Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: zmYfAKfqQ8TcXMAJGw/5PkoZIVzcHU7qOJ2UsDxuotU=
Subject key identifier: BF:C4:5B:9C:8C:D7:73:72:67:B0:A9:5F:41:7C:B2:20:6F:50:E1:E3
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019D2816EAB2264BBA4334A9DDE80E3684CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0861
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: VjHIWN3P8Udn2cwcHSP0wlfqcf1wQUAPkdIv4D79uzg=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ea:b2:26:4b:ba:43:34:a9:dd:e8:0e:36:84:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=bfc45b9c8cd7737267b0a95f417cb2206f50e1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:48:a0:b2:b1:b3:a0:d1:bf:10:68:fc:87:
e4:23:01:f0:a5:64:07:da:70:56:18:f3:0c:5e:22:
8f:8d:bd:19:34:bd:72:c2:4f:39:a2:1c:86:4b:20:
9c:90:5e:2c:b3:ea:6d:8e:a5:b5:24:c2:f1:51:e5:
b1:dc:2c:03:bb:cb:12:f4:98:28:a6:f0:5d:de:59:
a4:5b:26:9c:04:3e:d5:78:d9:fb:67:aa:90:6d:27:
b1:ac:e2:73:68:3c:cf:73:ac:11:18:c1:e9:58:ad:
d8:f3:fd:52:b8:34:cb:7f:38:c6:7c:8d:e1:0c:16:
ed:a5:0f:38:62:3c:f1:da:50:97:32:b4:02:78:d1:
bf:a7:a0:1e:85:b7:e8:d5:72:fc:2c:3f:88:31:94:
c9:e4:b7:d1:24:1a:1f:92:38:85:38:73:61:76:fe:
bc:41:b0:09:c1:23:b1:d3:41:62:57:77:d0:db:0d:
ba:33:ac:c0:3c:42:17:02:91:e9:51:28:88:be:f8:
ae:f0:aa:17:a6:86:78:a0:93:00:56:ef:db:d0:16:
04:05:ca:fd:f8:ae:80:cd:39:ad:21:cc:e5:b8:4a:
82:ba:05:9f:b9:87:bd:76:2b:a7:15:2c:1a:de:b1:
a0:2b:88:96:fc:25:ce:87:ec:76:c7:2d:8c:bc:fd:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C4:5B:9C:8C:D7:73:72:67:B0:A9:5F:41:7C:B2:20:6F:50:E1:E3
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:43:10:28:fc:99:93:b5:d6:30:5c:04:9c:72:9b:ce:8a:f5:
98:05:4e:66:7c:12:ec:d5:c4:6a:6e:10:ad:bb:44:76:bd:86:
d9:43:50:e0:39:0a:fa:5d:f2:9e:62:5e:d1:ed:47:cf:e3:68:
1a:7d:5c:c5:1d:4a:ca:bd:b8:68:6c:31:31:3e:c7:f1:c6:1d:
26:ec:f0:f0:0b:d0:0a:63:f9:c6:77:ba:47:14:76:a3:61:fa:
67:a8:cc:c3:a4:d5:21:73:65:3a:f7:98:65:a0:f1:63:5b:e0:
3b:7b:fa:12:96:e0:a6:9d:b8:d1:3b:72:0b:d1:c2:6e:e5:e2:
6e:92:ee:4c:e9:cf:a1:c4:38:f9:fe:12:2e:6b:8b:e3:31:1d:
11:01:bf:40:cc:82:d1:88:08:e7:93:1a:8a:b1:e9:b2:56:2d:
90:5f:19:cd:aa:10:b3:2b:31:67:77:05:f7:46:7a:ca:71:69:
cd:98:5f:48:2d:e5:4b:a1:3f:be:e8:96:bd:67:b7:43:78:c5:
e2:80:29:d6:5b:69:85:81:77:a1:b5:48:85:11:2d:48:c9:02:
54:50:39:e0:d2:c5:2e:9b:26:26:6c:53:01:82:78:81:5f:c8:
9b:78:67:b5:30:7a:2c:3c:5c:95:0a:ef:c7:51:74:91:07:1f:
b5:7e:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:40 2026 by rpki-client