Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: 9yeKgkRe+6QUdAEkUMdaQjZG3q+n67q4gAmCCwAjsm4=
Subject key identifier: 31:5D:C5:BB:CA:AD:DA:8C:F5:9C:A5:8B:79:4C:BC:D4:F4:39:D9:7B
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019D2704B786ECA79906FED930E4ED3A3E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 13FF
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: 0RgvqSFoJh7X4u6VCSf7k8drAHvFF3g1PBZMz4s91fg=)
2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b7:86:ec:a7:99:06:fe:d9:30:e4:ed:3a:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=315dc5bbcaadda8cf59ca58b794cbcd4f439d97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:eb:81:5f:87:84:1b:3b:bd:1f:d2:8b:77:
f9:cd:32:5d:df:d2:1b:fc:d9:77:2b:ab:ed:98:a4:
e3:03:bc:9e:6b:b0:93:c7:52:fa:df:f2:fc:7e:b8:
ae:07:b2:94:b0:ed:c3:25:82:5a:ad:68:80:88:a1:
de:98:e6:72:81:2f:9f:aa:88:d9:27:56:67:10:25:
67:9c:c1:84:96:bb:05:b2:d3:2b:5a:50:3e:e7:b0:
f0:8f:4f:04:3b:80:1c:ea:91:cb:a4:05:a0:a2:08:
03:97:63:1c:80:91:33:b9:1b:54:05:af:b9:46:d6:
07:85:73:f1:12:db:3b:3b:d6:a5:79:72:92:ca:07:
a9:67:26:ad:b3:c5:db:05:48:2a:6f:7a:10:ca:87:
d9:9c:93:e7:77:5f:10:09:15:9d:ac:da:25:10:9d:
51:65:3f:d8:27:78:f8:b4:55:ee:e7:56:d4:c9:c6:
7a:37:d9:8f:fe:02:fd:b7:bb:93:96:03:92:20:32:
ef:3f:6b:d8:58:c8:04:78:f7:05:f0:e8:45:67:27:
d6:51:84:28:8b:31:02:a0:87:9f:76:20:99:8e:88:
6b:fb:20:ae:6b:5f:e0:2e:58:54:0e:ae:26:ec:11:
a9:e8:4c:f8:1c:13:87:4a:76:e0:4c:38:f6:c9:30:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:C5:BB:CA:AD:DA:8C:F5:9C:A5:8B:79:4C:BC:D4:F4:39:D9:7B
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:37:a4:fb:fb:4c:5f:7c:34:7d:98:b4:4a:21:80:92:83:4c:
1f:d3:03:44:62:41:76:9c:b0:01:e9:b6:c2:0d:73:57:35:25:
dd:a6:31:f6:26:bb:9f:c2:5a:95:6e:cc:80:e5:04:34:ec:84:
f6:e3:a5:99:e7:a1:5d:28:8f:68:6f:9f:f0:8d:d5:c2:fd:e3:
a5:bf:82:e2:3e:b9:3d:ab:45:a7:01:7d:fa:39:59:42:1c:59:
f2:f3:16:f7:c9:86:63:b0:46:8d:2e:30:12:3b:24:bb:db:d7:
e9:2c:57:6b:b3:69:88:03:f3:e3:d9:ac:2a:0e:de:33:2c:dc:
fa:52:ce:25:12:2f:00:10:28:18:27:a0:43:9b:f6:b2:73:9d:
2e:dc:a4:f8:4b:5e:34:6b:0c:4b:55:f1:d6:7c:04:ef:d6:ce:
83:5c:da:a7:3e:8c:f8:77:fe:f8:eb:ae:c3:3a:42:86:ce:c2:
88:2b:bb:1b:c0:a1:f4:e8:b1:68:f1:22:89:de:7b:8e:68:3b:
35:6a:0e:cf:96:92:01:a9:c4:8b:14:d9:c3:86:eb:60:3e:ce:
0c:79:6d:25:67:20:b1:b1:5d:fd:c4:c4:89:b4:c3:ba:00:ce:
21:24:9d:9c:f5:c7:48:c2:77:4e:45:f5:b3:0e:86:41:4c:e5:
06:85:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:10 2026 by rpki-client