
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: j1Px73uBUGp7BfvrHnguJ7cVGyQUi8CUFikz3hmZK7M=
Subject key identifier: D0:21:F2:E5:0F:B0:D4:AC:42:0D:C5:5B:AD:01:5C:1C:07:F0:11:3E
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 01A0D7600BFFC7B1758BCDB6759327CFE29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 15E8
Signing time: Fri 25 Sep 2026 07:03:10 +0000
Manifest this update: Fri 25 Sep 2026 07:03:10 +0000
Manifest next update: Sat 26 Sep 2026 07:03:10 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: JCBblagGdG2iRid925xA+eIZIAqBeAQw1tCEcPQYppY=)
2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:0b:ff:c7:b1:75:8b:cd:b6:75:93:27:cf:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Sep 25 07:03:10 2026 GMT
Not After : Sep 26 07:03:10 2026 GMT
Subject: CN=d021f2e50fb0d4ac420dc55bad015c1c07f0113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:0b:91:0f:54:26:47:7f:6b:99:5a:93:3f:
62:c9:72:ad:18:1c:64:97:fd:28:e4:e4:58:3a:19:
e3:b5:03:79:89:9d:81:44:60:2f:5a:70:9d:58:29:
26:67:1d:f5:e4:fa:6f:94:9b:e1:bf:80:91:6b:0c:
97:38:7d:a4:bf:13:b3:eb:36:8b:c7:91:8e:63:67:
12:7c:90:e0:e1:e5:83:fa:1e:e1:30:19:88:ec:47:
03:2b:39:5d:f2:54:3e:e5:4e:72:53:4c:f7:36:e2:
22:8f:81:66:a2:da:42:d9:4b:f0:63:9d:65:8e:6d:
11:59:b0:5d:7d:46:95:9c:19:f4:0e:82:0a:fc:9b:
b8:a4:4c:91:12:dd:e0:f4:4d:05:76:34:60:15:e0:
7b:07:e8:23:ae:ce:69:56:ea:fa:23:32:c5:6d:3d:
4c:94:0e:7d:99:9c:1a:17:6c:d4:4f:d2:c5:87:2d:
e1:73:8e:39:78:98:c7:5d:ae:37:cd:b7:06:a3:f2:
c1:95:ad:fa:f9:18:b7:fd:bd:0b:96:9a:9e:42:07:
4a:dc:60:79:82:10:29:7a:c1:8b:da:3c:ae:6d:cd:
08:e5:5f:17:9a:cd:7b:e3:85:e0:7b:b3:53:cd:35:
59:91:ba:48:62:56:5c:57:9b:ae:cc:aa:ed:9e:37:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:F2:E5:0F:B0:D4:AC:42:0D:C5:5B:AD:01:5C:1C:07:F0:11:3E
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:22:10:9d:60:7c:0e:69:5d:2c:8e:d3:7b:f8:73:16:d4:94:
0b:a1:e5:4d:3d:57:3d:7a:df:bb:ad:88:73:c5:e0:a7:48:10:
78:9a:0f:ca:2c:30:e2:46:c8:f0:ac:64:a2:de:81:57:30:08:
a1:b1:ae:54:c2:ba:cd:7e:22:ed:3d:9c:56:54:9f:4b:68:cf:
ca:6e:47:76:1d:2b:52:17:0f:aa:d0:39:72:cb:ce:fb:b2:fd:
53:cb:82:dc:46:28:d6:0b:95:85:e7:69:62:c0:28:99:c0:5d:
21:e6:b1:b0:d1:4c:40:97:f6:ab:fa:da:3f:5b:43:d5:70:a4:
f7:19:28:76:3a:ce:06:96:4f:32:ff:cf:f5:8e:74:6e:c7:23:
1d:52:44:36:1e:fa:a7:05:16:e3:d9:e9:7a:eb:85:e1:cc:3d:
b6:c1:32:ce:51:3c:a2:95:68:68:a4:56:bf:2f:8c:8c:41:c7:
37:7a:05:be:09:b5:e6:47:f1:ae:39:3c:49:13:b7:90:f4:52:
7e:f2:55:87:85:ae:8f:bd:c6:0f:7c:87:b3:5e:ff:53:da:de:
ef:2c:2c:1e:b3:79:b2:a1:f7:55:0e:8f:0b:30:af:e4:e8:3f:
e8:9c:b1:c2:d3:f5:3d:df:14:59:35:96:9d:88:47:27:0a:09:
5f:5d:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:42:23 2026 by rpki-client