Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: qnqBet0kBKou+Pqc5CLmHScASqsOHv0uBxpcEecXgIU=
Subject key identifier: D0:46:65:5B:65:D9:B2:97:EA:C8:EC:6F:D2:18:57:B1:B9:5F:AF:16
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019F92113699B21648A12C7ED630CBD337DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 09A1
Signing time: Fri 24 Jul 2026 03:00:29 +0000
Manifest this update: Fri 24 Jul 2026 03:00:29 +0000
Manifest next update: Sat 25 Jul 2026 03:00:29 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: hBxv5BuFgENTCpSqOlz6f6k7UZiNCs82Yid90paq/zw=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:36:99:b2:16:48:a1:2c:7e:d6:30:cb:d3:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jul 24 03:00:29 2026 GMT
Not After : Jul 25 03:00:29 2026 GMT
Subject: CN=d046655b65d9b297eac8ec6fd21857b1b95faf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:2f:64:02:cc:6b:33:0c:ae:d0:ef:4e:4a:
1d:3e:b9:b1:3b:1f:f9:82:0b:d9:6a:61:79:71:5e:
9b:c1:33:52:b0:7c:58:ca:15:64:06:0a:83:13:1a:
d6:63:cd:12:0b:e6:5a:2a:b3:12:cc:43:38:d7:52:
54:51:08:ea:6e:1b:12:40:72:c8:fc:a8:40:38:21:
e0:7e:24:e1:b8:e7:33:49:79:33:38:ae:6d:f9:fa:
a0:f5:ae:c6:9f:f3:c2:73:bf:89:45:ee:02:d6:26:
e6:7a:40:8b:38:77:78:db:99:c8:ce:06:f0:e9:04:
ae:e3:45:ba:38:22:8f:74:62:8a:9d:fc:2d:d4:60:
b7:1b:67:7b:07:1f:0d:12:98:54:0d:21:b5:b9:52:
3d:af:86:c1:e2:81:b9:62:93:1b:7d:ae:76:9d:39:
87:0a:06:a3:8f:e4:66:b3:11:e5:f3:0a:aa:ca:5b:
2f:6a:94:c0:fc:c1:9a:08:ee:1b:34:5d:a1:2e:01:
3b:c9:78:05:73:90:ce:41:b9:78:8f:f6:d4:aa:21:
68:b0:16:f4:03:02:43:59:b6:3b:8e:99:8a:e5:7e:
a8:2e:b8:1e:9f:d5:a9:4c:87:80:62:19:44:96:43:
eb:a6:5d:46:d6:b2:39:e1:ca:a3:7e:a1:16:50:8c:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:65:5B:65:D9:B2:97:EA:C8:EC:6F:D2:18:57:B1:B9:5F:AF:16
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b8:f7:91:25:d7:d9:e8:e2:1e:9f:6e:be:ab:0b:b3:89:6b:
d7:df:39:e8:2e:40:20:0c:61:fa:5a:7f:1e:d4:f8:48:dd:47:
ed:61:56:ab:2b:c9:6f:bb:9f:42:3b:a9:49:ec:24:31:41:80:
ec:37:39:22:0d:2c:df:d3:3d:36:53:a7:fa:37:a5:7e:b4:73:
fd:01:a2:0b:50:e9:b3:b3:d1:59:18:22:a9:d3:d2:6d:96:0e:
8f:b6:bd:8c:1e:52:db:a9:5f:fc:36:dd:4a:e9:3e:2d:2c:e4:
15:6d:87:f6:08:b6:4b:57:1f:3c:9f:c7:7f:7b:f2:fa:7e:49:
75:ed:f6:82:64:43:59:ba:26:a3:81:dc:7b:4a:80:29:8a:ee:
9c:d5:73:db:c4:4e:56:3e:5c:7e:ea:e5:cc:29:17:65:35:d2:
b9:2e:bc:46:8e:7d:49:b2:5b:d9:39:62:f7:c8:12:78:7a:6a:
0e:44:37:2d:81:ef:dc:72:49:9c:d4:fa:0b:51:d2:2e:f0:10:
a4:6e:6b:ea:e4:2e:82:42:84:1b:fc:8c:32:d9:65:0e:49:37:
ff:77:bc:8a:d5:04:a4:dd:59:3e:aa:11:eb:2e:ce:b6:d3:23:
10:7d:06:92:0b:91:2f:78:52:58:f5:df:56:2a:04:20:66:40:
d7:7d:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:06 2026 by rpki-client