Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: Xd7dKrGVEtH56aJKde+3NxzOuVnA/qd2LQYeXq/7wWE=
Subject key identifier: 3A:F4:95:48:C2:15:DB:08:33:24:FF:75:8F:8A:F6:5B:A5:78:3D:3E
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01A0EF9E115D60788283F1EE079B65A9C75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0A56
Signing time: Wed 30 Sep 2026 00:01:48 +0000
Manifest this update: Wed 30 Sep 2026 00:01:48 +0000
Manifest next update: Thu 01 Oct 2026 00:01:48 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Hrf7U3ZTGjA9N5IU2c8Nvz/RjLRXnFETYSU8CVxCLkU=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9e:11:5d:60:78:82:83:f1:ee:07:9b:65:a9:c7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Sep 30 00:01:48 2026 GMT
Not After : Oct 1 00:01:48 2026 GMT
Subject: CN=3af49548c215db083324ff758f8af65ba5783d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:f1:ea:75:06:e1:ba:ef:02:e0:b4:4d:d3:
d8:24:52:01:48:41:58:81:a5:28:d3:32:10:89:a0:
8d:e6:98:b2:f3:13:9f:3e:67:77:4a:6e:0b:e9:3f:
87:c9:00:32:51:1e:a2:a6:e0:ae:0e:45:07:59:d5:
d4:31:57:3a:70:68:33:67:15:d6:64:36:14:06:c8:
29:be:3d:58:b5:1a:15:4c:58:ff:4f:6e:b0:48:ff:
13:2e:fb:d4:f7:1f:bd:6a:d8:11:fb:96:58:ad:03:
50:65:d6:b0:88:a4:e3:41:69:d7:dc:25:98:68:8d:
8f:41:00:53:64:8f:b4:5a:29:14:3e:b4:2d:4c:6c:
d6:1c:9c:db:15:bb:9b:e8:d8:15:30:34:cb:11:08:
e5:17:76:2d:60:96:4a:b7:26:40:9d:78:f5:fe:7b:
9f:42:cf:3c:45:1e:20:0c:81:73:04:5b:66:67:0b:
b2:e6:16:6b:70:e3:d1:92:05:c7:de:28:79:cc:b1:
b6:68:d7:43:d1:b3:3b:b1:14:73:14:c4:f4:fd:df:
2e:11:44:10:c4:45:a2:2e:e4:00:4b:98:0e:f1:13:
ea:db:87:c1:89:00:6e:bc:c3:d5:01:61:f3:82:91:
9e:43:ce:b2:4a:9a:70:4c:a2:dc:f4:00:a9:71:39:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:95:48:C2:15:DB:08:33:24:FF:75:8F:8A:F6:5B:A5:78:3D:3E
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:46:4f:3e:bd:ca:28:f6:88:60:af:f7:eb:36:f9:82:27:a8:
84:fe:ed:ed:4c:6c:1e:ab:e2:f5:c3:67:50:1f:49:ee:c5:2f:
62:9e:50:cb:26:9f:7d:ab:96:8f:cb:8d:02:39:21:71:f0:e2:
28:70:83:af:ba:57:b1:fd:6c:49:9e:2c:e7:43:47:04:2b:16:
45:73:76:b2:30:6e:16:a4:a0:7b:1e:e8:a6:27:c6:d6:58:cb:
02:6e:3b:d0:ec:fe:d3:df:cc:29:15:e4:be:9b:85:82:d6:bf:
49:9b:f9:c7:4d:46:68:4f:02:a4:54:29:e1:20:b2:06:90:f1:
75:37:92:ed:79:67:ce:7d:78:45:34:91:e2:9a:d4:44:e8:c3:
ad:b2:1f:7f:81:3c:4c:67:8c:11:f1:86:a6:15:ff:c5:b6:37:
d1:ec:21:bb:7f:4b:74:d3:5c:9b:da:af:96:c9:1b:38:87:1a:
35:6c:4e:bb:59:d6:88:c4:09:b1:36:f7:0e:a2:24:b6:ce:0f:
50:a2:63:68:77:42:c5:82:b4:ad:89:9e:12:33:59:93:9a:1e:
52:a9:4c:91:c5:90:ad:a9:f7:b2:bb:13:10:4d:d1:d7:8e:73:
95:ec:ec:ff:2f:87:bd:0d:89:68:d1:1a:d9:07:48:ea:a2:39:
c0:25:5e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDvnhFdYHiCg/HuB5tlqcdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjYwOTMwMDAwMTQ4WhcNMjYxMDAxMDAwMTQ4WjAzMTEwLwYDVQQD
EygzYWY0OTU0OGMyMTVkYjA4MzMyNGZmNzU4ZjhhZjY1YmE1NzgzZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Tx6nUG4brvAuC0TdPYJFIBSEFY
gaUo0zIQiaCN5piy8xOfPmd3Sm4L6T+HyQAyUR6ipuCuDkUHWdXUMVc6cGgzZxXW
ZDYUBsgpvj1YtRoVTFj/T26wSP8TLvvU9x+9atgR+5ZYrQNQZdawiKTjQWnX3CWY
aI2PQQBTZI+0WikUPrQtTGzWHJzbFbub6NgVMDTLEQjlF3YtYJZKtyZAnXj1/nuf
Qs88RR4gDIFzBFtmZwuy5hZrcOPRkgXH3ih5zLG2aNdD0bM7sRRzFMT0/d8uEUQQ
xEWiLuQAS5gO8RPq24fBiQBuvMPVAWHzgpGeQ86ySppwTKLc9ACpcTmq/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr0lUjCFdsIMyT/dY+K9luleD0+MB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0ZPPr3K
KPaIYK/36zb5gieohP7t7UxsHqvi9cNnUB9J7sUvYp5QyyaffauWj8uNAjkhcfDi
KHCDr7pXsf1sSZ4s50NHBCsWRXN2sjBuFqSgex7opifG1ljLAm470Oz+09/MKRXk
vpuFgta/SZv5x01GaE8CpFQp4SCyBpDxdTeS7Xlnzn14RTSR4prUROjDrbIff4E8
TGeMEfGGphX/xbY30ewhu39LdNNcm9qvlskbOIcaNWxOu1nWiMQJsTb3DqIkts4P
UKJjaHdCxYK0rYmeEjNZk5oeUqlMkcWQran3srsTEE3R145zlezs/y+HvQ2JaNEa
2QdI6qI5wCVepQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 05:57:22 2026 by rpki-client