Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: C8g6565Yzv2bclWId1R9v9dNwT8o/HonxHkD8pvBOSo=
Subject key identifier: 07:7B:8E:1F:83:3B:55:38:16:DC:B2:50:5E:60:19:20:8C:B0:CD:B3
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019D2A72E922474DD31BEE8A37A788AE522D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 1044
Signing time: Thu 26 Mar 2026 14:01:06 +0000
Manifest this update: Thu 26 Mar 2026 14:01:06 +0000
Manifest next update: Fri 27 Mar 2026 14:01:06 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: ggRzEP3zA8HUx78fjGmI19bN05QyTHXjqbSwbiiYo4E=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e9:22:47:4d:d3:1b:ee:8a:37:a7:88:ae:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Mar 26 14:01:06 2026 GMT
Not After : Mar 27 14:01:06 2026 GMT
Subject: CN=077b8e1f833b553816dcb2505e6019208cb0cdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:59:ba:dc:6c:0a:b1:39:9e:21:49:85:2e:
aa:08:85:65:33:0f:00:90:39:cf:15:5b:71:e1:44:
7a:a6:03:46:b9:c5:cf:b2:94:ab:6c:14:3f:75:83:
6f:21:ea:b1:8b:bd:fc:90:05:e2:0c:81:15:4c:9d:
c7:8c:0c:14:ba:37:dc:43:f9:af:22:e9:5c:ad:12:
fa:40:91:04:50:3b:54:da:5c:73:be:76:99:89:3b:
4a:0f:a3:fa:5e:27:7b:f5:a6:4d:55:10:bd:96:5d:
09:59:10:b7:3b:0f:94:fd:57:9c:90:f2:d2:cd:6f:
84:d8:55:db:93:48:4f:a1:3c:3e:6a:c5:52:85:a7:
f0:58:2f:0e:7a:18:8d:db:60:70:34:a1:c3:45:2b:
74:db:2a:22:62:9e:d7:47:cb:b8:44:59:a4:a5:fd:
cc:9b:ce:c1:6a:7a:f9:94:cc:ef:08:75:57:89:4e:
7f:5f:e1:c2:db:90:2d:bc:1a:6b:98:dc:6c:e3:ab:
4d:47:5f:8c:75:a0:45:af:cb:64:98:68:8f:e9:47:
e1:99:43:0e:23:6e:c3:c9:56:03:2e:2b:6a:cd:24:
20:27:4a:6f:0b:f9:08:c4:8a:e5:91:df:4c:1d:32:
54:57:28:91:2c:53:17:eb:96:d4:4c:27:52:95:20:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:8E:1F:83:3B:55:38:16:DC:B2:50:5E:60:19:20:8C:B0:CD:B3
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:99:19:63:a0:38:67:78:f8:9c:c3:c3:02:18:a6:4a:02:f9:
ba:08:72:22:da:04:1b:cd:6d:48:88:ea:c9:38:d4:14:86:f6:
74:a6:cf:58:85:9d:bb:5f:41:1f:be:94:7d:1e:5b:3b:95:56:
36:a7:6d:77:e2:b8:35:0a:ab:e9:c7:df:22:b5:c3:50:db:c9:
04:e9:eb:61:35:45:fd:a1:a5:79:24:88:8c:8a:15:41:61:35:
b9:19:1f:bf:ce:8b:fe:63:f9:3b:fe:2d:47:69:55:8f:b8:18:
db:18:43:d5:e3:cb:f2:d3:fa:95:7d:96:45:40:f9:0e:f4:fb:
1b:12:36:c9:89:b0:06:87:d9:41:55:ac:c5:23:d5:1f:85:58:
d2:bb:34:28:17:f2:74:c5:c0:d2:99:e0:84:b0:d8:de:b4:0f:
c9:7b:27:99:d6:1c:3d:55:21:71:57:a8:22:ff:25:d0:74:13:
33:58:ec:c4:a6:a3:a9:8b:2c:3d:7d:c4:a9:51:45:03:8d:f3:
96:1b:9b:49:0b:a8:0e:08:4b:a7:66:8e:ff:c5:30:39:b7:b0:
23:a7:60:6c:f4:32:49:16:01:2f:1d:42:8f:76:6f:5e:75:3a:
29:da:62:46:78:f6:3a:15:0f:d3:69:f6:c8:9c:5d:3c:4b:40:
84:bb:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:52 2026 by rpki-client