Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: MLUF65G2zhnAufm+dKLZ1NVtp7d5+ye9EGC3H7lJm2o=
Subject key identifier: FA:08:CA:75:23:1D:E6:5F:62:6A:C2:0F:54:BB:9B:BD:30:B9:49:2B
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 019D25F0FFA9CC78E04C055F18EC8EA06D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: KIyWw7d9md4/WXR7QWBz5UqIc6Itsg1NMKugJt71Pko=)
2: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (hash: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk=)
3: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (hash: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw=)
4: kPXOPfjYRrsOHKmt2uydskWrmx8.asa (hash: LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ff:a9:cc:78:e0:4c:05:5f:18:ec:8e:a0:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=fa08ca75231de65f626ac20f54bb9bbd30b9492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1d:a0:d4:87:79:6b:8f:90:24:f4:b2:69:e2:
2b:0c:be:54:45:4c:ac:c4:0c:17:3e:78:e7:31:93:
76:d6:12:62:66:60:75:ae:07:52:ed:6c:60:2d:dd:
97:be:64:02:0f:50:ec:98:eb:3a:e2:6e:bf:ec:6b:
72:04:68:5f:53:98:19:b3:1c:5f:3a:c8:ff:39:c5:
20:05:25:93:0e:08:a5:5d:97:30:6b:26:8c:71:c4:
a4:21:49:8d:ed:ab:cf:4a:ce:49:80:d3:bf:ad:44:
ab:89:a2:0f:e1:04:2d:ac:c2:9c:e2:73:cb:54:d0:
fb:53:a1:b6:8e:61:49:ea:cf:0d:c3:7e:f0:b3:e2:
9c:d2:14:2c:1b:3b:5f:22:41:90:db:69:91:e6:c4:
06:41:8a:c5:c0:37:b9:94:62:54:b4:00:3b:46:42:
65:ff:f3:7b:f2:41:7b:e0:5f:e6:10:8a:64:75:64:
f0:3c:51:85:c3:b5:29:ee:4c:a5:0f:f8:3d:4d:f6:
76:22:72:f6:ba:cc:f0:a1:25:5e:7d:5e:53:69:9d:
e5:37:27:6f:19:0d:bf:df:47:6f:1c:ef:af:22:2b:
2e:a1:25:b8:d0:3a:02:50:56:32:95:a1:d1:d6:2f:
fa:99:d3:92:c6:3a:58:d2:cb:7b:01:07:4b:81:cd:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:CA:75:23:1D:E6:5F:62:6A:C2:0F:54:BB:9B:BD:30:B9:49:2B
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:55:ec:41:07:07:71:6d:2a:ac:94:cd:7d:88:53:63:c2:
3a:70:32:3f:1a:63:95:fd:14:1f:ae:4c:89:8c:f3:a1:8d:e5:
fa:6a:f9:82:65:81:b0:9b:8c:b1:8b:70:6e:29:53:a6:be:fb:
c4:39:24:7a:63:35:51:f0:34:9e:11:cc:ee:a3:57:f5:32:28:
1f:0d:91:d7:ac:ce:79:43:46:76:15:d4:63:38:38:ab:1f:61:
bd:c7:29:45:c4:7d:0a:6a:98:02:7a:fc:7e:1c:5c:11:d9:77:
04:d9:8a:32:a9:6f:97:0c:e4:98:fa:6d:8a:13:3b:8b:0d:ae:
78:24:06:f2:d0:ab:80:60:b0:a4:1b:71:45:52:dc:39:f1:e1:
2e:fc:6f:ee:f7:14:25:7a:eb:ab:f6:ae:27:7f:28:74:69:07:
55:ca:fe:bf:db:2a:fd:e5:24:cb:1d:84:ad:81:a4:0a:76:40:
2b:0e:f0:f4:eb:37:a2:de:3e:1a:d4:f7:ca:c1:2b:a0:8b:13:
2e:48:59:f4:9e:2f:fb:4f:a9:fb:bd:4c:25:cf:df:2b:cf:9e:
89:52:72:c0:86:e8:ef:00:f1:14:48:31:e4:c1:a7:5e:09:e8:
a0:34:ea:eb:62:73:a7:46:d3:e6:3f:f0:19:ea:95:2e:d6:3f:
3b:47:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:23 2026 by rpki-client