Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: GL0+x47F1KSWRFFr/YFF2r4bH1ZGf1abrzpJ9MYh9WI=
Subject key identifier: 09:17:BF:EF:6B:C2:9A:03:D6:B5:DE:24:1D:C4:EB:DE:52:D3:71:E0
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 019CAA582CEA7CB93BBF96068DDE8C73E4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 14D8
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 3JDOgau4GXIlP-8TxtcC06uAWi0.roa (hash: QjML2vUB5G/DnLmOZku9aV5tntgCQSEVJ8kdiDg/M3E=)
2: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: Zit771dF9UVJenWep9QxvVXHCjJHUE1FxsAa36qnEy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2c:ea:7c:b9:3b:bf:96:06:8d:de:8c:73:e4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=0917bfef6bc29a03d6b5de241dc4ebde52d371e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:5f:58:7b:27:04:64:c8:2c:cb:1e:10:4c:
b3:22:a6:ee:28:8c:5a:2c:7e:34:10:db:04:14:26:
05:f9:3b:09:d9:63:44:6a:3b:bc:29:f6:1d:35:7e:
39:2e:ba:fc:1f:78:1d:8a:f6:97:11:d4:cb:85:d7:
11:4a:61:7d:29:79:f6:d8:53:e5:61:6a:8f:d6:d1:
7b:d7:6e:78:1d:0c:2d:88:ca:91:39:e9:91:c9:5d:
04:87:92:88:38:34:7d:ba:80:85:f6:0d:ea:a0:de:
0e:5f:03:2c:fc:ae:1c:99:c2:57:02:f7:ba:76:20:
de:74:1c:ad:a0:9b:57:5c:03:2d:30:9e:d2:bb:ca:
7a:09:1f:f7:7a:fd:af:85:0e:68:5a:2f:e8:bd:f8:
72:99:df:2b:76:76:95:37:c9:4a:02:4c:a1:36:32:
e1:15:5f:a6:ee:64:6d:00:d6:7e:58:37:1c:fa:c2:
18:19:50:d1:ac:9a:94:33:40:86:70:5b:a4:a8:b6:
f9:a0:d5:2c:26:de:5a:e9:ec:c8:71:f9:56:d6:9d:
fb:11:de:a0:0e:83:82:a3:3b:a8:19:e3:f8:da:48:
40:c6:e7:b0:fb:c2:59:79:87:bc:c4:74:5f:05:de:
2b:8c:cf:39:8d:18:a6:b7:06:94:08:b7:0e:be:fc:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:BF:EF:6B:C2:9A:03:D6:B5:DE:24:1D:C4:EB:DE:52:D3:71:E0
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:bf:c3:a9:2d:bd:c8:83:f7:21:50:ca:1b:3b:30:e4:c4:
88:fb:b0:46:a2:8e:26:a9:81:a3:f1:bc:75:58:ff:3c:50:0f:
51:6c:ee:8c:46:81:e9:10:92:5d:57:39:1a:fc:e7:f4:8e:7d:
bc:07:a4:10:64:da:c5:e5:2a:6c:0e:1d:bf:d8:ec:5f:49:b6:
0d:ac:e8:3f:a0:1b:b2:69:0b:4f:a5:60:ec:9c:70:5e:13:13:
eb:0f:3d:cf:0f:36:fa:5e:de:b4:d0:d0:dd:9c:58:84:45:01:
84:87:94:84:cf:a4:69:c1:ab:20:5f:a8:b2:11:d9:9e:2c:73:
11:e7:23:88:60:75:98:b7:43:c2:53:da:a3:76:f0:c9:fc:e7:
97:39:b9:a8:9c:cf:13:95:da:16:33:03:4d:5e:70:f1:2d:c8:
37:bb:ee:a6:3b:26:3c:2d:0d:ec:0d:ba:65:07:75:ef:2d:1f:
f1:94:33:ac:44:6b:43:25:f2:0e:c2:cf:88:cf:0d:49:9b:f2:
4e:24:22:85:e8:1b:84:24:24:cb:ba:49:8b:dd:59:97:59:ed:
23:df:19:a2:d1:b8:a7:53:4f:1e:fe:29:02:e4:fb:54:2e:88:
e4:93:2a:aa:67:4c:6f:16:2e:b1:ac:e0:27:18:fd:dc:fa:6a:
9f:bb:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:28 2026 by rpki-client