Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: Es8g7aCxPhwTdKGYmSW4rA8X9NIRH7xsKCpKlTh1D9k=
Subject key identifier: A4:7B:B8:23:C2:27:8E:18:A4:DA:C9:36:38:25:CC:23:5B:A1:EF:F4
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 019D37532848786B86C4ABE93E1DAD4D2144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 1263
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: NaxyZ6F5rxGah2sZWZiEsvFwZw8Svuk6gbrj6dSqftg=)
2: WdDSmHu8piwjkaXknTgjAYhTRAg.roa (hash: CUnFAf2sONYPtqjTetxje/LoEZ9f/M7eZmBz5cxD1nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:28:48:78:6b:86:c4:ab:e9:3e:1d:ad:4d:21:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=a47bb823c2278e18a4dac9363825cc235ba1eff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:27:93:10:28:39:c2:72:c7:70:b3:cf:94:
c0:7d:dd:89:b6:ec:82:57:44:24:dd:cc:cd:8f:80:
6e:f8:3f:d9:90:e7:92:1e:da:ec:2a:d8:fd:97:ca:
52:59:27:66:96:83:35:5f:78:71:8d:ae:15:8f:64:
22:78:ec:da:67:af:1e:93:d0:0d:79:99:3f:9e:31:
14:9e:c8:b8:e0:cc:08:09:43:74:59:c0:38:4f:13:
50:68:88:44:f4:cf:c6:6c:79:93:62:f1:5e:aa:89:
15:7f:8b:da:ad:7a:db:e7:df:1e:4f:1e:e6:e6:b0:
10:98:4d:30:88:bf:72:b1:ea:e8:ea:e5:76:f5:66:
02:ab:f9:99:a1:4d:b4:4e:b8:66:2c:45:8b:3d:38:
0a:e4:84:9f:d3:34:96:b2:88:64:54:0b:db:62:80:
00:b4:44:6e:a9:d0:d4:6f:c2:76:e1:ee:fe:d1:03:
ec:6b:20:bd:2b:4e:6a:71:f2:39:5b:e7:4f:38:fe:
eb:0f:a8:39:28:fe:30:15:08:fb:7c:3e:7d:46:4d:
14:52:f9:11:f2:5c:bb:0b:91:6b:e3:31:07:8d:cb:
0c:1b:24:94:d0:21:8e:ae:fb:1e:c5:77:ef:53:fa:
c2:68:02:57:7c:5d:28:62:9d:01:90:67:e3:1a:5c:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:B8:23:C2:27:8E:18:A4:DA:C9:36:38:25:CC:23:5B:A1:EF:F4
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:91:c3:66:0a:b4:52:d7:6c:d8:02:b4:42:ca:02:fd:05:91:
5d:99:d1:fd:1d:fe:19:78:97:c3:fc:61:9a:1a:5b:f2:9b:a6:
89:b0:83:0d:89:71:17:47:be:46:0f:3d:6f:55:15:44:da:43:
b9:9e:82:bb:c5:bf:b5:e5:8d:11:78:1f:a5:51:79:b2:22:e2:
71:90:e2:7d:56:8f:84:e3:45:1e:b0:ca:ad:d3:a1:37:5d:bd:
e4:9c:54:c8:62:9a:58:6e:25:7b:80:7c:13:00:d7:e6:4e:85:
7a:c4:d6:0c:b0:58:7b:55:1e:62:c9:e1:38:ee:60:f3:b5:ad:
39:6b:0a:68:12:2f:e9:e3:0f:2e:2d:26:32:6a:74:9c:e7:ef:
ed:33:29:46:58:95:e8:6f:94:81:ce:6f:8c:d0:3f:cb:5d:38:
ff:32:30:4a:f0:b7:17:dc:9d:cc:72:c0:f6:3c:b2:64:75:69:
60:1a:59:73:2c:11:ed:0d:92:ae:75:61:5b:1a:87:f7:ea:4d:
68:dd:2a:49:da:bb:79:14:77:cb:62:ae:a0:91:a6:38:4d:2d:
68:40:57:1a:68:7a:b9:48:81:08:bc:11:8d:a3:8a:36:13:55:
ae:c5:89:3b:f5:c8:26:d3:ca:78:fc:a7:44:55:ce:fc:83:a5:
4a:15:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:11 2026 by rpki-client