Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier: skF2fvcUn9NpfgOfjcF5mBYPAnTrvtcbotP8v4D1Ugc=
Subject key identifier: 9B:E0:97:B8:52:22:93:BD:4A:4B:AB:63:FB:27:25:7F:27:00:3C:4D
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 019D371BF47321E0C17CE606C0CE67B86DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number: 0C0F
Signing time: Sun 29 Mar 2026 01:01:12 +0000
Manifest this update: Sun 29 Mar 2026 01:01:12 +0000
Manifest next update: Mon 30 Mar 2026 01:01:12 +0000
Files and hashes: 1: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: XjHqsiQTXljAV71mF9VcZCHjlnYy2sbS7egQYpnudlo=)
2: VPRKJwLhM6wFak3hCjlk9djzH5k.roa (hash: tH+AfV2CLPYS64epB/DiVz/hoPPj/j4JOarUZisDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f4:73:21:e0:c1:7c:e6:06:c0:ce:67:b8:6d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: Mar 29 01:01:12 2026 GMT
Not After : Mar 30 01:01:12 2026 GMT
Subject: CN=9be097b8522293bd4a4bab63fb27257f27003c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:38:1d:61:cc:d5:1a:0f:38:1e:9f:e6:d0:
25:fa:fb:d1:63:84:2e:78:30:a6:33:da:7d:19:15:
6e:da:fe:c9:6a:0c:22:b9:93:ac:f4:d9:9b:7b:cd:
2a:19:a4:ee:a6:36:e8:42:c7:a2:9e:98:07:a0:98:
43:60:84:2a:54:28:1f:18:c3:90:cd:c3:58:1d:10:
9e:27:27:30:97:91:04:a7:84:43:25:52:8a:a8:ab:
02:41:88:ec:ee:4e:43:1d:38:9f:3a:6d:80:c0:8e:
72:0d:d1:4b:72:0f:b0:7a:c7:9d:c1:c7:e5:3a:af:
ec:5a:2a:97:20:73:3c:e7:60:a6:82:6c:37:00:b9:
24:72:3c:a4:26:91:4b:8e:89:2a:cf:0d:fb:16:f9:
2b:6b:35:41:95:5a:32:33:3b:14:8a:c4:bd:09:a4:
d1:71:ee:c9:4c:66:15:01:c9:cc:2c:26:01:65:0a:
84:27:45:1e:34:6f:d0:d0:5a:e9:12:e5:e5:a8:45:
f5:f9:d0:ad:3a:31:d8:97:91:d3:74:ca:eb:03:2b:
99:f3:a2:9c:0b:a2:d9:22:ea:bd:c7:d0:aa:a7:08:
e5:50:9c:91:8e:d4:1b:8e:88:00:5f:ab:6c:17:e5:
08:3d:95:86:67:41:93:b5:86:bb:a8:da:57:f2:38:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:97:B8:52:22:93:BD:4A:4B:AB:63:FB:27:25:7F:27:00:3C:4D
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:47:7c:af:b5:4c:47:1f:9e:ec:55:b3:1b:5d:39:9c:fe:6d:
11:ad:55:09:82:f1:ff:b9:0b:b8:0f:0e:e0:e3:e8:e3:97:e7:
15:d6:2d:b2:f9:73:9f:ac:3d:23:de:50:e0:73:64:a7:86:74:
da:bc:96:52:d6:9d:ad:61:be:de:41:ef:4a:f4:49:b3:5a:7e:
98:c8:00:fe:b0:48:df:7e:ac:90:f4:ac:2a:9b:f1:86:b3:df:
6c:d3:ea:c0:e4:42:5d:b9:4c:d8:b2:34:a4:95:a6:95:bf:f8:
ea:f9:bb:91:81:c2:e0:3d:64:5e:c4:2d:ad:c2:83:39:1b:15:
68:bb:a0:c3:5a:3a:47:a6:2e:35:6e:d4:f8:fd:70:83:26:a2:
9a:da:b7:e1:a3:89:7f:fb:2b:5b:19:5a:b5:3d:4f:0b:1a:cf:
90:70:15:55:ac:c0:bb:8c:c2:68:3e:6f:a7:c4:dc:43:38:f7:
00:2d:56:0c:64:b7:b7:eb:65:1c:d4:ca:44:6f:ce:d8:c9:0e:
4f:c8:9d:37:eb:8d:43:fb:d8:1a:9a:f7:82:92:e0:e3:d5:e6:
8f:fb:c3:0f:1c:b1:4f:b9:7f:40:62:92:19:76:96:d8:dd:c7:
c8:3b:d1:70:da:65:20:d9:94:df:ce:e5:81:18:0c:0c:60:fc:
6d:1a:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:57 2026 by rpki-client