Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: +gmkkaCFH5u3a6Fy9IfKn2gwopHghDhzjWWfe961IDI=
Subject key identifier: DF:3E:52:EC:A7:A3:39:8F:68:11:8A:3E:D7:81:23:7A:16:7C:7B:09
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019DCCAB21B35498112B58472A2580D7FF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 1098
Signing time: Mon 27 Apr 2026 02:01:00 +0000
Manifest this update: Mon 27 Apr 2026 02:01:00 +0000
Manifest next update: Tue 28 Apr 2026 02:01:00 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: rUQ2t379GlwKs+RXcQBVKOEZmjoIJA7/UnnulWocFYw=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:ab:21:b3:54:98:11:2b:58:47:2a:25:80:d7:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Apr 27 02:01:00 2026 GMT
Not After : Apr 28 02:01:00 2026 GMT
Subject: CN=df3e52eca7a3398f68118a3ed781237a167c7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:0e:b1:cc:1c:56:66:1c:09:9f:cc:08:8d:
6b:34:56:83:2c:3b:ee:66:8e:ad:99:64:00:b4:69:
87:57:f8:9c:b3:de:61:16:ad:12:e3:06:6f:11:64:
e6:f1:e3:bd:d5:5f:3e:4f:8e:0f:a8:de:05:61:a6:
9e:4e:43:7b:90:08:8d:e7:2c:93:02:6d:25:99:0f:
73:f6:ce:d2:e5:2d:1d:15:31:cd:03:db:9d:29:43:
fc:93:9f:fe:0e:c6:c7:b3:44:7c:45:bc:b2:ca:d1:
06:2a:be:b0:17:d7:da:82:37:a0:6b:12:f0:8e:c6:
39:6b:47:36:24:72:90:58:ee:38:bc:e9:a7:bd:c0:
14:20:97:54:ec:62:73:7e:43:22:68:18:3f:a7:c8:
e4:9f:df:84:55:80:92:91:3f:32:c3:0b:6d:a7:f5:
dc:18:46:56:4a:73:e1:d0:e1:c0:6a:91:43:4f:46:
35:a8:00:59:ed:6b:1f:27:8c:61:45:98:96:36:7d:
47:62:b7:60:33:f7:26:79:fd:3b:b3:c5:9c:86:23:
ac:e7:1f:13:c9:97:26:a7:11:01:68:75:65:f5:e6:
1d:6c:bc:ef:b1:a0:c5:b8:64:b6:8e:e4:0d:cd:f5:
dc:6b:2f:c6:d0:ac:97:3b:91:b5:b2:9f:ea:db:de:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:52:EC:A7:A3:39:8F:68:11:8A:3E:D7:81:23:7A:16:7C:7B:09
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:af:8f:ed:85:c4:fa:e2:39:f6:fe:f5:64:d5:bc:68:1e:
22:99:3c:7b:73:20:c6:7c:02:b3:e4:0f:4f:ba:99:fa:26:cc:
5b:84:1c:97:7c:7e:90:99:c6:6f:ac:c3:35:2e:53:78:7c:66:
b7:71:3e:31:ac:3c:70:29:cf:fd:7b:85:1e:12:50:6f:88:65:
49:d3:9a:04:cc:91:5d:db:a9:1d:b1:69:0c:1b:35:7b:69:de:
5f:44:41:6b:20:ca:63:87:d4:f5:bf:02:04:0c:29:b0:ef:ce:
76:0b:34:4f:19:2b:bf:be:f3:82:c6:c8:d2:be:c4:41:24:52:
e6:b8:ec:b2:7f:b1:8e:ef:e8:dc:82:36:fc:4d:0f:d4:dd:d8:
af:15:df:09:cf:bc:f2:29:5c:10:f4:76:a5:62:9b:60:0c:2f:
01:a5:33:51:88:a3:88:c7:a5:06:25:ef:1f:5e:fa:0f:3c:63:
8c:04:50:b1:f3:16:6f:36:04:72:23:8e:60:36:d6:76:fd:e8:
1c:09:e4:5c:1f:0b:5d:3d:fa:2e:be:4a:9e:43:34:9a:0f:76:
d8:94:56:1c:52:5e:82:e3:ce:c1:8b:8e:df:00:4b:b2:28:48:
ce:01:3b:f8:ed:ea:12:66:bc:ca:4a:bf:2e:f1:9f:ce:73:31:
47:7e:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:20:13 2026 by rpki-client