Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: 5e3aZ1Qlwu/uIWpccJljHFkYaUi8eRvQ9aGyrpjZBC8=
Subject key identifier: EF:47:77:DE:7E:1A:CC:00:04:57:74:B1:64:DB:33:65:D3:D1:36:FE
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 019D27E047539DFB6C1C1A419D2A260B5DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 125B
Signing time: Thu 26 Mar 2026 02:01:42 +0000
Manifest this update: Thu 26 Mar 2026 02:01:42 +0000
Manifest next update: Fri 27 Mar 2026 02:01:42 +0000
Files and hashes: 1: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: lWJMzo+IeOZosb6ZD7f3iEhlrPwSgp7xAjFE01NtvWc=)
2: WdDSmHu8piwjkaXknTgjAYhTRAg.roa (hash: CUnFAf2sONYPtqjTetxje/LoEZ9f/M7eZmBz5cxD1nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:47:53:9d:fb:6c:1c:1a:41:9d:2a:26:0b:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Mar 26 02:01:42 2026 GMT
Not After : Mar 27 02:01:42 2026 GMT
Subject: CN=ef4777de7e1acc00045774b164db3365d3d136fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:14:c6:d2:80:a1:86:00:ae:31:93:16:47:
9d:dc:94:c1:ca:41:43:df:18:ee:88:b0:c8:41:53:
b7:ef:03:97:e7:76:c1:94:0e:c0:65:96:59:2f:b4:
40:26:ca:ce:dc:c2:a7:7c:97:93:cf:6d:74:a1:0f:
7e:9d:83:3f:d5:a3:fd:d0:8c:b9:1b:ef:f2:43:70:
c1:bf:e4:4c:94:49:5a:6a:34:b1:de:c5:5b:17:19:
c8:15:61:f3:24:1c:a3:ce:99:3b:a2:42:f8:19:6e:
77:39:37:68:e7:7f:e9:0a:e4:c8:2f:2c:d3:12:f7:
c1:b9:bd:87:54:1d:61:4f:46:f0:31:04:97:f6:5b:
1a:e1:fd:f0:0e:cf:16:0a:2b:2e:05:b2:19:8a:0d:
9d:56:4e:5a:6e:0b:a6:af:97:aa:8a:0b:34:74:84:
98:7b:e4:ef:ab:43:c4:08:c8:81:f5:a1:72:a3:d2:
40:b1:2d:66:55:39:4e:06:91:51:a7:ea:08:fc:cf:
50:79:3e:c1:a4:f6:24:16:1a:f9:4f:ca:02:53:31:
cb:89:84:ce:6a:62:57:00:9f:a2:37:28:cc:d0:26:
bc:49:c1:5c:5c:70:ce:c7:30:02:24:52:a7:82:a5:
a6:e8:ef:68:de:9c:3a:51:43:b3:e9:46:8d:78:a3:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:77:DE:7E:1A:CC:00:04:57:74:B1:64:DB:33:65:D3:D1:36:FE
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d4:fd:77:66:ed:1a:38:76:65:ba:e8:10:e2:c7:22:f1:fa:
37:0d:4c:bc:47:b6:f4:a9:80:9a:4c:16:1c:43:1c:6c:7d:7d:
f3:18:a5:d7:16:2d:92:4f:59:9b:76:2e:ae:68:50:b9:c2:c9:
77:5e:b8:da:e7:e9:81:51:0e:03:6e:71:25:d4:53:47:a4:7b:
1b:4e:04:c5:38:f2:e0:bc:cc:b4:f1:98:6c:93:43:08:b3:b8:
8c:02:b9:98:4e:4d:90:b6:1d:57:bf:71:64:d2:e5:89:90:54:
4f:63:92:70:c6:ca:b2:c6:57:b4:c5:4f:2a:17:72:1d:cb:7e:
81:f8:3d:8d:8e:a7:d1:f6:83:5e:b3:5f:8c:c1:61:0c:ef:c8:
fc:42:d1:43:4b:8e:0b:05:e1:64:96:2f:8a:9d:64:15:7b:4f:
c7:4f:8e:77:6f:f5:34:c8:8d:74:69:da:93:69:0f:ac:fc:93:
6c:06:d9:cf:a4:03:54:f5:03:04:54:b7:a5:1a:6a:08:b1:e1:
ef:80:a6:2d:cf:4e:44:f0:43:69:97:05:ac:86:22:4f:af:28:
43:f2:5d:d0:0a:84:98:ad:52:6b:a0:38:f5:73:d1:5c:af:07:
44:47:62:06:f1:01:57:b5:ea:4f:18:d5:a0:d6:92:56:1d:fc:
f4:e9:df:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4EdTnftsHBpBnSomC132MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWUwZjVlNjU0MzkzY2VkYTIyZGI0NDk3OGYyNzNlNzg5
ZTIzNDEwHhcNMjYwMzI2MDIwMTQyWhcNMjYwMzI3MDIwMTQyWjAzMTEwLwYDVQQD
EyhlZjQ3NzdkZTdlMWFjYzAwMDQ1Nzc0YjE2NGRiMzM2NWQzZDEzNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxcUxtKAoYYArjGTFked3JTBykFD
3xjuiLDIQVO37wOX53bBlA7AZZZZL7RAJsrO3MKnfJeTz210oQ9+nYM/1aP90Iy5
G+/yQ3DBv+RMlElaajSx3sVbFxnIFWHzJByjzpk7okL4GW53OTdo53/pCuTILyzT
EvfBub2HVB1hT0bwMQSX9lsa4f3wDs8WCisuBbIZig2dVk5abgumr5eqigs0dISY
e+Tvq0PECMiB9aFyo9JAsS1mVTlOBpFRp+oI/M9QeT7BpPYkFhr5T8oCUzHLiYTO
amJXAJ+iNyjM0Ca8ScFcXHDOxzACJFKngqWm6O9o3pw6UUOz6UaNeKPrmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9Hd95+GswABFd0sWTbM2XT0Tb+MB8GA1UdIwQY
MBaAFDOeD15lQ5PO2iLbRJePJz54niNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUt
OGU1ZDllZWZhZjkxLzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUtOGU1ZDllZWZhZjkx
LzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdT9d2bt
Gjh2ZbroEOLHIvH6Nw1MvEe29KmAmkwWHEMcbH198xil1xYtkk9Zm3YurmhQucLJ
d1642ufpgVEOA25xJdRTR6R7G04ExTjy4LzMtPGYbJNDCLO4jAK5mE5NkLYdV79x
ZNLliZBUT2OScMbKssZXtMVPKhdyHct+gfg9jY6n0faDXrNfjMFhDO/I/ELRQ0uO
CwXhZJYvip1kFXtPx0+Od2/1NMiNdGnak2kPrPyTbAbZz6QDVPUDBFS3pRpqCLHh
74CmLc9ORPBDaZcFrIYiT68oQ/Jd0AqEmK1Sa6A49XPRXK8HREdiBvEBV7XqTxjV
oNaSVh389OnfkA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:59 2026 by rpki-client