Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: AbSxxdKMxG3OLdOcjelFsS+iVXP6UbGZZLe2g8ujQjM=
Subject key identifier: BE:73:4B:30:53:C1:BB:01:A2:99:C9:26:4C:19:33:0F:FE:27:9A:2D
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019D37C03A2C8CABE1F719E3522B4B365E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0F70
Signing time: Sun 29 Mar 2026 04:00:37 +0000
Manifest this update: Sun 29 Mar 2026 04:00:37 +0000
Manifest next update: Mon 30 Mar 2026 04:00:37 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: 9/J7eLz7QDV9uFJWT2MGn/8ANEQGmr8CZm1cYn6aRjg=)
2: qnNx4BbcqCKw4qU9ggM-AvK2t-g.roa (hash: IB/xWqsQwwimaAQrVy3VNbAYORDCQE0bYCHpAZf/Bpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3a:2c:8c:ab:e1:f7:19:e3:52:2b:4b:36:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Mar 29 04:00:37 2026 GMT
Not After : Mar 30 04:00:37 2026 GMT
Subject: CN=be734b3053c1bb01a299c9264c19330ffe279a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:17:e4:59:c0:d8:94:5b:47:da:cc:6a:b1:
80:ac:7d:d4:cd:13:26:6e:cd:47:cd:75:b2:2e:9e:
d3:91:82:9f:4e:48:ba:50:29:c3:9e:17:81:22:c5:
6e:03:ed:6d:18:b2:30:e1:54:b1:09:c5:64:1d:b8:
58:0d:4c:c1:d3:40:06:aa:25:89:17:0f:2c:aa:e2:
7b:d1:35:fd:c6:60:5a:36:93:3d:a0:53:37:e1:37:
2c:39:ef:bf:27:fc:09:2c:09:43:de:38:f3:27:77:
91:6a:8a:c0:5f:0e:cd:01:f1:38:25:a0:c4:f3:29:
e9:fc:b6:c3:60:f4:1e:2e:0f:18:f4:30:ee:cc:9d:
d6:f3:44:bb:5d:dd:0b:6c:b2:50:a1:1a:e0:45:29:
2a:3b:2b:a0:fb:4c:78:f7:e9:34:61:34:ec:99:7d:
35:1c:69:c3:4d:d0:9a:ae:e5:cb:c9:5e:0d:56:04:
c4:2c:c8:c4:7d:e5:57:e3:18:8a:fb:43:31:a7:a0:
90:da:3a:9f:e5:af:23:08:1a:ad:c5:a9:f1:09:12:
4b:f5:94:d9:f1:57:f5:37:91:7f:3a:10:cd:46:77:
5e:4c:c1:6c:42:c8:d5:05:dd:37:e4:6e:5a:12:02:
01:ad:a9:e4:f6:f3:9a:68:97:2a:fe:2d:d8:39:01:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:4B:30:53:C1:BB:01:A2:99:C9:26:4C:19:33:0F:FE:27:9A:2D
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8e:94:bb:00:7f:f7:62:d0:4b:4f:87:c4:0e:c3:d2:d8:ba:
c7:82:f5:a2:ec:1c:dd:fd:c0:10:16:84:a8:09:7a:3a:eb:d1:
6a:35:74:5e:b1:b6:f4:60:72:10:51:ab:00:39:77:ec:af:51:
4b:75:6f:9d:40:d4:91:a5:b2:a0:70:91:ee:f2:1d:d9:9e:76:
b8:39:f7:51:ca:6b:e9:d4:0c:b8:a6:4c:2f:82:78:02:a3:56:
29:97:42:6f:4e:34:83:c6:5c:9c:4f:3e:7a:90:e1:87:3e:f8:
ce:37:0c:0f:6a:a6:05:0a:99:e2:18:50:d6:53:4e:87:6f:de:
46:3b:5e:94:de:13:04:de:11:5e:ab:01:af:80:52:82:7b:b5:
26:f2:ae:17:73:eb:d7:51:b6:73:48:b4:54:33:8b:14:1f:ec:
cd:26:1c:78:5e:77:41:46:d9:1a:c7:7b:e8:3e:3c:19:3e:3f:
8b:98:19:f6:d2:e2:52:0e:20:35:e3:87:13:11:fb:1d:08:bd:
5f:7b:14:c1:04:d6:23:6a:39:30:e2:1f:71:14:6a:9e:11:4d:
fc:18:86:9c:ff:05:be:d5:75:7f:e6:89:ca:55:af:a1:32:17:
98:b7:97:a2:b0:2d:40:7c:b3:e1:4e:56:f9:8e:1e:1d:a9:5f:
98:1b:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:01 2026 by rpki-client