Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: Zjn5wPHcXqrvVk1dKPaQvRBhpjLNLmCdm+ajGhSSIrA=
Subject key identifier: 07:6D:95:47:B7:98:3B:CC:BA:75:F7:F6:F7:5A:DE:D0:44:26:A0:7D
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 019DA37827484D931BC7A5CF3EA35CDC8597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 129B
Signing time: Sun 19 Apr 2026 02:00:53 +0000
Manifest this update: Sun 19 Apr 2026 02:00:53 +0000
Manifest next update: Mon 20 Apr 2026 02:00:53 +0000
Files and hashes: 1: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: 849REMN6l4U1VgdTUUUZw5SHB7micG1z4o8sT/GoSJE=)
2: WdDSmHu8piwjkaXknTgjAYhTRAg.roa (hash: CUnFAf2sONYPtqjTetxje/LoEZ9f/M7eZmBz5cxD1nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:27:48:4d:93:1b:c7:a5:cf:3e:a3:5c:dc:85:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Apr 19 02:00:53 2026 GMT
Not After : Apr 20 02:00:53 2026 GMT
Subject: CN=076d9547b7983bccba75f7f6f75aded04426a07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:ae:3b:5c:62:b6:92:4a:9c:57:32:35:6c:
15:0e:25:3d:9b:20:db:41:ad:ca:09:cc:37:0b:ba:
2e:2e:c9:46:72:9f:07:1e:4d:14:86:96:99:cb:6b:
ae:dc:68:f0:8d:7a:63:af:0b:6c:0d:99:4e:6f:58:
f0:05:21:de:3e:69:b8:2e:0c:05:20:18:a7:da:d0:
34:eb:ff:87:4a:62:67:8e:d5:c2:37:0e:d0:12:a5:
4e:2e:af:36:cd:ab:f3:f5:7d:3c:90:ca:19:2a:72:
f9:d1:97:eb:04:b6:46:7f:d1:eb:84:6b:ed:45:8f:
c7:54:91:2b:3f:ac:c7:14:e3:97:9b:54:78:12:03:
2a:c9:af:b0:0b:a5:b5:46:dc:d4:16:67:42:cd:2b:
bf:be:30:82:6b:19:b6:b8:13:b0:5e:d1:d3:eb:7c:
f4:37:c1:9a:7e:02:4b:be:8d:88:b8:c9:b1:02:ac:
a7:1a:99:e2:bc:c7:4c:cd:3f:bc:a7:2f:e1:de:54:
0f:27:55:f2:b8:af:35:5b:83:83:2a:2b:c8:52:b8:
6d:7a:a2:85:03:a1:77:9f:f4:22:8b:57:24:52:1d:
0e:8a:af:a0:9b:2b:9c:30:6d:63:2a:25:b4:29:05:
8f:59:30:29:12:fa:5f:cc:a0:62:8c:5e:a7:2a:ae:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:95:47:B7:98:3B:CC:BA:75:F7:F6:F7:5A:DE:D0:44:26:A0:7D
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:0e:61:3c:d0:89:54:ab:43:12:2e:79:b3:fc:7d:07:65:
ae:96:bb:d9:3a:fc:4a:d7:75:05:33:c1:22:df:9c:57:68:2f:
48:f7:69:ba:dd:be:c2:db:99:8d:d4:47:c1:1a:22:6b:20:7d:
6a:2c:12:c0:11:cb:de:d2:fb:45:db:c7:78:ec:e7:d2:71:b6:
c0:2b:c4:86:fc:59:4b:79:2a:3a:ed:5d:9e:a3:b8:e1:ea:b6:
a0:59:4d:6b:57:50:11:f2:e0:c7:19:14:29:13:f6:aa:c9:53:
95:54:dc:ea:9f:55:2f:43:6b:98:2b:fa:c5:7e:e2:cb:ca:ac:
23:46:a6:d7:74:ff:52:75:a6:24:22:d0:12:f3:0b:8a:fb:68:
ad:a1:e6:23:27:b0:4d:34:30:c7:fd:7a:00:7b:82:b8:30:c9:
fa:66:79:d1:ab:75:97:70:e0:53:27:82:52:66:01:9c:60:28:
49:19:95:d3:27:a2:be:1f:78:2e:b2:b7:73:3d:6b:94:13:a6:
23:17:19:4f:4e:c6:ba:0e:13:53:9b:3e:a5:c1:d5:0e:9f:b7:
96:e1:65:26:c1:d4:c9:93:35:1d:a1:df:2b:39:5a:67:32:f2:
a9:82:f3:bf:e0:e5:97:83:8a:ca:ea:ef:c8:ed:b1:77:c6:d9:
cd:81:6f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:02 2026 by rpki-client