Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: eai2cCayRS5tU0wv70lbSAOaZH/9QVgFkx/Ke2+M0Hc=
Subject key identifier: A6:28:E0:A3:3F:9E:97:FB:EC:36:7A:C5:61:CB:8E:74:DB:55:1A:0A
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 019D99CFF1A25A7C4246FCEDD0DF10DF3435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 1296
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: oyBxeNhC5+D01+yRHCqxATWnPvtZBuOckEEmCFJ1cto=)
2: WdDSmHu8piwjkaXknTgjAYhTRAg.roa (hash: CUnFAf2sONYPtqjTetxje/LoEZ9f/M7eZmBz5cxD1nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f1:a2:5a:7c:42:46:fc:ed:d0:df:10:df:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=a628e0a33f9e97fbec367ac561cb8e74db551a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:ae:44:55:69:3d:c8:90:0a:25:a3:75:2a:
0e:38:4f:8e:77:2d:60:19:c6:ca:25:2a:b7:ed:ad:
76:32:88:67:01:5e:dc:ee:cb:1e:12:bf:04:c1:39:
18:9c:54:cd:ac:d8:2a:c7:2a:4c:a8:7c:36:90:22:
af:4b:3e:35:a7:12:bf:56:98:01:34:b3:01:24:dd:
a3:ee:02:63:bb:50:5f:26:bc:70:3a:7a:f1:5e:9e:
00:5d:f3:42:f4:a6:49:b7:9d:92:31:7f:0b:b9:ab:
0c:2c:fc:b6:21:5f:a1:ed:6e:d5:3b:3a:38:df:9b:
dc:0c:8f:76:68:45:b9:eb:58:c9:da:e9:a2:76:09:
bc:ee:74:b0:7a:ac:19:f6:d0:e2:d1:0c:98:b2:40:
e4:29:02:d2:94:45:59:4f:7e:f7:e2:4b:f8:b5:95:
23:93:60:ca:13:bb:5d:03:8b:1f:5b:6b:29:a2:ae:
f8:09:83:0d:62:57:a7:75:5a:d8:e0:0e:fa:47:78:
66:bc:98:a4:97:2d:4d:a8:e3:7e:09:54:3e:b8:ba:
e2:b7:82:88:78:31:38:d4:3f:8c:29:55:9d:c4:3c:
f5:d6:3e:38:9b:b1:ed:c1:33:58:6a:79:7c:ee:65:
b8:12:d6:53:21:e8:3b:52:b8:62:bc:4c:ec:fb:17:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:E0:A3:3F:9E:97:FB:EC:36:7A:C5:61:CB:8E:74:DB:55:1A:0A
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:2f:36:71:06:3f:12:56:fc:75:13:12:9a:3a:82:60:b0:
93:8d:09:1d:33:d3:a3:41:53:b4:e2:64:44:f3:6e:12:72:a6:
30:6a:2c:b9:5a:81:88:02:29:c9:02:a1:fc:f7:c4:40:da:25:
2c:ed:00:88:46:84:5c:d8:65:f1:ff:ac:71:8a:f3:b6:be:25:
f2:60:7e:c9:af:9f:4b:93:9f:83:5b:ec:6d:67:e0:ac:6c:d5:
6f:7c:5f:f1:82:bb:52:15:6a:c0:a1:f9:fd:8a:e7:85:aa:14:
e9:7b:d1:26:05:fe:ef:21:02:5c:ca:8d:37:44:d8:8e:91:31:
88:ad:41:a5:da:17:15:99:a9:c5:f0:1b:ca:ce:4d:29:ab:c6:
03:96:7f:54:c0:9d:ed:57:23:90:80:b1:71:f5:d4:a2:8f:b0:
0f:95:17:6f:e8:77:24:2e:35:01:f3:7a:9e:ff:b3:ab:b0:eb:
42:2a:91:7b:8f:3e:98:43:e6:2d:c1:79:ae:2a:c7:4a:57:9e:
f4:7e:01:18:62:7a:5b:d8:eb:ab:17:1a:dc:f4:9d:08:b5:84:
6a:b0:e8:4c:53:f9:c8:47:d5:99:4f:37:f3:68:27:e4:1b:7b:
1f:70:59:6f:9f:74:51:22:bc:e1:87:f6:b2:1a:ca:7d:f8:e2:
9a:83:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:39 2026 by rpki-client