Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: S2UBRCHMlqqYsSXsccskyrb15g0n5yeK+rEtf29q3ps=
Subject key identifier: 3A:95:EB:D0:7A:1A:F1:FF:23:A9:0B:38:0D:43:2E:46:FA:29:86:60
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 019CADC82CD126BCCA01179E270F284B402A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 097E
Signing time: Mon 02 Mar 2026 09:01:42 +0000
Manifest this update: Mon 02 Mar 2026 09:01:42 +0000
Manifest next update: Tue 03 Mar 2026 09:01:42 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: hJpWOj8aNEh6DJ+J9HeoyIrBShVuN9IA7QHQ1anNjN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:2c:d1:26:bc:ca:01:17:9e:27:0f:28:4b:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: Mar 2 09:01:42 2026 GMT
Not After : Mar 3 09:01:42 2026 GMT
Subject: CN=3a95ebd07a1af1ff23a90b380d432e46fa298660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:8d:61:db:62:96:5a:5b:ea:bf:c3:fd:18:
d7:1e:49:7b:32:6b:91:88:31:b7:d4:f1:ac:a9:f4:
98:d1:7f:6c:c4:7c:6c:58:54:49:cf:ca:29:23:2d:
15:cf:0f:b5:35:08:07:f2:fe:08:d7:d6:2a:55:c8:
87:53:a2:aa:f4:14:b7:cb:27:63:26:93:5c:0a:01:
e2:51:3e:54:38:9f:75:ba:bd:4b:01:83:a7:15:ab:
49:c8:a9:57:6b:f0:74:d7:a9:56:eb:3b:a7:30:ed:
64:93:cd:98:76:f0:1e:52:9e:b9:a9:4e:19:b8:8b:
c5:b4:7b:38:27:b6:0b:c3:6a:28:53:da:db:10:65:
f3:2b:f9:e0:68:fa:15:d6:13:ec:47:8b:5f:d9:15:
08:03:e9:49:ec:f2:11:b9:3b:42:82:6d:43:64:b0:
27:9a:05:33:fc:ba:53:56:5d:a2:64:a2:e9:90:55:
d9:45:c2:01:4d:bb:37:27:8b:fa:15:1e:50:3a:3b:
88:9b:a9:3e:ae:9c:0d:4c:2f:49:1c:d2:dc:1f:c4:
af:7e:c9:17:c7:22:90:a8:4b:1e:2c:f3:02:10:60:
5b:32:8a:ed:e7:ca:75:c2:37:78:d2:4f:21:10:de:
0c:a0:58:f4:6e:eb:8d:e0:60:e5:4a:77:8b:91:af:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:95:EB:D0:7A:1A:F1:FF:23:A9:0B:38:0D:43:2E:46:FA:29:86:60
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:46:d7:e7:fe:4a:4d:1e:5c:4f:bb:55:63:b5:7e:a5:8c:cf:
08:6c:91:2f:fe:39:c0:df:03:83:a6:4e:ab:8e:02:98:d8:0d:
0c:e9:b4:b3:b0:78:ce:b4:f7:d5:5b:14:ac:f6:1a:6e:43:a9:
7f:d0:8e:e3:e2:70:a2:7c:97:e0:29:86:b2:06:39:34:dc:bb:
02:8f:48:41:f5:b0:a8:2c:25:d0:72:b7:69:9f:da:09:59:94:
0d:02:9a:d9:8d:4b:9e:ef:dd:27:e9:b0:61:31:52:39:e0:ca:
8b:34:52:8f:00:78:30:94:d3:11:79:94:73:26:7c:21:58:e9:
e7:61:34:61:da:f2:bf:9d:a6:6b:6d:a5:41:c4:2c:d3:f9:2a:
87:06:89:cd:eb:89:0a:2a:79:3d:c8:5c:59:1d:a8:88:05:8d:
e6:8a:73:89:c5:20:f3:5f:99:61:c8:d6:12:69:6f:e0:7b:bc:
70:0f:b7:c4:ba:a5:c3:5c:57:17:dc:ff:93:bf:26:02:d5:af:
db:92:cf:80:be:42:37:c2:6e:4a:b1:1d:3c:53:47:3c:c1:05:
1c:b7:77:03:d7:29:5f:c2:93:a4:38:7f:20:c0:3d:bf:49:c7:
00:e9:d8:d1:46:e2:22:c4:f0:e3:4c:13:ba:56:74:79:81:59:
37:2b:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:13 2026 by rpki-client