Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier: KMJ1oMViNNczhR8cRp0ZxLEd7RL3/2vNOZtdP7QGjZM=
Subject key identifier: 56:0E:C6:6E:D9:B1:38:0B:5E:E8:01:4F:61:FF:E9:7D:4A:94:ED:FC
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 019D2AE019B27F706FD7C6915F0AEBB74EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number: 05A0
Signing time: Thu 26 Mar 2026 16:00:22 +0000
Manifest this update: Thu 26 Mar 2026 16:00:22 +0000
Manifest next update: Fri 27 Mar 2026 16:00:22 +0000
Files and hashes: 1: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: Op2PsVsz38YjlLmJEHwIyPrLHkDq+z7Sr9Yh5u+MAqo=)
2: mPlMjkqTZkC57IBLKPd0EfNj7iw.roa (hash: VIIonFkOVhOCVYivwNgIVRIKhtGM74oWX8Z6MBeWXm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:19:b2:7f:70:6f:d7:c6:91:5f:0a:eb:b7:4e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Mar 26 16:00:22 2026 GMT
Not After : Mar 27 16:00:22 2026 GMT
Subject: CN=560ec66ed9b1380b5ee8014f61ffe97d4a94edfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:7d:3d:94:b3:24:cb:e0:13:de:48:9d:b7:
13:4b:e2:16:b5:b8:27:02:c5:d4:6b:e6:4a:df:8f:
fc:49:eb:ad:bf:1d:cf:26:3b:28:c7:23:74:9a:be:
95:db:0a:4b:86:9b:31:24:f1:61:78:8f:86:cc:ae:
12:3f:88:b1:10:0b:33:65:2e:e5:ae:fc:be:f9:1e:
00:47:1a:87:cf:05:15:19:20:c9:91:8f:fd:3c:21:
36:48:ca:0e:05:92:b3:68:2b:42:06:71:86:df:0b:
56:04:28:35:5f:af:e2:49:13:5d:ff:6a:6a:13:b7:
ba:ec:fc:bd:4c:80:28:36:78:3f:46:a1:7c:1b:10:
e6:67:7c:43:79:e8:18:6c:ff:d4:a1:a9:81:1a:e6:
28:db:be:ad:5c:b4:b1:b0:ed:fe:cd:3c:30:48:db:
3a:b1:28:f8:12:b8:af:72:d8:99:ba:a1:2e:2a:21:
6b:77:ef:0e:af:e2:4d:9a:bd:20:4e:86:d7:c5:b9:
b4:de:ae:1c:d1:9d:42:0c:fd:9e:24:2d:92:8f:59:
fd:8a:44:a1:94:50:c7:3e:4c:b5:fe:d7:f7:78:72:
b9:c8:cb:c1:0c:c1:f3:76:89:2c:72:7a:d1:ec:6f:
57:b5:0b:e1:08:ec:bd:64:95:9b:13:dd:09:a7:98:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:C6:6E:D9:B1:38:0B:5E:E8:01:4F:61:FF:E9:7D:4A:94:ED:FC
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:d8:8b:eb:59:91:41:ba:57:00:02:e5:d3:73:78:68:25:
00:da:a0:ef:ad:f0:4a:1d:f7:4a:9f:46:95:cc:49:29:02:12:
75:46:af:04:e0:3f:ac:09:93:7c:97:00:bd:a7:9a:b8:4e:9f:
01:ab:2d:c9:03:c7:da:5c:91:aa:00:93:de:4e:06:65:83:5c:
46:54:0e:3d:07:4b:2e:96:98:9f:13:14:b7:47:45:8e:7b:e0:
f0:42:1d:57:91:35:04:20:75:e5:40:c1:64:03:f2:19:74:d0:
cf:eb:c5:c2:30:e5:c3:bb:c8:7c:d1:73:05:6b:99:6f:a6:fc:
1b:c9:ae:7b:40:2a:92:6e:a0:8a:92:43:dd:4c:4b:c9:8e:79:
2c:ec:db:51:bf:8d:9d:c9:47:cd:75:12:b0:d3:33:4f:ad:e5:
25:b1:59:6f:16:c5:c9:f3:29:32:ae:bc:a8:af:40:6b:d8:e0:
79:1c:f6:bf:e3:a5:01:32:9e:bc:db:4f:e4:17:5b:88:01:fe:
b6:4d:7d:af:cf:c1:fb:fb:df:5f:a2:a8:02:b5:32:9a:6f:80:
f7:66:8e:c9:b3:4a:47:6a:f9:b4:71:74:00:3a:e6:32:bd:bd:
ff:d6:f7:30:c1:34:be:5a:08:f9:d9:cc:b0:07:25:02:ca:9e:
70:79:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:41 2026 by rpki-client