Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: ZNHFUi7CElU27NhLRPQDB5i82VD3pVOhd8iC0mvb8I8=
Subject key identifier: A7:70:B4:BA:EE:8A:0A:DC:C1:F4:03:7D:70:A8:7B:CD:C5:40:35:78
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019FAB2CA64C13AFFCFAC710CD7D5822DF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 09AE
Signing time: Wed 29 Jul 2026 00:00:57 +0000
Manifest this update: Wed 29 Jul 2026 00:00:57 +0000
Manifest next update: Thu 30 Jul 2026 00:00:57 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: NK3eCxjJTeNkc02ZvpPvOm3gd9fM8nBNaz3CNsvLaAo=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a6:4c:13:af:fc:fa:c7:10:cd:7d:58:22:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jul 29 00:00:57 2026 GMT
Not After : Jul 30 00:00:57 2026 GMT
Subject: CN=a770b4baee8a0adcc1f4037d70a87bcdc5403578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:79:26:bb:cb:54:5d:62:1b:ac:c2:a1:9f:
7f:e4:75:00:63:7e:3d:1f:da:21:b4:9d:0e:ad:6e:
8e:18:7b:38:4c:9f:0e:44:3b:24:00:c1:e8:54:0b:
9a:8e:85:20:cb:af:7f:fd:30:ac:b4:60:af:ce:1d:
ff:f7:ca:1c:00:f7:6e:a6:41:16:66:c6:4f:72:a0:
03:08:53:fc:d8:43:69:c0:8d:ac:cb:88:47:5a:75:
1a:5f:b3:f8:4d:95:06:0a:b8:08:72:d4:b9:48:44:
c3:7b:a2:ae:e6:a0:d0:73:48:0a:94:8f:9d:1c:47:
9b:62:e0:df:d0:ca:59:68:3e:88:5c:42:4b:6c:9d:
e8:5e:c1:bc:2d:e2:4e:bd:8e:84:83:05:7b:16:82:
07:a0:f3:26:5e:1f:38:4e:df:8c:25:29:8c:74:d3:
48:f0:13:ce:f2:55:9c:a7:0e:05:48:87:04:db:71:
12:55:f1:16:95:4f:9c:3a:38:a4:37:98:6c:a0:08:
e6:6d:80:74:9d:76:e5:39:46:88:ea:13:a2:26:86:
65:1c:95:7f:7d:a4:1f:d5:91:b3:1c:cb:57:f5:88:
f9:0e:3a:43:bd:bf:13:fd:ba:bc:c7:d3:ae:5b:c9:
f7:d2:65:f0:6b:7f:64:55:b2:65:15:b9:a5:b6:8e:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:B4:BA:EE:8A:0A:DC:C1:F4:03:7D:70:A8:7B:CD:C5:40:35:78
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f7:f7:84:db:c1:66:26:9e:1a:ff:81:b5:88:a5:b2:c1:79:
b5:e1:07:6f:0c:40:bf:a3:66:b1:ff:5e:fd:07:e8:fa:1e:82:
26:27:d4:ca:0f:aa:a8:81:9c:c7:83:bb:87:c2:d6:97:3a:32:
39:f0:c7:1b:25:c8:c1:46:2e:9b:23:d8:37:02:40:e1:c1:01:
09:d3:af:f8:c5:94:fe:80:d0:c4:63:ec:2c:84:1f:1a:6b:a0:
c4:0d:27:12:82:9c:29:43:37:45:b1:80:c5:f7:5f:23:ab:dd:
d7:ab:e9:50:87:0c:18:28:a6:49:7e:e0:08:c8:a7:42:ba:25:
af:f2:57:d5:d5:80:0f:45:22:e0:cf:f3:14:64:dc:9d:92:53:
e3:27:b7:ee:bb:23:3e:88:5f:bc:8f:61:72:02:df:9b:3a:cc:
8c:ae:7a:b5:04:0c:f9:17:56:c2:41:44:a4:2c:2d:32:c2:93:
54:d7:b1:94:17:79:1e:59:b4:3f:72:60:65:b2:84:a4:52:ae:
42:25:1c:30:b6:44:bf:3f:c2:13:1c:56:e8:f3:fa:01:e7:59:
a5:89:b4:d2:a3:3a:fe:90:c6:1a:2a:57:d9:58:f5:84:33:37:
97:81:f7:c3:0d:54:ef:6e:be:cf:59:1c:d2:27:3f:65:b7:44:
39:84:f6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:02 2026 by rpki-client