Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: huXwsS6Dx2Rk+durSxuJpk2vI9eU8UNeo3zGZK7z7pA=
Subject key identifier: 57:D1:A4:CC:45:E2:D0:53:CD:2C:BA:F7:BD:88:A8:0B:67:BE:C2:1B
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019D2B1754CAD0093D100C8A2192A89C283C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 17:00:42 +0000
Manifest this update: Thu 26 Mar 2026 17:00:42 +0000
Manifest next update: Fri 27 Mar 2026 17:00:42 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: LmaWpQfF0KFErPkIu+dmp1ed2HzDyQd6viqeQRnNpt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:54:ca:d0:09:3d:10:0c:8a:21:92:a8:9c:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Mar 26 17:00:42 2026 GMT
Not After : Mar 27 17:00:42 2026 GMT
Subject: CN=57d1a4cc45e2d053cd2cbaf7bd88a80b67bec21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:8c:05:5b:5e:2a:0d:9b:78:0a:64:93:7c:
28:33:42:eb:16:a7:d9:55:98:ca:34:23:ca:67:a6:
2b:69:59:9a:0a:53:a5:85:5f:c8:75:8f:df:17:33:
21:4e:f3:c7:8a:c5:e0:60:89:22:1a:6d:94:ef:96:
d2:ad:d8:5d:78:cf:30:31:3e:ad:14:dc:52:55:98:
87:eb:55:ea:ee:ce:33:38:5d:e4:be:9c:e5:c3:de:
2d:17:ea:0e:3e:c2:a4:86:e4:78:d2:67:f3:5b:b2:
32:8c:55:12:24:06:5f:89:f9:39:80:f4:d5:ac:a8:
01:3e:71:ae:17:a6:a1:39:c5:e0:11:c1:17:ce:9f:
9f:03:bd:1b:5d:13:ee:d3:c5:48:eb:9c:f8:d8:3e:
f4:60:9a:5f:2e:e2:d4:41:06:28:39:66:51:66:ca:
bd:0b:2a:bc:e7:79:f7:38:b4:07:3d:96:ed:72:b0:
56:e5:76:e0:b3:98:b0:25:5f:7e:d3:03:eb:d9:bd:
12:9a:06:b6:fd:74:cc:f8:5e:91:bf:92:0b:f3:54:
6d:54:ce:c9:fb:82:79:d7:b2:2d:67:21:a0:7b:6d:
b1:74:d2:d0:7c:1f:08:38:91:0e:99:e4:b0:2b:ed:
51:41:de:16:e0:73:07:74:0e:44:5f:2d:90:99:11:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:A4:CC:45:E2:D0:53:CD:2C:BA:F7:BD:88:A8:0B:67:BE:C2:1B
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:38:c4:ee:c9:9d:fd:c5:49:d7:fb:22:31:f4:3c:16:f9:
55:7e:85:d8:5e:2b:5d:db:20:f7:a8:3d:8b:0c:56:5c:a1:b9:
32:95:93:67:76:0c:61:06:ec:3e:ea:e5:2f:fb:f8:06:a0:55:
73:62:5a:2f:76:8c:0e:96:e2:ef:52:4b:49:17:e0:44:d2:ad:
ff:08:80:b9:a3:f4:54:86:1c:9b:d8:e7:9b:ae:12:99:56:28:
18:2c:53:78:6c:19:be:bb:d6:d2:0e:7f:38:84:f0:38:fe:ab:
91:dd:a6:ba:c2:9b:59:8a:96:e3:d9:78:1b:e1:bf:a5:03:58:
33:14:8b:d8:59:59:4c:c5:6d:74:e9:5e:ed:a6:a1:8c:06:03:
89:11:39:bf:98:bd:2e:2b:8e:2f:6e:f5:0d:ac:cb:b8:dc:b3:
05:4b:55:7e:be:c7:d3:49:c0:83:82:e0:44:16:3d:65:49:a6:
15:ea:7b:af:a9:84:47:56:d9:6f:65:6e:0a:60:39:a0:96:99:
eb:56:61:72:a7:29:05:d2:6b:20:0e:6d:b9:ba:e8:d6:f1:24:
bb:dc:58:dd:61:03:91:83:a0:13:e3:6a:d4:f9:6a:b3:cc:d2:
6c:92:47:bf:d9:6c:cd:ef:d5:8b:17:98:f1:83:eb:60:5e:fd:
ef:22:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:03 2026 by rpki-client