Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: II3IqjlqbhPFTc4dr3VMo3Ls6GVDwCOB4eIPTQQAMcs=
Subject key identifier: 26:98:33:EC:4D:2F:BE:78:33:3F:63:2C:96:1E:4B:54:D8:4D:1D:E8
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 019D29CDC4A63CE2E5AC47940129CC206A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 151A
Signing time: Thu 26 Mar 2026 11:00:44 +0000
Manifest this update: Thu 26 Mar 2026 11:00:44 +0000
Manifest next update: Fri 27 Mar 2026 11:00:44 +0000
Files and hashes: 1: 3JDOgau4GXIlP-8TxtcC06uAWi0.roa (hash: QjML2vUB5G/DnLmOZku9aV5tntgCQSEVJ8kdiDg/M3E=)
2: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: j2J7puYJglYrqpHlS+rur+eqVheu5mGHWRouDWbdjQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c4:a6:3c:e2:e5:ac:47:94:01:29:cc:20:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Mar 26 11:00:44 2026 GMT
Not After : Mar 27 11:00:44 2026 GMT
Subject: CN=269833ec4d2fbe78333f632c961e4b54d84d1de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:e3:a0:0d:a2:8e:75:19:01:03:34:70:12:
ae:b9:42:38:2b:f5:e8:6e:53:47:eb:92:38:63:72:
da:b2:d7:4b:a2:cb:9e:42:e7:cc:64:e3:ae:26:ad:
9f:00:7d:f4:49:dd:8a:1e:a0:37:d1:22:2d:2c:0e:
ef:14:14:0a:dd:a0:50:18:72:12:0a:63:c8:87:1b:
47:1d:dc:c3:8a:cc:c5:c7:e9:1d:a7:34:cb:46:fc:
b2:f3:88:a4:13:1b:b0:e9:d9:bd:c0:f1:d2:cb:93:
67:f1:25:02:53:81:9b:76:d9:91:77:c8:1e:a9:41:
47:f6:ac:dd:f7:5c:04:1b:43:98:92:fa:fe:2d:d1:
6d:78:6d:41:e2:5f:de:04:92:07:a6:49:1e:82:47:
b6:f4:9f:25:db:58:c7:cb:68:50:26:a8:8a:f5:3e:
b6:52:4f:2c:2c:34:2b:c8:2f:cc:5c:4f:13:d2:b3:
cd:80:49:18:e1:3e:75:12:88:8a:cf:60:6e:d7:6c:
e8:c5:14:a1:75:b5:df:91:92:f7:30:20:16:2d:78:
a3:22:a4:fb:9f:d4:99:88:aa:c9:38:16:6e:d2:84:
43:7d:50:91:2b:40:9c:a7:f2:b3:82:d7:1b:b6:05:
db:01:ad:15:7a:81:1a:02:f4:0c:ee:0b:99:93:e8:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:33:EC:4D:2F:BE:78:33:3F:63:2C:96:1E:4B:54:D8:4D:1D:E8
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c6:e8:f1:4a:a0:45:35:80:12:07:4f:aa:fa:99:b1:2a:37:
c0:ba:09:23:8e:9f:c4:9c:f2:83:55:b3:38:ac:f0:92:05:31:
e1:65:00:0e:6b:4f:a8:da:da:5d:6d:ee:49:31:b9:f4:83:46:
a3:fe:6b:7f:66:ae:98:0a:71:8c:df:e5:2f:f9:ea:dd:29:6c:
49:7a:eb:42:f3:90:19:cd:10:6a:2c:c9:ed:ff:c8:5d:aa:da:
4b:06:4e:bc:b3:22:fb:cf:56:d3:6b:d6:8d:4b:fc:e2:f6:69:
b8:6c:27:92:7a:69:cf:2f:fd:1b:79:3e:05:61:1a:79:8d:64:
28:2c:ef:49:03:b4:aa:c1:cd:c8:41:c7:22:f6:d9:62:f1:53:
2a:dc:9d:27:55:a2:b9:e7:60:e5:d3:0c:bd:cb:94:aa:c7:bd:
0a:19:c8:a2:d8:52:24:b4:f1:4c:c1:3f:c0:4f:e3:0b:eb:d4:
d5:12:86:5a:87:ca:b0:f0:6b:83:90:46:22:ad:2c:9a:5e:9f:
82:b4:1b:8c:0a:ff:2d:52:d7:40:4a:19:fd:e8:c2:2d:af:3b:
3f:d1:ac:3e:b7:37:02:ca:e5:c9:97:a6:a6:d0:58:72:9c:7b:
7f:b8:9c:e3:9e:5f:92:0d:81:80:04:6c:b3:74:cc:f4:0e:fd:
ad:0e:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:33 2026 by rpki-client