Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
File: momArWm4s3dOSrL3BbUlO0CT2rk.mft (raw, json)
Hash identifier: x+7W/LeLeeW0fANfdCG8eOtk3YXJ4bW9k+WfwcDATHI=
Subject key identifier: 0E:7C:1F:D3:73:56:D3:FB:C2:05:1E:6B:CA:83:81:8C:99:00:D4:92
Authority key identifier: 9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9
Certificate issuer: /CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9
Certificate serial: 019CA832EED21ABAEA42CB396361493CA4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
Manifest number: 0143
Signing time: Sun 01 Mar 2026 07:00:36 +0000
Manifest this update: Sun 01 Mar 2026 07:00:36 +0000
Manifest next update: Mon 02 Mar 2026 07:00:36 +0000
Files and hashes: 1: CGv011R0BsXNsx4-mbDVixNDbcA.asa (hash: K18DfUdhfOGHjsr8lcJu0G/LrevSlYi+SwrddtBXAps=)
2: momArWm4s3dOSrL3BbUlO0CT2rk.crl (hash: mWDyb6Gp2m98+g3MR7Vog7hZDJmEBwcLuhRneeU/gaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:32:ee:d2:1a:ba:ea:42:cb:39:63:61:49:3c:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8980ad69b8b3774e4ab2f705b5253b4093dab9
Validity
Not Before: Mar 1 07:00:36 2026 GMT
Not After : Mar 2 07:00:36 2026 GMT
Subject: CN=0e7c1fd37356d3fbc2051e6bca83818c9900d492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:1f:e5:da:db:c9:c9:51:77:ce:ad:ee:d9:
45:40:ed:b8:0b:84:70:3b:8c:ac:1d:3f:c9:22:19:
42:3c:d1:91:0c:68:07:aa:73:81:a5:dc:54:83:7b:
c8:8b:0c:c1:9e:64:82:a1:05:7e:0c:72:64:67:0c:
4b:f1:28:f5:34:60:e9:dd:ef:00:dd:69:55:4b:74:
83:fa:8f:02:0b:18:11:a3:b3:b4:0b:bc:fa:6e:8e:
ea:33:f6:42:c7:d5:ea:ef:a7:9f:fa:e4:af:c6:d9:
26:f0:19:50:e4:ec:e9:80:b5:1e:ca:bc:ba:86:47:
a1:da:b0:c6:09:b9:93:ca:09:91:0a:94:d1:6a:56:
2d:54:9a:77:79:69:1f:76:16:0a:cd:c7:a4:16:af:
e9:1c:e4:e7:42:ed:3b:95:08:61:1f:64:8e:9d:f3:
af:64:e0:8b:09:b2:e4:fb:51:62:5e:c8:f5:61:4f:
40:30:d4:07:8a:53:3a:e7:4d:fe:3e:95:29:f7:85:
01:ba:d5:cc:7b:bb:70:51:7f:a0:2d:b4:e2:04:f4:
f7:fc:88:5d:f8:d9:1f:57:9c:22:23:cd:d1:45:b4:
15:a3:07:60:ec:67:e9:f5:40:14:22:b7:95:df:b3:
e9:b8:52:4a:ab:58:58:61:db:00:6e:ca:23:8f:88:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:1F:D3:73:56:D3:FB:C2:05:1E:6B:CA:83:81:8C:99:00:D4:92
X509v3 Authority Key Identifier:
keyid:9A:89:80:AD:69:B8:B3:77:4E:4A:B2:F7:05:B5:25:3B:40:93:DA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/momArWm4s3dOSrL3BbUlO0CT2rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/momArWm4s3dOSrL3BbUlO0CT2rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2a:1e:05:88:9f:d9:1f:f0:f6:25:c4:cd:a9:4e:b1:0b:ed:
d2:6c:ee:48:62:7b:3d:de:a5:bc:19:a5:21:63:a8:75:d1:29:
53:81:33:cd:42:8e:fb:b7:f7:7b:6d:f0:de:ff:3a:33:42:74:
42:a0:57:e4:5c:25:19:92:2c:fd:72:5a:97:4c:53:fc:79:2a:
29:da:15:fe:27:6b:d1:c8:67:a2:a2:ca:e5:89:3b:13:fa:b1:
f2:51:6d:e7:0a:00:94:6b:53:bb:f1:50:2b:06:dd:77:9d:72:
e9:e5:15:69:25:a2:0b:00:31:10:df:17:6e:4d:d2:53:7b:3c:
25:e0:d6:55:0c:b1:34:02:03:be:6c:b6:0d:cc:ec:1d:d1:12:
c9:36:08:ac:38:29:4b:9d:4c:29:67:b9:54:0f:94:9f:a2:76:
69:d0:ac:85:ac:06:74:9f:2c:57:e1:62:06:10:1a:05:7b:bd:
cf:fc:aa:b2:ff:3c:6d:07:b9:27:7a:b9:1b:77:2f:3e:23:59:
6d:7c:12:4c:c1:33:2b:8a:06:c3:99:e8:b7:46:93:ce:09:d1:
e9:a8:79:f8:51:1d:1e:f9:ae:a9:c1:fc:b1:ce:74:5a:e0:97:
00:79:ba:37:ce:c5:55:23:88:73:b6:19:0c:4b:5a:d2:77:c5:
d2:43:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:20 2026 by rpki-client