Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: ybBNcTrBRLqi4le8Yk773lJfyWq+OSJm11apgyKQIcc=
Subject key identifier: 8F:DF:CA:E1:DF:0A:FE:DB:25:3C:9A:35:4F:BF:D7:A0:F9:CB:8E:52
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019D31F4DBB4722D0706301E530B9F371DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0F6D
Signing time: Sat 28 Mar 2026 01:00:23 +0000
Manifest this update: Sat 28 Mar 2026 01:00:23 +0000
Manifest next update: Sun 29 Mar 2026 01:00:23 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: Jkqzx8lUayNns7EZ+Ug/YS7Mr822nCEF+y3dQBJPUq0=)
2: qnNx4BbcqCKw4qU9ggM-AvK2t-g.roa (hash: IB/xWqsQwwimaAQrVy3VNbAYORDCQE0bYCHpAZf/Bpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:db:b4:72:2d:07:06:30:1e:53:0b:9f:37:1d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Mar 28 01:00:23 2026 GMT
Not After : Mar 29 01:00:23 2026 GMT
Subject: CN=8fdfcae1df0afedb253c9a354fbfd7a0f9cb8e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:09:2a:b5:36:6e:e8:87:c7:2a:e1:da:69:
12:dc:de:13:20:92:82:ba:4f:6a:07:05:62:d4:c4:
4e:e4:83:7d:7f:77:b8:ac:fc:78:15:22:df:c6:b4:
ae:f4:f3:a4:aa:f1:79:69:32:68:7a:4a:42:57:d0:
5d:41:b9:5a:20:c5:a6:d5:c6:51:7c:ee:6a:b4:73:
9b:b7:f9:6f:65:1a:5a:22:8b:02:6d:e7:67:39:1d:
21:ee:22:7f:f1:52:06:ae:1e:8c:25:2c:76:03:c4:
91:aa:7b:c2:a9:ae:70:94:f6:4e:57:fa:5d:7f:df:
13:3d:1e:cf:a5:59:19:ff:09:1f:2a:4c:b4:67:36:
91:a2:42:89:5e:bc:18:6a:43:80:3f:c4:c4:ee:78:
92:98:db:c2:fc:04:43:6f:66:bd:be:34:81:ee:61:
c1:fe:83:69:84:08:09:65:63:00:16:06:3e:3e:43:
38:b4:dc:c6:65:50:79:31:0e:12:76:42:f8:d1:03:
67:29:53:56:c5:de:67:c2:16:4a:81:c4:8f:56:19:
4d:2a:16:22:2d:5f:98:a6:64:cc:5f:12:87:bd:4b:
6a:ba:25:25:e9:93:58:54:f4:c8:0e:a5:e7:54:bf:
be:58:9e:e1:0f:31:5a:c0:74:bd:f8:38:60:54:5f:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:CA:E1:DF:0A:FE:DB:25:3C:9A:35:4F:BF:D7:A0:F9:CB:8E:52
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9a:9e:09:32:da:eb:db:81:74:2c:e1:e1:98:e2:4b:e6:db:
f7:ae:25:97:4e:9d:8a:76:99:ea:0c:e2:cb:9b:3b:c7:d1:42:
94:96:70:56:c9:a0:e0:c3:00:82:7c:e2:fa:69:c0:f3:1c:fc:
7f:91:ef:78:55:47:23:fb:9f:4d:a7:f4:7c:d8:47:74:f1:b9:
d7:68:08:a9:f1:9d:aa:ef:2d:58:90:57:ef:5d:10:eb:1b:8a:
8d:b7:4f:02:cc:5c:40:9d:b1:aa:61:64:2e:bc:c1:e8:cf:a5:
6c:3e:8b:36:fb:30:a6:61:53:94:ae:ff:c8:26:f1:1d:26:e0:
b6:af:9d:9d:b6:a5:0c:54:e9:0a:4a:12:26:d1:2f:27:3a:5d:
38:fb:9c:bb:7c:7a:cd:cf:6d:33:1c:2e:71:0f:45:45:9f:0b:
7a:fd:c5:ad:26:16:4b:3e:33:00:81:56:8b:24:1a:a7:70:c1:
19:19:19:f8:d4:61:4b:85:86:dc:95:eb:ec:63:3f:b2:51:1d:
8c:ce:9e:b1:44:99:f7:a4:b6:9e:08:33:44:e0:e2:2c:56:6b:
0e:86:7f:c4:d2:db:d3:0a:21:b8:c9:3f:93:a0:f3:ac:f1:ae:
f0:70:c1:28:e8:51:66:00:a4:7b:56:e1:4c:24:d6:bc:0b:2b:
fe:1d:b9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:55 2026 by rpki-client