Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: +mKgvQ/qzBHnGSd3tl2ANIFAipglVzr6bL4MQm1nvXY=
Subject key identifier: 93:9F:19:D7:1C:D7:47:BA:07:6B:87:2F:88:4D:3F:93:78:06:D7:EF
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019CACEB6353F4A2AB9CE7BAB4E86131C2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 1003
Signing time: Mon 02 Mar 2026 05:00:33 +0000
Manifest this update: Mon 02 Mar 2026 05:00:33 +0000
Manifest next update: Tue 03 Mar 2026 05:00:33 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: 9VMwn5HRQ4uuSetGHFsH3cvRhw7zgQMYTvQhsM5Kd6U=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:63:53:f4:a2:ab:9c:e7:ba:b4:e8:61:31:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Mar 2 05:00:33 2026 GMT
Not After : Mar 3 05:00:33 2026 GMT
Subject: CN=939f19d71cd747ba076b872f884d3f937806d7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:cf:e4:bf:40:c4:9c:49:ba:4c:16:e7:91:
50:69:89:46:ba:8f:4c:be:d0:61:d8:3d:f8:c9:4e:
0a:39:2e:fa:54:28:28:ee:44:89:f5:14:be:9c:44:
3c:4b:25:eb:cd:a8:11:39:bc:90:ec:17:70:3b:0e:
aa:c3:71:ba:65:7d:a1:a2:be:56:9a:e4:48:9e:c8:
2b:f6:b2:a4:49:fa:2c:d4:d1:fd:19:fb:24:b2:72:
6d:20:b3:50:3d:eb:3b:0c:a5:1a:35:e1:e6:f3:e1:
81:7d:d8:b1:1b:83:06:2a:50:09:7e:f4:c0:98:3e:
ff:ea:ec:28:67:d1:b9:24:97:f8:4a:04:9e:f9:b5:
98:8a:dd:ef:34:0f:18:cc:16:fa:33:a3:ba:f6:ba:
cf:ba:7d:84:31:e5:41:2d:c0:a4:31:88:91:af:57:
6c:e5:90:4f:aa:d0:20:ac:ae:7d:23:9b:e5:c5:76:
ac:5f:94:19:0f:a6:86:13:ff:b9:6b:8d:fb:8f:03:
d7:27:97:0c:34:df:8b:9e:32:13:3f:14:61:e3:5e:
0b:b4:c1:7f:b7:98:51:99:0d:22:72:7d:cf:fa:83:
3d:7f:00:ba:46:16:73:d7:32:02:57:e5:42:99:e1:
b0:d0:83:17:4d:60:93:ce:5f:41:5e:b0:ce:fc:97:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9F:19:D7:1C:D7:47:BA:07:6B:87:2F:88:4D:3F:93:78:06:D7:EF
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:58:37:3b:20:dd:e9:b2:a5:3b:d3:9d:ea:e2:6b:50:84:39:
39:dc:fc:13:70:f5:0c:c5:e5:ed:5f:e7:6a:f8:c4:77:48:70:
dd:0b:c3:d1:ed:55:45:9c:d5:3c:55:f3:36:fe:d1:88:03:57:
48:6c:47:85:4e:4d:fc:c8:ed:9b:f8:a6:98:0b:ce:bd:4a:86:
0e:99:88:01:1e:00:46:51:5d:9a:3e:9d:cb:a2:21:a5:78:c4:
a4:7c:ff:a1:8d:c6:ec:8c:68:2a:4d:db:b2:e1:0a:db:3f:5b:
fa:53:df:54:4c:ed:6b:3e:27:20:b3:09:37:74:4b:7a:6d:94:
66:87:03:78:cb:b9:d8:01:f6:1a:93:f4:e3:84:38:59:dd:ff:
64:a0:59:68:db:ea:5f:51:9f:02:82:57:89:ee:92:ba:9c:f3:
53:b7:c6:bd:f2:3f:4e:34:be:ac:03:b5:d1:9a:b2:c8:5f:e0:
17:2d:5b:2b:15:2a:9e:6c:b7:fe:e1:3e:c6:06:7f:05:f7:1c:
0c:64:bc:9b:cd:44:21:ec:83:dc:78:c0:e1:5c:e1:77:af:fe:
2a:fb:ef:55:59:ff:84:e6:cb:a1:f9:5d:12:bc:9e:e6:c4:b6:
ce:a0:24:f3:9c:e0:bb:21:3e:aa:8e:6a:c5:00:98:46:7c:30:
5c:71:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:26 2026 by rpki-client