Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: HD9LpXdiySBEJBQPtteZkyGjpSO+mYtPPem7Z2O8ypw=
Subject key identifier: 80:13:2E:F3:26:0E:93:BC:B0:E7:E8:B8:B4:04:88:89:DF:98:58:0A
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 019D26CCFE79782A8D9755A42D170E664877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: gNLZ1rhs3xwX6Eyde0E4bmUR6sI6q654DZWAmgHwUaM=)
2: a_96dgHPGfskp46QxVwlyW43OHQ.roa (hash: 40fkJSYqeLo91DkP9jgqjhXreqdS7UdtXQdlx4C0e90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fe:79:78:2a:8d:97:55:a4:2d:17:0e:66:48:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=80132ef3260e93bcb0e7e8b8b4048889df98580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:df:4f:fb:00:ac:11:6f:f5:c6:e5:9d:d2:00:
2f:f1:e0:8f:df:e9:3f:53:7a:f6:de:9c:e4:d0:bb:
0d:f0:02:0f:f2:bf:85:d7:97:af:b7:ad:82:4a:96:
a8:b8:ea:dd:7a:d7:42:c5:22:d9:c8:80:78:f7:02:
e1:a5:d6:97:2b:9f:d8:36:2d:07:ec:88:ec:9e:7f:
73:65:4b:b6:a9:06:da:71:44:50:91:db:57:23:fc:
4e:bd:9c:35:25:00:13:09:3d:a3:d3:18:3d:2d:7d:
64:9d:a1:89:89:62:cd:b4:33:a4:ad:ee:f8:d8:a4:
73:20:ff:ef:9c:65:7b:14:83:b1:26:bc:45:f3:8f:
79:c8:a5:fd:6f:11:e9:37:80:50:60:fb:f4:16:37:
ad:ca:c1:88:63:95:bf:aa:4a:b1:cd:91:fb:f2:93:
0c:c3:95:d1:99:3e:67:ee:e7:3d:12:ed:1e:66:be:
0e:3d:e8:16:26:60:f5:d5:bc:b7:be:5a:32:cd:87:
38:86:e7:a2:cc:32:3c:1d:ad:b4:07:68:ce:26:15:
b0:68:1d:5f:2f:6b:27:75:e7:5e:dd:4a:5e:a1:a2:
fd:fd:19:c7:a3:a5:d1:be:50:f9:42:e1:6e:40:e2:
e3:49:69:bc:86:89:0c:ea:3a:b3:d4:f2:51:dd:87:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:13:2E:F3:26:0E:93:BC:B0:E7:E8:B8:B4:04:88:89:DF:98:58:0A
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:74:6a:6a:f4:02:d8:6c:f8:df:4d:bc:88:44:10:5f:98:b7:
4b:92:38:d0:d8:34:60:58:e1:aa:af:37:c5:36:49:aa:40:89:
a0:34:d5:c8:e0:57:db:63:0f:8d:ec:92:9d:e8:d1:7c:d4:8a:
8b:e0:66:9f:75:86:ab:b6:14:85:94:c2:8f:fe:53:aa:b1:2b:
86:a8:f6:b9:91:d1:ae:03:6e:8e:96:c5:02:39:a6:09:8a:c7:
7d:46:9c:3a:fb:70:c0:d7:c8:f5:7f:d6:b8:0c:7d:ff:8f:87:
92:97:f7:91:78:ba:34:8c:b7:ff:48:ea:f8:1b:f9:23:34:0e:
19:a2:7b:9c:5f:b7:13:3a:d7:8d:d8:b9:5a:37:15:d4:9d:92:
b1:cf:d7:4b:65:f2:e2:10:10:b9:6e:3f:a6:43:d1:0d:5f:ad:
de:aa:20:80:30:df:1f:71:d6:43:fc:87:e1:55:2b:2b:35:6b:
b2:16:2f:8b:ae:cd:e6:86:60:eb:cb:01:5e:14:3e:c4:0c:98:
f5:8e:8b:f1:05:06:1a:7a:be:f4:c5:3b:0c:51:e7:05:3b:c7:
f3:67:43:90:26:df:18:f6:06:e5:94:09:8f:e0:f6:fa:6f:9b:
34:5e:be:24:b0:db:98:ce:1f:53:03:27:26:41:70:61:3f:ee:
8e:8f:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:02 2026 by rpki-client