Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: QKvVBcKMIW8f0F4bOAc02Eu8ioQGT207MxBdqM0vrrg=
Subject key identifier: FA:63:B6:5C:D9:65:97:6B:BC:3F:35:E9:B7:66:2C:79:53:75:43:FD
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 019CA945AD17E45F99732E02C9A191F39532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 12:00:41 +0000
Manifest this update: Sun 01 Mar 2026 12:00:41 +0000
Manifest next update: Mon 02 Mar 2026 12:00:41 +0000
Files and hashes: 1: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: nWDfEJe1q5xwYulAUVo/sPGlDiRYAsKf7LCE5LPtPNk=)
2: a_96dgHPGfskp46QxVwlyW43OHQ.roa (hash: 40fkJSYqeLo91DkP9jgqjhXreqdS7UdtXQdlx4C0e90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ad:17:e4:5f:99:73:2e:02:c9:a1:91:f3:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Mar 1 12:00:41 2026 GMT
Not After : Mar 2 12:00:41 2026 GMT
Subject: CN=fa63b65cd965976bbc3f35e9b7662c79537543fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:a8:e8:10:32:c3:fb:72:63:5e:9e:cd:e7:
79:dc:66:ca:80:8d:fb:2e:30:6d:fc:cd:ef:3d:a0:
b2:4a:8c:ab:69:bd:7b:d7:ba:0f:6e:c7:75:cf:3f:
22:4e:10:5e:1f:36:f7:a8:88:75:74:fb:97:e3:06:
23:dd:9e:fb:7a:48:3a:1c:a4:d1:86:1d:21:83:2a:
f3:57:b3:22:29:93:5b:2f:f9:1f:22:7e:36:d7:8d:
2a:74:3b:a8:52:df:2e:f9:3d:e8:89:14:62:87:4a:
e3:66:5a:89:d3:fa:e3:47:1b:04:c2:8d:6a:70:c8:
47:56:62:db:3f:c3:98:fe:31:d0:2a:a4:79:37:ac:
e0:b9:3c:b8:91:77:ef:a5:dd:0c:fb:f5:6d:4b:d3:
31:40:1e:4e:59:60:41:a0:49:48:88:c8:db:75:61:
78:3e:40:84:eb:5e:77:cb:5f:9e:10:9f:0f:7e:95:
b7:7d:50:a8:b5:3b:2f:e8:75:0a:a9:42:c5:13:79:
6d:86:53:ce:24:57:bb:c0:a9:f8:85:26:5a:0c:67:
76:03:83:91:ad:9f:15:b3:7d:0b:bd:13:c0:11:29:
b4:dd:b0:29:c6:68:4a:3b:2a:46:6f:9e:3d:53:a2:
66:ac:a7:6c:9b:96:2b:c4:93:0b:3f:ad:4d:de:b6:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:B6:5C:D9:65:97:6B:BC:3F:35:E9:B7:66:2C:79:53:75:43:FD
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:87:1d:46:69:ab:e9:ec:be:45:af:a1:45:25:ad:38:4d:3f:
c4:64:bb:93:f4:52:ca:ab:e5:76:f4:dd:d2:36:c7:8a:71:c6:
0f:1f:46:38:51:93:59:81:2a:88:f4:44:25:8f:99:3c:9e:88:
3a:47:cc:7c:4a:66:91:9e:e7:fe:43:a5:b7:99:9e:b7:91:07:
8d:b8:f8:b2:f8:92:fb:76:d5:50:37:e6:98:3c:42:3d:d8:01:
a1:8c:70:02:07:46:d0:30:34:28:c3:df:5b:d1:4d:45:31:f1:
23:a9:73:5f:aa:c5:8e:d5:f7:64:2a:78:80:da:e7:1b:ba:c0:
74:85:08:f8:b3:77:0f:95:92:a2:d5:71:1d:c3:19:37:99:7c:
f7:3c:b3:86:c4:e7:40:95:1a:19:0d:8f:3e:8e:ee:da:d4:5a:
e7:48:04:20:f5:c4:18:49:91:93:7d:f5:06:e7:44:bc:2b:1c:
e5:55:50:aa:6c:08:94:26:8b:ee:e5:84:4f:81:be:39:00:2a:
79:e1:1a:ee:b1:d0:a1:50:64:b3:2b:35:72:84:01:44:5a:ac:
bd:7c:5d:24:23:28:dc:44:af:d8:77:42:46:21:55:e7:4b:be:
40:c6:29:bd:92:59:cc:da:67:d0:63:45:59:c5:ed:2d:c0:21:
32:8d:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:29 2026 by rpki-client