Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: 8ze+gku4JL2MCt2ipwgVq3PJoR374a6NFCEAW1sk8X0=
Subject key identifier: D4:89:A7:75:84:CD:DA:36:81:E2:CD:8B:01:6D:FD:B3:72:03:9A:4E
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 019CAC7DDD0D64A45431C4A67305FBDAF5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0821
Signing time: Mon 02 Mar 2026 03:00:55 +0000
Manifest this update: Mon 02 Mar 2026 03:00:55 +0000
Manifest next update: Tue 03 Mar 2026 03:00:55 +0000
Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: NQUKRD8G3q40QtBc4Et6uBqcxgiALS62V0ZjnqqtM9s=)
2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:dd:0d:64:a4:54:31:c4:a6:73:05:fb:da:f5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Mar 2 03:00:55 2026 GMT
Not After : Mar 3 03:00:55 2026 GMT
Subject: CN=d489a77584cdda3681e2cd8b016dfdb372039a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:d1:ed:cc:8d:7a:f2:bb:18:10:1b:5a:0b:
6f:97:fd:e0:55:20:11:48:30:41:48:6d:be:20:8b:
81:b4:9e:6d:e3:34:bd:6a:f8:73:7c:0b:ce:61:cc:
d0:64:d8:07:f9:dc:f2:08:5f:9a:94:77:6f:5a:48:
02:bb:7e:a9:f4:cc:a4:94:41:ce:1e:63:82:eb:5b:
8a:cb:e5:fe:65:49:4a:55:c6:be:66:5b:05:5f:bd:
73:91:62:94:5c:e3:98:5a:7a:3a:14:b2:3a:c4:8b:
b8:96:5b:bc:2b:bf:fc:ec:a9:42:fa:81:51:96:ef:
e8:b0:21:dc:d6:19:fe:73:7c:ad:1a:07:15:c5:e3:
39:ca:70:a3:24:86:a8:10:54:3b:f2:84:d7:71:ff:
aa:71:e1:be:cb:4b:15:3f:af:b9:a8:b7:3b:50:1a:
42:33:06:7e:c5:6f:4f:b5:c6:33:29:72:d4:68:20:
7f:9d:d0:07:93:24:7b:df:7f:af:a4:ba:26:c0:a8:
74:31:d3:7f:3b:19:90:1b:21:21:5a:40:cb:2e:4c:
6e:88:b6:5a:4c:1f:10:7b:5b:86:9c:08:0e:09:14:
e9:dc:73:15:15:98:8d:de:a5:1d:ec:61:80:8a:80:
64:4d:f4:1e:bf:ba:1d:36:f2:07:39:93:4a:ea:38:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:89:A7:75:84:CD:DA:36:81:E2:CD:8B:01:6D:FD:B3:72:03:9A:4E
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:47:c4:39:1f:f7:d2:27:f5:af:c1:34:41:d8:50:f4:4d:54:
5f:21:86:cd:c1:7f:98:5b:bf:11:00:b1:10:35:0f:15:7e:73:
5e:67:31:4a:6a:69:84:86:b9:1c:65:b9:ca:2a:ae:88:bb:e0:
c1:80:e5:c9:00:42:d0:e6:19:70:ff:d2:4f:7a:6d:cf:ab:de:
63:26:a5:37:3b:28:37:1e:b4:d5:39:47:80:7c:aa:87:aa:ee:
bc:c4:bd:e2:e6:5e:f9:93:e2:70:79:75:c4:32:b5:2c:04:94:
45:fb:af:58:06:60:05:9c:94:87:f4:dd:45:21:8f:10:e4:30:
78:de:95:c9:4b:53:e6:21:85:69:c0:35:4b:1a:0d:8c:2a:d4:
9d:6d:71:55:24:90:f7:ab:32:e5:bc:a4:46:b7:49:bd:59:ae:
b0:09:23:bc:4e:f2:f0:97:0f:9a:71:8d:04:ce:1b:37:67:77:
36:de:df:32:86:da:07:f1:44:5a:cc:99:52:1b:e6:6c:00:5c:
20:28:30:9c:07:ec:11:2d:b9:f6:7e:ec:a5:f9:53:70:2d:6e:
66:47:62:1b:93:87:f0:f6:b2:3e:55:89:8d:2b:77:ea:cd:8b:
4e:e6:77:ae:49:27:a8:cf:5b:d5:a9:a4:02:65:49:49:0d:3e:
18:70:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:23 2026 by rpki-client