Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: cUW+xTVvQNlbtPuQRJozrOrYnyVjYp2HwbYL4oD5Ss4=
Subject key identifier: 4C:22:56:0D:F7:B2:79:80:C8:28:44:DC:E3:9F:2D:52:26:90:66:95
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 019D38661F1D4AA51D138C6EA97FAA970ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 0950
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: LKaNUXBJYjQm4i14IxnyZqSEREWBu7xNOmtJMAFBZSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1f:1d:4a:a5:1d:13:8c:6e:a9:7f:aa:97:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=4c22560df7b27980c82844dce39f2d5226906695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:6d:e7:23:63:49:e5:88:88:51:80:bf:65:
05:7e:a1:59:e9:bf:5c:de:ed:dd:b0:27:a0:08:22:
c4:70:8e:ed:c2:f4:28:b0:a7:a0:e7:89:b0:72:7c:
03:d1:2d:c0:c8:bf:fc:0a:eb:57:1d:b9:05:74:8d:
dc:71:00:7c:3f:8f:df:42:e8:1a:d9:84:ab:62:12:
94:7d:ed:40:e6:2f:c5:86:fa:48:fb:ec:8f:44:3b:
db:42:01:42:3f:98:0e:be:8d:d2:ad:f7:73:8a:6c:
a8:cd:09:8c:1c:55:76:b0:1b:2d:0c:a5:d7:3c:b2:
c5:64:99:29:c2:96:ef:4d:20:7e:76:ae:36:bd:3c:
11:56:f7:6d:7d:90:75:4c:cd:f7:02:d3:62:64:bb:
e5:29:3c:de:e5:2a:cb:0d:2a:9e:29:d3:99:8f:fa:
79:74:a6:e0:08:7e:ff:03:55:df:02:5c:04:34:a9:
be:b5:a7:32:f6:6b:9a:ab:7d:55:50:62:f9:b8:19:
1f:fb:0e:95:69:23:d0:2d:47:e0:dc:7b:12:2a:03:
cc:16:73:30:43:d3:df:35:7e:f7:98:4d:72:91:d3:
23:e6:9a:72:15:14:a5:ca:56:6f:33:fb:76:43:f1:
74:6f:4f:5e:bc:74:88:3b:7a:23:37:ea:1e:d4:93:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:56:0D:F7:B2:79:80:C8:28:44:DC:E3:9F:2D:52:26:90:66:95
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:af:dd:60:c8:78:61:45:19:96:1e:0f:f6:32:75:c2:73:
5a:52:27:21:d5:49:71:3e:6e:fe:80:ce:3f:87:c6:1a:0a:e1:
f6:1b:05:85:00:d1:8a:95:27:67:18:85:4b:86:6f:8d:7e:e1:
19:ec:9e:c9:f1:85:42:15:dd:cf:ef:30:a4:43:d5:0c:f5:a7:
e9:a6:ca:12:d0:ec:69:22:ef:63:96:b1:c4:0e:9a:e6:2c:4c:
bb:5a:74:92:71:47:91:17:18:f3:75:39:7e:34:9b:b9:06:d8:
93:14:57:a2:e5:13:3a:12:a1:59:19:df:d1:17:9e:f9:5e:2d:
0b:46:d9:7b:0b:27:ab:45:5a:31:c7:6d:65:4f:01:4c:87:b9:
05:d3:74:b4:14:cd:94:aa:d1:6f:1d:67:e6:c2:00:20:c9:48:
77:ee:19:90:b2:33:93:df:28:52:24:f4:a6:2d:72:5a:44:c1:
a3:82:5c:4d:d2:0d:7b:e2:87:e5:08:75:a4:94:43:df:f1:c0:
7a:ec:54:bc:6c:cc:18:66:bc:d3:f6:10:d3:18:9f:35:65:7c:
7a:7f:56:a1:9d:28:a5:d6:1d:54:2f:bd:99:83:0f:86:fb:1e:
49:1e:ff:6f:6f:69:79:17:02:35:4b:76:6b:d5:44:e9:ff:0c:
6a:b2:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:50 2026 by rpki-client