Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier: 9wBjKAslwNANL6qVHzT2JOEZw8PYVw3Oj62JXR4JY30=
Subject key identifier: D7:74:1B:90:DD:96:77:54:F7:57:6F:5D:96:C7:AC:1D:2E:23:26:18
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer: /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial: 019D284E49EEFC30829152B07973CF95C9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: lHLhOphph/kl0ypSY+lwhc8ePmJnv52E5imNHagaFW8=)
2: B6oPSrYFOETzVfi_jkgsVldlvlw.roa (hash: FWuUjlvViSPVZ3tuWXOR6u2UkqfS1LDdyg1epfi2EcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:49:ee:fc:30:82:91:52:b0:79:73:cf:95:c9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=d7741b90dd967754f7576f5d96c7ac1d2e232618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:32:71:bd:99:04:14:99:41:c1:93:90:ad:
3c:4c:58:76:f2:00:b9:f4:ed:c8:43:8b:40:b3:e3:
e8:60:0a:21:b7:20:91:69:f3:11:27:1d:44:83:bd:
c1:05:60:1d:92:b5:cb:7b:47:fb:48:28:ee:b9:e5:
d5:a9:94:dd:2b:58:50:99:ca:33:8a:4a:d9:a5:77:
11:9c:88:01:58:39:fa:c0:69:f9:09:ff:c8:ba:9f:
86:0e:db:73:c0:c5:8d:c2:13:02:dc:8f:49:d7:d5:
64:34:ac:de:b1:4c:b0:ff:6f:e2:76:35:70:e1:b3:
9c:04:61:7b:be:18:0f:74:ba:8b:a6:c3:3c:46:4d:
10:26:e2:51:89:26:00:21:4a:fc:da:e6:fd:53:e0:
7b:7e:f9:14:0b:31:85:e9:8c:b1:9b:6b:4f:52:ba:
5a:a9:ab:62:21:cb:33:6e:02:1c:bf:56:c2:e8:f0:
e9:7e:95:f4:01:7c:6f:9b:3f:98:91:16:cc:82:de:
d1:d8:45:3e:fe:f3:6b:dd:87:6d:ae:0b:94:57:77:
12:25:f3:5c:b5:83:ca:d2:81:dd:3e:9f:31:92:64:
a6:1d:db:0c:2f:72:15:90:98:bd:cc:48:92:0d:98:
ca:2e:81:a5:7d:68:42:95:9d:1a:2a:7b:23:32:bc:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:1B:90:DD:96:77:54:F7:57:6F:5D:96:C7:AC:1D:2E:23:26:18
X509v3 Authority Key Identifier:
keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:01:73:9a:74:41:0a:68:2f:62:ce:a6:97:fc:3c:b8:be:09:
e3:5e:f6:92:7d:25:0b:d9:85:a4:82:5b:5a:30:29:05:77:4c:
e5:89:89:bd:72:c7:cb:3b:f2:ca:56:44:c6:d9:e4:d0:47:2c:
54:52:26:5a:d7:ff:48:6f:bd:89:fb:3d:52:11:fc:f7:56:25:
cc:f5:b7:c9:0a:e6:a3:d8:62:67:62:61:d4:66:49:80:c1:af:
05:4d:0c:c1:ae:e6:8b:fd:68:72:58:1f:cb:c3:8f:df:b0:27:
87:5b:96:9f:cd:a1:5d:3d:22:dd:48:ec:9f:b0:e8:d0:2c:07:
c0:61:19:37:56:ce:b5:8e:e9:fc:b9:be:4f:23:80:9b:c8:8f:
a6:6e:b9:ce:d1:33:48:8e:c0:ad:a5:8c:a0:29:5f:fe:1e:5e:
d8:66:2e:df:b1:81:97:45:59:67:bf:8a:60:4a:45:bb:71:72:
66:98:ac:47:17:a9:63:ed:60:cb:dc:0f:25:d8:00:ca:6b:aa:
0d:b8:d0:e0:a2:37:ba:08:e5:d6:29:a2:70:2f:fc:90:eb:04:
7b:95:1e:01:f7:5f:5c:66:ab:99:f4:95:76:79:dd:52:c6:7d:
f1:47:d3:48:08:b7:c3:cd:6d:30:23:dc:44:cf:8d:a4:3a:d4:
f9:37:f0:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTknu/DCCkVKweXPPlcnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTMwYzE0NGY1OTJjZmE4OTFiYWJmMTk1YTgxNzkwMGNk
NmQ5MTYwHhcNMjYwMzI2MDQwMTUyWhcNMjYwMzI3MDQwMTUyWjAzMTEwLwYDVQQD
EyhkNzc0MWI5MGRkOTY3NzU0Zjc1NzZmNWQ5NmM3YWMxZDJlMjMyNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Eycb2ZBBSZQcGTkK08TFh28gC5
9O3IQ4tAs+PoYAohtyCRafMRJx1Eg73BBWAdkrXLe0f7SCjuueXVqZTdK1hQmcoz
ikrZpXcRnIgBWDn6wGn5Cf/Iup+GDttzwMWNwhMC3I9J19VkNKzesUyw/2/idjVw
4bOcBGF7vhgPdLqLpsM8Rk0QJuJRiSYAIUr82ub9U+B7fvkUCzGF6Yyxm2tPUrpa
qatiIcszbgIcv1bC6PDpfpX0AXxvmz+YkRbMgt7R2EU+/vNr3YdtrguUV3cSJfNc
tYPK0oHdPp8xkmSmHdsML3IVkJi9zEiSDZjKLoGlfWhClZ0aKnsjMrxmnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd0G5DdlndU91dvXZbHrB0uIyYYMB8GA1UdIwQY
MBaAFNNTDBRPWSz6iRur8ZWoF5AM1tkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYt
NmJhNzk5NTdlODYyLzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYtNmJhNzk5NTdlODYy
LzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQFzmnRB
CmgvYs6ml/w8uL4J4172kn0lC9mFpIJbWjApBXdM5YmJvXLHyzvyylZExtnk0Ecs
VFImWtf/SG+9ifs9UhH891YlzPW3yQrmo9hiZ2Jh1GZJgMGvBU0Mwa7mi/1oclgf
y8OP37Anh1uWn82hXT0i3Ujsn7Do0CwHwGEZN1bOtY7p/Lm+TyOAm8iPpm65ztEz
SI7AraWMoClf/h5e2GYu37GBl0VZZ7+KYEpFu3FyZpisRxepY+1gy9wPJdgAymuq
DbjQ4KI3ugjl1imicC/8kOsEe5UeAfdfXGarmfSVdnndUsZ98UfTSAi3w81tMCPc
RM+NpDrU+TfwDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:59 2026 by rpki-client