Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: E8Esv8tHGfwB0Demz+bJF8EVIyK2OPHlL+t6fPj1TcQ=
Subject key identifier: 3D:EB:D2:A8:D7:53:DC:CC:CD:03:A5:86:E9:0E:10:D1:C9:BC:8F:7D
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019D3A53EABC8D4DAC5BE23ADE88408CAD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 1409
Signing time: Sun 29 Mar 2026 16:01:11 +0000
Manifest this update: Sun 29 Mar 2026 16:01:11 +0000
Manifest next update: Mon 30 Mar 2026 16:01:11 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: aJ20d3W5EVVYFJuM9aYhPxBUHa2SV/fHS9iw7pnlq9Y=)
2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:ea:bc:8d:4d:ac:5b:e2:3a:de:88:40:8c:ad:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Mar 29 16:01:11 2026 GMT
Not After : Mar 30 16:01:11 2026 GMT
Subject: CN=3debd2a8d753dccccd03a586e90e10d1c9bc8f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:6c:74:58:65:5f:c6:8d:51:ef:14:d9:3e:
38:fa:5b:5f:cf:46:b1:2e:68:d5:cb:d1:7e:d8:50:
08:64:41:3d:e2:ce:64:5c:a8:78:da:16:df:d2:53:
0e:f5:df:80:e2:6f:4e:ad:ae:12:f9:29:b9:13:d2:
c3:f7:c0:bf:6d:26:0f:93:8f:44:20:1b:fc:52:fd:
d2:1c:4a:58:9f:08:d1:09:a6:ae:63:41:c8:87:85:
be:4c:0b:59:db:67:96:87:79:c2:84:5f:9d:08:24:
98:2c:78:13:96:9c:b4:aa:22:6d:0d:5f:1e:e8:17:
3e:d4:9a:43:d9:a3:50:27:d2:8b:7a:74:0d:e8:f5:
ad:d1:87:b6:38:2f:80:14:79:de:59:bb:44:b9:d6:
fe:4e:af:a2:04:33:94:31:94:10:ff:e6:78:3b:03:
35:d6:47:e7:02:41:3e:ac:42:9f:2e:c6:49:8b:8c:
bb:5d:ff:46:e1:cf:e0:38:4f:65:48:fc:11:52:0a:
84:2f:88:29:10:ad:a3:ba:eb:4b:ff:a8:76:1b:68:
c2:91:f7:ba:cb:04:1d:74:14:e4:72:b0:31:90:4f:
19:c7:43:c4:af:65:a6:5e:c5:5f:a8:fe:1b:b1:ee:
3e:ea:e7:50:05:fd:90:b6:27:d7:f5:e4:17:0e:a9:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EB:D2:A8:D7:53:DC:CC:CD:03:A5:86:E9:0E:10:D1:C9:BC:8F:7D
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:27:5f:85:6b:3f:83:09:53:cc:ca:1f:77:88:88:9a:2b:
80:fc:c4:21:29:b2:dd:61:1e:94:0d:a2:c3:94:2b:26:86:ac:
2c:1b:b4:46:94:f8:c6:8f:d7:42:0e:37:12:b6:fd:3d:00:ca:
ac:cb:2e:61:b8:02:fe:64:d8:9c:93:fd:8b:55:0b:8c:db:2e:
1f:f3:9a:1a:c8:59:c8:f2:da:64:c3:6c:62:01:ce:ea:df:ed:
7b:4f:6e:e5:cc:ec:5a:36:49:c5:54:9e:36:9b:18:b0:92:2b:
04:36:d0:92:6a:e3:9a:6a:f5:74:0b:9b:e0:75:1d:eb:09:e4:
51:e3:2f:13:dc:b8:6a:6f:6c:4f:15:a9:1c:e7:d8:5b:1f:7a:
93:cc:fe:16:9b:a6:27:7b:e3:20:9e:8f:84:be:2c:1a:1b:b8:
75:59:e5:bd:90:d7:bc:10:fe:be:1c:c6:8c:16:1d:ff:de:fb:
7f:1d:c6:63:52:01:a8:1b:3b:81:c3:ba:c9:e6:bc:ae:44:0d:
4e:9f:cb:33:c6:af:51:c0:62:a3:d2:d4:e3:e7:81:9a:38:ef:
61:08:f3:03:71:d7:f4:40:aa:21:27:4f:c9:f0:19:85:46:17:
92:14:0d:79:18:f4:00:bb:dc:aa:65:03:26:1b:b7:36:d2:d1:
02:c2:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:44 2026 by rpki-client