Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: sfQUqyShq6HxDpam2O9uFhaeee6Dt1Sml1QzjJUDyTc=
Subject key identifier: B4:71:EB:65:C3:CB:29:AC:DE:E3:2B:63:8F:62:67:2F:AA:9F:68:86
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 019D2AE01D6354EAE5FBCB25A11A57FD933A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0CAE
Signing time: Thu 26 Mar 2026 16:00:23 +0000
Manifest this update: Thu 26 Mar 2026 16:00:23 +0000
Manifest next update: Fri 27 Mar 2026 16:00:23 +0000
Files and hashes: 1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: MmLWQsrozslPdHpq/Yyy9eRDwCU/KjaJ0u6sG0oHnAE=)
2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=)
3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:1d:63:54:ea:e5:fb:cb:25:a1:1a:57:fd:93:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Mar 26 16:00:23 2026 GMT
Not After : Mar 27 16:00:23 2026 GMT
Subject: CN=b471eb65c3cb29acdee32b638f62672faa9f6886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:d2:9c:ac:dc:52:e9:40:a2:e9:22:38:20:
6c:b3:c7:3c:0f:83:79:1e:b4:d7:6b:2c:e5:cf:e7:
4c:87:21:c1:47:f4:b5:20:94:df:ce:01:41:d8:18:
fb:b1:51:06:d1:83:f2:fb:82:72:ba:b2:2b:ba:74:
1f:32:92:ec:46:b9:0b:59:17:26:a6:7b:1b:18:23:
c5:64:b4:f4:2f:44:87:0d:8a:c0:a1:b0:98:98:7f:
87:e9:de:75:f3:c2:b9:22:55:ae:ec:9e:8a:55:64:
2d:55:52:72:86:22:c2:61:46:cf:85:58:56:97:f6:
c4:42:6b:0d:d0:c3:4d:a4:4b:df:ed:cd:74:15:d8:
8d:a1:2f:dd:6b:ef:8c:42:41:7a:f5:a0:4b:79:43:
00:8d:d9:a5:b5:77:9b:0f:80:46:e5:97:b6:a7:b2:
1c:7c:53:0c:c5:22:19:0b:2d:7d:44:12:66:8e:d2:
92:be:be:ce:12:b1:64:18:7c:86:98:36:fb:69:84:
cd:2d:f6:c1:1f:bf:90:b2:00:9c:1e:d0:1b:72:d9:
73:f9:81:a7:52:59:4e:0f:14:02:8d:18:e2:f1:c4:
0a:57:b0:28:ec:3d:a7:d5:82:c7:29:5f:17:cf:70:
9c:0a:b2:71:16:be:d7:e7:3b:aa:50:a4:2a:a5:91:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:EB:65:C3:CB:29:AC:DE:E3:2B:63:8F:62:67:2F:AA:9F:68:86
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a3:72:12:bf:80:ee:7c:88:ae:68:92:16:18:10:74:4d:87:
1f:77:9f:fe:4c:a9:27:ee:ff:26:5b:bf:8b:3b:94:b0:49:fb:
26:f8:43:27:77:0e:42:a8:d4:36:f4:b3:12:90:0b:27:60:8b:
09:0c:d0:07:99:2c:5f:3c:f3:48:eb:5e:81:8b:b1:87:be:7a:
1c:ce:a8:46:ba:e0:de:ca:89:aa:7d:bf:53:49:fd:75:79:3f:
ea:5c:1c:e5:99:51:e4:e2:c9:ea:ea:05:7e:fd:ed:ab:21:41:
58:7c:95:71:ea:56:07:6a:f5:27:6c:c6:f4:1a:fc:81:13:b4:
c8:61:b0:58:f3:af:12:6b:7e:a2:bb:9f:23:3e:07:ac:cb:58:
1a:3b:ac:b0:8f:eb:53:56:d4:20:ab:c1:27:8d:9b:87:56:e1:
f9:d3:a3:02:10:2f:bf:73:e6:2b:96:45:58:09:92:b1:b4:bb:
a7:1c:6e:f8:66:fb:48:d1:27:19:41:c6:7e:08:12:e9:22:d3:
18:e9:f0:fa:b7:11:a5:d6:ef:b0:51:7a:21:2b:fa:6d:85:a7:
e7:ef:66:34:a9:d0:d5:a1:ce:c7:d1:d4:80:27:b0:3d:6a:a9:
9e:ab:35:a5:1a:8e:25:6a:df:45:28:7b:9c:a5:69:9b:57:c1:
be:5d:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:34 2026 by rpki-client