00:17 +0000
Manifest this update: Fri 13 Mar 2026 02:00:17 +0000
Manifest next update: Sat 14 Mar 2026 02:00:17 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: w2STuMh9MEkoiiPm57XCISWMPkvHDJ4IK8g6aNKGKj8=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:4e:c2:df:89:60:07:6f:d6:ae:ca:07:11:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Mar 13 02:00:17 2026 GMT
Not After : Mar 14 02:00:17 2026 GMT
Subject: CN=f4ca608093f7b29bd0bba36f66dd20361892ab95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:2c:b4:fc:e0:9c:08:71:9c:df:6f:ed:ac:
f8:e5:8b:61:9e:25:cd:b4:06:b5:d8:64:67:86:3e:
be:79:47:03:0a:e7:07:aa:d6:45:21:5c:d8:a2:6b:
28:7e:fb:f4:37:56:a9:20:7c:64:3e:26:48:5c:ef:
37:e7:29:40:50:e8:4b:0d:d8:b6:8b:dc:33:1d:10:
3f:44:9d:76:2a:90:da:41:ce:72:88:37:ae:6d:df:
3e:d0:26:b0:26:92:0b:34:a9:50:ef:e8:39:a4:a1:
f6:e0:18:c5:3a:e5:d0:b1:d3:be:15:ff:13:a7:88:
5b:0d:02:65:a0:e7:4a:6f:77:26:32:3c:df:4e:53:
e2:92:0e:af:57:48:c7:02:b7:ec:21:92:5d:46:03:
f2:fe:b6:66:34:35:91:41:87:9a:07:62:39:d3:cd:
34:1a:6d:7d:ba:3c:e1:ab:1d:99:e2:30:5d:30:5e:
11:7e:41:86:1b:80:e5:37:91:01:30:de:f6:3f:c2:
4f:5c:38:2f:6e:13:24:71:8c:8a:90:ac:13:07:cf:
10:b4:e8:44:a6:27:d7:da:07:f3:20:f6:6f:47:dd:
f7:65:cb:d2:9e:cb:66:5d:8d:ea:48:c0:2a:52:23:
42:b4:45:9a:db:da:06:b9:d4:24:b4:65:0f:48:f0:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:60:80:93:F7:B2:9B:D0:BB:A3:6F:66:DD:20:36:18:92:AB:95
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:76:04:b6:c8:03:b7:53:aa:34:5d:67:94:dc:d3:bd:94:4d:
66:66:88:23:47:9a:80:ed:df:bc:02:9a:05:7b:91:d8:ef:16:
c7:5b:e2:29:f8:56:31:c5:21:fb:65:d6:7b:4d:9c:95:ec:bb:
d3:c4:91:22:1d:07:e5:69:7d:be:65:4d:76:d1:cb:fb:3f:82:
e3:30:e6:c3:f4:c3:71:cd:8a:bb:51:27:2d:00:24:7e:23:c1:
c5:bb:d1:1d:6e:dc:aa:66:e4:6b:f7:0f:cb:19:73:54:1c:37:
a6:e7:5b:ba:eb:9c:5b:7c:0e:e8:ae:7b:50:40:4b:79:e2:70:
5f:1d:04:70:30:ad:81:82:75:67:43:9c:28:15:8d:82:9f:e9:
17:0c:cb:2f:34:d9:22:16:17:61:d7:ff:29:98:67:33:e8:d8:
f7:3f:e0:36:83:c1:5f:ff:5b:37:3e:c7:cc:53:ba:b9:80:ae:
12:08:bf:46:2d:fa:4b:84:82:d7:c5:f8:a9:b0:33:9e:32:58:
8d:30:f1:9f:b6:a4:c9:00:ed:35:3d:9e:1d:7b:36:ba:ba:d9:
04:5e:7d:e6:81:ee:d9:01:87:83:99:c6:9b:17:13:ce:75:6e:
66:5f:5b:75:1f:83:7d:4f:50:ea:ec:9d:39:57:0b:7e:50:ad:
fe:5b:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:12 2026 by rpki-client