Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: py13XN0Ot07iVCL3FFkiysSplIcRXXPU04NewxoTBEM=
Subject key identifier: AA:E7:AF:3F:6E:F3:6D:C4:F5:A6:D8:91:0B:A3:F9:8E:16:50:BA:0B
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 019D284D97CDADCED2DDF2D17F910E147305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: A3L1HEkIqsDfmr2xMMswsDHRVrWgnasj0ymaQSbTrxE=)
2: KBLYjGsoc6I_Jnk5DngPmO4ePQU.roa (hash: XFoKkPbZxI2pK2o+bv+Ogt5LDh4mQTF9jwqVRi7HCtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:97:cd:ad:ce:d2:dd:f2:d1:7f:91:0e:14:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=aae7af3f6ef36dc4f5a6d8910ba3f98e1650ba0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:cc:68:83:b0:69:03:56:03:37:65:df:f8:
cc:97:bd:60:17:e0:a1:46:cc:fe:fb:42:df:d9:1a:
cb:87:eb:aa:0d:e2:48:8a:1e:68:5e:5e:94:96:d4:
31:1e:75:bb:64:23:8a:0a:e1:26:40:31:ac:78:b2:
bf:95:1d:1d:fb:34:78:72:f9:53:cb:2c:af:6b:d0:
77:d3:5f:bf:82:c1:f0:c6:92:1f:f1:fd:3f:fa:33:
8d:74:cd:61:ec:53:2c:bb:aa:db:00:9d:57:7d:20:
e4:4f:f7:80:49:9a:10:84:27:cb:ab:44:44:d2:ca:
46:6b:07:4b:50:71:d6:1a:bb:65:4a:27:76:8d:78:
18:83:7e:6c:a4:bb:cd:76:fd:e1:22:5d:eb:ad:65:
94:c5:7a:7b:2a:cf:49:cb:6c:c6:17:87:56:88:77:
aa:55:e2:d3:b7:61:23:83:a9:8c:ee:82:c0:ff:c3:
52:53:73:9c:24:fb:01:c6:b8:d6:38:18:58:fe:05:
a4:51:2b:b3:aa:1b:dc:2d:49:a4:c8:82:66:e4:64:
aa:c2:5b:cc:7d:d9:f2:61:76:cf:4d:88:89:04:9a:
05:f2:d9:40:93:64:e9:ef:8d:07:df:f6:12:72:f5:
0f:a2:74:3d:56:20:df:a9:0e:d8:6d:49:ad:c3:69:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:AF:3F:6E:F3:6D:C4:F5:A6:D8:91:0B:A3:F9:8E:16:50:BA:0B
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:85:83:dd:84:d9:93:6a:f0:ca:7c:3a:a2:ce:ac:81:23:fc:
d7:e2:d8:09:75:e0:66:f9:c5:62:fd:da:19:a6:5a:01:d5:8a:
18:dc:50:db:43:cc:6a:5c:f4:9e:cc:6c:e1:df:a0:5c:07:4f:
74:ef:82:eb:77:bd:0c:ad:ca:55:36:46:af:03:52:7e:25:a4:
7a:62:2c:82:d8:95:d2:e0:8b:08:d5:55:b9:c3:3a:a8:c1:c4:
2d:08:a7:e5:4d:f4:db:ae:d4:ab:ce:d2:bd:cb:22:12:65:9d:
e5:a5:57:d8:92:d8:5c:a1:d5:df:24:aa:06:10:02:c2:cf:1a:
91:22:a4:c2:ba:92:5d:a5:14:a7:ad:e1:e3:20:dd:be:40:68:
6b:29:3b:be:da:02:22:fa:4a:f4:c1:67:e9:56:f6:64:e7:ab:
04:a6:8f:74:34:6f:cb:0a:d2:39:e0:8a:0d:95:65:da:ea:9c:
19:f2:a9:62:dd:c1:b4:95:63:eb:7b:fe:76:47:a9:9e:28:0c:
10:13:cc:38:4f:62:f7:5e:59:d0:4d:8a:cb:57:db:d9:4c:74:
27:d8:7e:6c:89:3e:7d:b7:01:dd:f0:38:e0:73:d4:a6:94:f1:
75:41:2f:67:f9:60:7b:fa:4b:36:ae:2a:76:a4:6e:1c:27:1b:
0d:6f:49:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZfNrc7S3fLRf5EOFHMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2UxYjlmZmIyZTczZDJjOTdmMDg5MzA2M2NhYmIyY2I3
NDY3OTAwHhcNMjYwMzI2MDQwMTA2WhcNMjYwMzI3MDQwMTA2WjAzMTEwLwYDVQQD
EyhhYWU3YWYzZjZlZjM2ZGM0ZjVhNmQ4OTEwYmEzZjk4ZTE2NTBiYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR/MaIOwaQNWAzdl3/jMl71gF+Ch
Rsz++0Lf2RrLh+uqDeJIih5oXl6UltQxHnW7ZCOKCuEmQDGseLK/lR0d+zR4cvlT
yyyva9B301+/gsHwxpIf8f0/+jONdM1h7FMsu6rbAJ1XfSDkT/eASZoQhCfLq0RE
0spGawdLUHHWGrtlSid2jXgYg35spLvNdv3hIl3rrWWUxXp7Ks9Jy2zGF4dWiHeq
VeLTt2Ejg6mM7oLA/8NSU3OcJPsBxrjWOBhY/gWkUSuzqhvcLUmkyIJm5GSqwlvM
fdnyYXbPTYiJBJoF8tlAk2Tp740H3/YScvUPonQ9ViDfqQ7YbUmtw2kjUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrnrz9u823E9abYkQuj+Y4WULoLMB8GA1UdIwQY
MBaAFNDOG5/7LnPSyX8IkwY8q7LLdGeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgt
YjlmYjUzYTJmMDNjLzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lNTEzMjItMDE0MS00ZDE2LTgxNjgtYjlmYjUzYTJmMDNj
LzEvME00Ym5fc3VjOUxKZndpVEJqeXJzc3QwWjVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4WD3YTZ
k2rwynw6os6sgSP81+LYCXXgZvnFYv3aGaZaAdWKGNxQ20PMalz0nsxs4d+gXAdP
dO+C63e9DK3KVTZGrwNSfiWkemIsgtiV0uCLCNVVucM6qMHELQin5U30267Uq87S
vcsiEmWd5aVX2JLYXKHV3ySqBhACws8akSKkwrqSXaUUp63h4yDdvkBoayk7vtoC
IvpK9MFn6Vb2ZOerBKaPdDRvywrSOeCKDZVl2uqcGfKpYt3BtJVj63v+dkepnigM
EBPMOE9i915Z0E2Ky1fb2Ux0J9h+bIk+fbcB3fA44HPUppTxdUEvZ/lge/pLNq4q
dqRuHCcbDW9JdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:22 2026 by rpki-client