Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: pP/bPgz/aCa7HTSN3t70p4USw+XjmnEslxWklklxx8g=
Subject key identifier: BD:90:98:D5:26:CA:96:1E:2E:C9:8B:DA:03:53:AD:FB:D7:6C:D9:47
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 019D28F27BF7B81DA62C16492D1F94DB733A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 0948
Signing time: Thu 26 Mar 2026 07:01:13 +0000
Manifest this update: Thu 26 Mar 2026 07:01:13 +0000
Manifest next update: Fri 27 Mar 2026 07:01:13 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: i56YHFeenpwm2oSHloOLBKVJnqua2/+LHprkDcIIkr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:7b:f7:b8:1d:a6:2c:16:49:2d:1f:94:db:73:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Mar 26 07:01:13 2026 GMT
Not After : Mar 27 07:01:13 2026 GMT
Subject: CN=bd9098d526ca961e2ec98bda0353adfbd76cd947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:3c:c2:8a:d4:c0:35:e9:b1:2b:a1:50:10:
1a:8c:10:0f:01:e0:81:7d:6a:15:1a:a3:b4:80:0d:
21:a3:32:e2:67:ae:7e:89:6e:e5:b1:01:30:6d:a0:
81:0e:04:96:1a:0a:b5:34:d0:36:18:42:52:20:0c:
31:52:52:26:32:95:96:f8:fc:bf:42:bb:29:b3:db:
c5:1c:94:98:ce:1a:c9:84:d4:44:0f:f8:97:ac:4a:
de:b6:6b:71:65:bd:37:59:af:7f:cf:b2:4d:70:38:
50:f9:70:22:3a:d1:5d:f7:6e:06:e0:39:f1:3f:42:
36:20:72:f5:f8:1b:45:20:7d:2a:f7:b7:40:d0:cd:
29:f6:33:8b:4b:2e:76:f9:98:c5:38:47:d4:9b:e4:
20:af:57:54:3e:0c:aa:ad:6c:45:10:91:20:63:e0:
b6:a4:2d:94:bb:ad:60:b9:2d:14:25:5b:95:2e:84:
b2:33:6d:f5:29:42:14:ad:fa:f9:24:7c:a1:45:65:
66:7d:f1:31:b2:91:e8:a0:eb:9e:4c:42:b3:b3:86:
44:86:bf:e4:f5:83:54:e0:e2:d6:fb:d5:8e:f9:9c:
e3:c6:b4:38:08:ff:2d:96:cb:d8:fa:c3:36:34:28:
21:49:70:7e:14:07:94:4d:10:9a:af:b4:8f:73:6c:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:98:D5:26:CA:96:1E:2E:C9:8B:DA:03:53:AD:FB:D7:6C:D9:47
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:eb:cd:02:73:00:2a:c6:8b:47:f0:69:6f:4b:31:f2:87:df:
4c:82:c6:ff:a1:ac:7b:00:7d:1b:b6:09:91:bc:e9:b1:e7:f0:
0e:e1:94:91:bb:99:a8:e2:db:65:21:3e:b1:96:23:3b:3e:6f:
c0:a7:ed:a1:84:1d:b7:62:e1:8d:82:1c:07:f7:8d:e1:1e:8f:
18:36:11:49:71:e6:07:47:3f:cb:b6:af:94:b0:14:c6:64:94:
41:98:84:94:b1:bb:33:8c:2d:8a:35:bc:43:a5:90:f4:1b:7e:
49:2e:d3:d1:dc:1a:89:af:ba:c9:49:39:5c:77:58:38:82:3b:
42:5c:f6:67:22:ac:53:70:91:16:a4:23:95:bd:97:63:71:c0:
0f:c5:3e:7a:51:03:a7:a5:5a:fd:38:f7:0b:a0:c0:f8:fc:23:
09:99:65:8d:5f:26:52:3c:eb:e7:58:62:61:f3:3e:06:e2:38:
00:f9:e0:4e:27:6b:38:af:e6:99:5c:20:c9:9c:37:08:93:d0:
f8:23:00:94:24:ea:5f:9c:2f:0c:d6:ff:6c:29:51:ec:9a:91:
48:03:da:c3:17:62:bf:57:fa:f0:52:83:49:64:ac:84:ef:9b:
83:0c:8e:a3:d4:03:fa:2b:0c:d4:40:ae:d1:04:bb:7a:4a:a6:
25:4d:a2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8nv3uB2mLBZJLR+U23M6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzRmNGIxZGU0YzMxZTU2MTViZmQwYjNjY2IyZDgxN2U4
M2I5MzMwHhcNMjYwMzI2MDcwMTEzWhcNMjYwMzI3MDcwMTEzWjAzMTEwLwYDVQQD
EyhiZDkwOThkNTI2Y2E5NjFlMmVjOThiZGEwMzUzYWRmYmQ3NmNkOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WY8worUwDXpsSuhUBAajBAPAeCB
fWoVGqO0gA0hozLiZ65+iW7lsQEwbaCBDgSWGgq1NNA2GEJSIAwxUlImMpWW+Py/
Qrsps9vFHJSYzhrJhNRED/iXrEretmtxZb03Wa9/z7JNcDhQ+XAiOtFd924G4Dnx
P0I2IHL1+BtFIH0q97dA0M0p9jOLSy52+ZjFOEfUm+Qgr1dUPgyqrWxFEJEgY+C2
pC2Uu61guS0UJVuVLoSyM231KUIUrfr5JHyhRWVmffExspHooOueTEKzs4ZEhr/k
9YNU4OLW+9WO+ZzjxrQ4CP8tlsvY+sM2NCghSXB+FAeUTRCar7SPc2yZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2QmNUmypYeLsmL2gNTrfvXbNlHMB8GA1UdIwQY
MBaAFDDE9LHeTDHlYVv9CzzLLYF+g7kzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUt
Y2Y5NzFkMmMyYTY1LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUtY2Y5NzFkMmMyYTY1
LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuvNAnMA
KsaLR/Bpb0sx8offTILG/6GsewB9G7YJkbzpsefwDuGUkbuZqOLbZSE+sZYjOz5v
wKftoYQdt2LhjYIcB/eN4R6PGDYRSXHmB0c/y7avlLAUxmSUQZiElLG7M4wtijW8
Q6WQ9Bt+SS7T0dwaia+6yUk5XHdYOII7Qlz2ZyKsU3CRFqQjlb2XY3HAD8U+elED
p6Va/Tj3C6DA+PwjCZlljV8mUjzr51hiYfM+BuI4APngTidrOK/mmVwgyZw3CJPQ
+CMAlCTqX5wvDNb/bClR7JqRSAPawxdiv1f68FKDSWSshO+bgwyOo9QD+isM1ECu
0QS7ekqmJU2iwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:52:21 2026 by rpki-client