Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: KXQ60oqleN1n6AziwvkvWYwY3vDyZLgyTYBwyZyW34I=
Subject key identifier: 34:2B:91:B3:D5:52:F4:6F:C8:6D:B6:E6:7B:C3:95:9B:FC:81:6D:DB
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019D389BB83124FFDD3198002F104535D93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: cZluJduGtR0Gza/DTm9FEwKSx3mHvA8Syma85jsHAls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b8:31:24:ff:dd:31:98:00:2f:10:45:35:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=342b91b3d552f46fc86db6e67bc3959bfc816ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:14:25:27:61:9e:96:f2:80:35:ad:90:52:
11:9a:31:37:22:43:34:72:00:ac:df:3e:39:1d:f8:
4b:24:b2:b9:07:51:13:ad:da:91:d4:78:f2:e9:28:
04:fa:f9:cc:43:5e:4b:11:c0:ac:e0:71:ac:66:93:
f8:73:17:86:d9:57:98:a4:4a:f5:67:95:36:81:b4:
d1:59:8e:21:91:d1:80:3c:59:5e:96:e1:23:93:fc:
7c:49:53:bb:d5:6e:8d:49:b7:06:7a:e6:4b:c6:4c:
54:cf:17:8d:54:e2:5e:34:69:bb:0f:91:bf:ab:86:
54:6f:1a:50:c3:0b:ba:ba:e2:1c:ec:f9:d4:a0:d1:
45:81:ff:09:73:65:43:a4:18:59:14:db:91:a8:f9:
6d:4c:c3:0e:38:d0:95:ae:ff:6c:c1:80:eb:0c:19:
ed:67:f4:32:61:7a:34:6e:7e:59:e1:82:99:fd:6c:
6f:f8:7f:d8:cc:ed:d7:0b:f5:90:56:a9:fe:f0:9d:
33:7f:81:08:c4:46:fd:7b:b2:c0:3c:c7:2f:77:24:
fc:38:1a:33:d1:7a:d3:88:2d:23:a9:a9:c1:dd:9b:
ac:c9:b2:25:76:8d:e7:73:f5:56:c8:ec:96:15:f8:
f3:2c:fe:fe:a3:f0:40:d5:45:47:e6:d9:9f:2c:ca:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:91:B3:D5:52:F4:6F:C8:6D:B6:E6:7B:C3:95:9B:FC:81:6D:DB
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:c3:a5:e2:0c:02:cb:07:94:46:ab:38:74:0c:e0:88:5b:
33:9a:d4:1c:09:eb:f6:15:66:2f:7b:7b:7d:72:9d:e5:1d:9d:
fd:34:8b:4a:3f:dd:dd:2a:a6:a9:5f:fd:87:87:3d:13:70:3b:
c4:bc:9d:76:6d:f5:d8:c7:d8:42:35:bd:9f:ea:65:ca:99:1d:
a9:d6:75:46:fd:e0:1c:a3:2c:08:c4:c5:07:a1:f0:e0:ec:79:
bc:1e:79:79:e5:01:e3:15:be:3e:d7:0e:20:3f:47:2c:f6:c6:
f1:a3:42:ca:d0:12:cb:4b:83:2f:8e:8c:b6:ed:d3:6a:f5:7c:
8c:49:de:bc:de:af:16:98:85:fe:aa:8a:f5:cc:94:06:49:79:
f5:54:ce:f1:66:20:7b:14:56:41:c6:d9:e2:d8:41:04:a4:e8:
06:e1:42:bf:e9:d0:03:c8:6c:c8:03:5c:15:a5:d3:86:6a:d1:
a8:60:42:d5:0a:f2:e0:a0:3d:51:50:29:ee:32:05:f4:85:f4:
cb:55:50:cb:9e:9f:f6:c7:d3:35:2b:87:14:7a:4c:16:fd:9c:
5b:14:75:13:6e:5f:44:c9:49:91:b1:9e:26:5e:b1:50:09:4e:
2b:7f:b6:fb:8a:e6:84:24:7a:4c:fb:52:b9:a3:3a:98:0c:e0:
c1:47:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:41 2026 by rpki-client