Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: hYc3BojSOaDhvJYRIpObwC/N6zEhvtx1AgFkc9Xceso=
Subject key identifier: A5:FC:6C:E3:E9:A7:1C:10:4C:A3:C0:C5:18:07:E1:63:56:C7:FB:71
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 019D99D06A16A4EA717DC665416932897B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 1554
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: 3JDOgau4GXIlP-8TxtcC06uAWi0.roa (hash: QjML2vUB5G/DnLmOZku9aV5tntgCQSEVJ8kdiDg/M3E=)
2: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: ClT/Dymvy9HAV8yhwJ7ygodudGpOh9XybQcl0Rs0Ts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6a:16:a4:ea:71:7d:c6:65:41:69:32:89:7b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=a5fc6ce3e9a71c104ca3c0c51807e16356c7fb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:5c:d6:83:7a:e4:17:14:31:cf:09:6e:34:
36:8b:4f:86:3c:8e:52:63:0c:de:a6:88:1c:95:ce:
c4:0d:2d:f2:45:27:b3:44:2e:8d:16:6b:4b:09:d7:
29:db:c9:cf:14:b0:68:ec:15:52:c0:53:a0:a5:ba:
3a:88:61:a8:16:c8:a1:f8:ff:cd:4f:0a:26:ee:2a:
ec:cb:e2:08:63:a9:4d:b7:db:f2:e3:2b:88:2f:87:
d1:fa:fb:84:10:cb:cb:c0:69:50:c3:80:28:ea:20:
6b:46:e0:fd:17:e0:51:12:2e:f5:9c:98:82:f5:7d:
64:80:9b:e0:9a:e5:d1:14:d0:03:00:01:ec:11:53:
70:c0:0f:ed:b2:18:54:cc:3c:b9:58:93:a0:c9:c7:
c2:e0:9a:36:97:9a:43:81:a6:0a:fa:bc:67:9d:bb:
1e:a4:b8:10:da:dd:4e:18:e4:0c:27:f3:5c:66:f1:
a2:ad:5a:ba:0b:d3:11:15:3a:57:97:34:f1:d7:d7:
de:0b:2a:4a:e0:78:17:3e:3d:c2:6e:b8:b3:67:96:
98:f7:db:6d:24:1c:3d:7f:cc:6c:31:ac:41:c1:41:
3d:b1:ac:21:6b:c3:04:44:65:ea:8f:c2:46:89:8a:
a5:0b:bb:b3:3f:fc:e5:c6:4e:53:61:7c:7b:cc:5e:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:6C:E3:E9:A7:1C:10:4C:A3:C0:C5:18:07:E1:63:56:C7:FB:71
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3d:11:21:5c:db:ef:f1:f7:b5:94:8a:57:d3:1b:05:f2:e6:
95:8d:55:40:65:d3:5f:ea:a5:9e:f9:38:1f:43:a1:a7:9a:e0:
fa:f7:c1:50:77:b2:c7:6d:0a:e2:5f:d5:fa:c2:ed:ad:53:63:
09:d1:64:43:20:0f:e2:0d:03:26:57:d5:a1:21:3f:d9:80:fe:
b4:9d:a0:1e:85:82:2b:8f:cb:52:14:72:52:9e:85:37:fd:32:
13:19:af:ef:49:39:4d:fe:1c:cf:a1:0b:72:10:dc:c8:2f:e3:
48:01:d7:be:d4:25:3b:45:fd:44:ee:fc:b9:4a:5e:b6:0c:99:
f3:52:17:1e:d0:58:73:79:f0:b9:a2:f3:a5:5c:4c:ee:33:35:
97:54:ef:0e:ca:4c:34:6c:a6:81:2c:09:23:50:36:9d:72:f8:
c9:e7:81:04:87:c5:94:8e:22:8c:d6:55:8f:6e:5e:7e:ef:71:
a7:4f:0a:db:81:21:0c:d8:86:9b:1c:0a:d4:40:66:8e:f6:23:
4f:9b:44:94:8e:42:65:6b:3c:30:38:b7:a1:49:1f:ac:4b:52:
8a:55:23:9d:34:d7:85:b5:38:86:e4:b0:33:86:9f:70:f4:c0:
cd:ce:24:b6:7e:c8:b3:80:46:de:20:42:12:ca:8f:c9:ee:d1:
fc:6c:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:06 2026 by rpki-client