Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: gcMZ7Lbz1LL4RCXOwM/h9T0h8m6zhLNf9ImX29BeXGk=
Subject key identifier: A3:FA:EA:53:2E:8B:9E:B9:48:7D:F7:39:79:15:66:A1:C2:79:97:30
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 019D27722726E07ECBFE1034AC580991BEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 03FA
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: XsaTJhfj/RtfzZwd4J9Tj9D8Rb53eHfkzebptABuNgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:27:26:e0:7e:cb:fe:10:34:ac:58:09:91:be:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=a3faea532e8b9eb9487df739791566a1c2799730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:47:b3:6f:90:27:3b:5c:99:82:83:38:4f:
9c:9f:98:64:a1:dd:a7:f6:19:b8:4e:23:04:7f:9e:
36:c5:78:76:00:0e:cc:d4:b8:b1:1f:9b:d0:75:58:
cb:e7:9e:b1:7c:94:47:64:03:8e:e0:66:10:97:dd:
85:26:8a:d6:5c:0d:88:cd:74:cb:3b:33:46:04:b2:
49:f0:e7:b7:52:f6:d6:fe:a2:2f:6c:21:e0:c5:94:
a6:2f:96:bf:0b:57:41:ab:4d:14:81:eb:3a:87:3e:
9a:d1:33:bb:57:09:1e:b0:b1:7c:00:8e:83:7e:ed:
3b:34:18:86:1d:48:71:1a:cb:c4:de:a7:04:eb:43:
6b:c3:1c:b1:7e:fc:05:15:b6:06:1e:e8:a5:74:c2:
69:db:4e:d1:71:d7:3c:87:42:19:72:69:cc:65:8e:
0f:ea:f2:5f:43:1b:7c:b6:c1:b6:b5:5f:3e:00:39:
ef:05:0f:4d:75:3c:4a:c5:07:26:fd:28:cf:10:8d:
23:42:66:95:8b:2b:74:86:38:3c:eb:65:9b:4d:4d:
4c:2f:04:84:33:9c:16:79:62:89:77:36:13:3a:04:
02:46:ec:ec:be:94:d2:4d:d4:67:bc:2d:67:dc:fa:
0f:7e:f1:46:7d:e5:c5:c6:a8:6f:c9:60:e3:81:ad:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:EA:53:2E:8B:9E:B9:48:7D:F7:39:79:15:66:A1:C2:79:97:30
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a3:97:8a:d6:a5:c1:32:ba:ad:d5:9a:c7:d5:54:30:30:55:
4b:f8:b8:18:e7:e6:f1:ee:a0:e4:28:31:e6:29:41:0f:9f:56:
25:40:58:24:67:03:59:56:03:29:e6:7e:c4:be:42:92:8c:c0:
d7:21:10:64:f6:3b:9a:c0:12:30:40:f9:95:9d:ad:c9:1b:7f:
7b:de:cd:af:5c:dd:74:c9:81:86:39:29:fa:0b:82:a1:88:0e:
a6:34:c2:49:31:d6:98:73:3a:b5:05:3e:a5:68:1f:8c:b6:9b:
f6:8d:5e:75:01:1d:36:e6:d2:83:9e:7a:2d:2f:93:24:98:3d:
e0:5e:62:d0:c6:22:3f:d3:8c:32:c2:c1:92:2d:97:10:a7:a7:
90:ab:f8:65:03:09:87:38:80:59:47:d1:fa:7a:8a:17:23:08:
58:2a:d0:a4:35:39:71:a9:5d:ed:3c:23:35:4f:80:6c:54:da:
b2:ac:fe:5b:1d:6c:b9:ce:7c:ae:bd:c5:86:a8:7a:b3:0d:b9:
52:80:3b:99:48:05:01:d2:11:7f:6d:43:b5:f9:f6:df:f9:f2:
02:64:66:9d:5e:fd:f7:10:26:e3:d4:37:55:ca:49:79:17:c6:
1e:c0:b7:c9:a2:ee:28:03:69:84:f0:2b:a6:11:7d:5f:a8:72:
0d:6f:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:47 2026 by rpki-client