Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File: Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier: h66mmpWp7xPSClhsGV5sv7Yn+taXRiSoXyu/MMrD2c8=
Subject key identifier: 54:7F:2F:1E:F2:59:09:25:FC:09:B7:6C:99:66:A4:6E:76:6F:58:38
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 019D2996D92E43F121F75D8A4814DBAFA8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number: 0C08
Signing time: Thu 26 Mar 2026 10:00:44 +0000
Manifest this update: Thu 26 Mar 2026 10:00:44 +0000
Manifest next update: Fri 27 Mar 2026 10:00:44 +0000
Files and hashes: 1: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: j7tISiJUiM8BZYtd3L/6UbfQ9K3j1uAiYvjN3eTCkbw=)
2: VPRKJwLhM6wFak3hCjlk9djzH5k.roa (hash: tH+AfV2CLPYS64epB/DiVz/hoPPj/j4JOarUZisDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d9:2e:43:f1:21:f7:5d:8a:48:14:db:af:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: Mar 26 10:00:44 2026 GMT
Not After : Mar 27 10:00:44 2026 GMT
Subject: CN=547f2f1ef2590925fc09b76c9966a46e766f5838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:1d:f8:b6:5b:09:1a:67:08:dd:71:8c:48:
95:a6:0a:87:93:9a:47:4f:17:0a:a4:c8:20:f5:b8:
4c:6f:34:4d:3a:26:28:79:fa:68:e9:44:9e:e0:75:
89:f4:f4:e9:c9:44:3d:27:a5:cb:15:18:3c:3c:c7:
7b:a7:d4:9f:46:74:48:87:12:fc:67:b9:ae:bd:32:
26:e0:5f:db:bf:ea:e6:96:65:3f:a8:ca:dd:84:0e:
20:79:7c:d5:a6:7a:bf:3b:64:9c:9f:0a:9c:3e:ae:
f3:1f:de:77:76:ae:7f:e6:b3:d7:50:90:90:9e:e5:
e7:eb:e8:7e:f1:ef:4a:84:a0:4c:0b:17:39:9f:fe:
66:de:f6:ec:76:8d:73:59:a4:b2:3d:37:b4:df:29:
00:ed:7d:49:46:ba:a9:57:9a:c4:96:62:73:95:0f:
23:a5:d5:c1:1c:f3:a6:fb:83:9c:10:1b:47:92:67:
08:68:fd:0b:01:e4:15:ca:75:7f:6f:06:fa:51:a9:
cd:b8:f0:74:08:85:f2:d9:41:5c:68:10:a8:dc:37:
97:17:2f:45:70:01:06:92:9a:8e:17:0b:b4:da:83:
ba:d5:95:cd:f8:fd:41:6f:4d:d0:e1:25:7c:d7:95:
4c:15:e9:a0:48:9a:25:8a:2f:0e:8e:cc:86:25:42:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:2F:1E:F2:59:09:25:FC:09:B7:6C:99:66:A4:6E:76:6F:58:38
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:3a:fb:41:c1:75:24:aa:7d:e5:91:7f:1c:54:3f:8c:73:
85:a0:26:c8:6c:da:c8:35:15:ec:fc:85:e6:2b:af:96:a5:9a:
95:94:1c:7f:1b:6d:0f:06:a4:27:aa:ca:38:fc:0e:f7:31:55:
14:23:50:e5:3b:23:44:3d:28:a5:d3:a2:58:10:00:21:9b:3e:
49:c2:a5:de:83:12:3a:9c:ca:c7:15:1b:76:43:27:6b:21:a1:
46:2a:fa:30:26:3a:5c:1f:4f:fe:c7:de:e0:29:05:31:21:cf:
f0:53:47:5e:9c:83:a2:24:b5:83:2e:63:98:fd:8f:4d:65:a6:
05:25:30:34:f9:fb:a0:df:43:25:0b:5b:31:b8:c7:5d:b1:98:
32:7a:c7:92:3e:cd:fb:af:33:90:ad:49:db:34:09:ad:73:ae:
6d:fe:a6:a8:0b:d9:08:64:43:59:4f:3b:c6:9a:23:52:de:a4:
80:1d:a0:c7:07:48:07:c5:4b:b3:30:61:a5:70:93:8c:ff:13:
70:46:64:06:ee:2f:eb:59:3e:f2:51:47:93:0f:ad:e7:03:9e:
05:77:95:4b:e8:9f:3c:66:26:54:a7:b9:40:db:25:2d:7e:16:
65:51:4f:02:86:e6:87:e3:79:b6:d9:c4:78:59:3e:d0:7c:cc:
e6:63:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:07 2026 by rpki-client