Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: k2W6omx/aVXC9tcTKYwHjMfZHBaxg9+tUUb4AmrY0XQ=
Subject key identifier: 4C:4B:93:44:7F:21:1C:1C:C8:12:C5:AE:D5:E9:84:A9:2A:E6:33:44
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 019CAA58BB3B305E38E29479DC9A631F2FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 121A
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: Faz4bwo/L+x7T2n5HzOw2qTdNHPlLeT4S5Cts9Gmj/M=)
2: WdDSmHu8piwjkaXknTgjAYhTRAg.roa (hash: CUnFAf2sONYPtqjTetxje/LoEZ9f/M7eZmBz5cxD1nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bb:3b:30:5e:38:e2:94:79:dc:9a:63:1f:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=4c4b93447f211c1cc812c5aed5e984a92ae63344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:3f:72:7c:fc:b4:27:79:88:e1:19:dd:7e:
1f:e3:e7:b6:77:73:34:18:eb:b9:cc:56:6f:20:bc:
9e:a3:28:1b:76:cc:06:e0:40:79:be:69:36:b7:8c:
70:fa:b3:cd:a7:bb:38:f9:f0:86:2c:35:9f:cf:df:
99:06:89:4b:45:b4:c1:51:b0:f4:c2:62:6a:05:b9:
87:40:6d:e3:c6:8b:e5:28:63:25:b4:c8:f5:62:5a:
70:72:9d:98:f3:66:56:eb:85:46:0a:11:ce:2c:69:
0f:1d:f2:3a:ec:eb:a3:96:60:62:bb:e4:da:53:df:
06:b6:62:e9:6d:cf:9a:2f:81:d0:d3:08:20:b9:6a:
38:3c:b6:ba:97:7d:d3:e1:ec:f7:f2:e6:c9:af:b1:
ac:bd:a0:9a:48:6f:fa:28:e1:00:04:ca:d5:69:b4:
05:d7:64:cb:fc:51:2b:81:2d:06:4e:e4:da:52:8e:
50:5e:a9:0e:fb:83:5a:39:f3:64:6a:ed:0b:d3:c8:
b9:df:83:17:7b:e3:b3:64:13:12:b6:c4:6c:8a:fa:
96:07:ee:a7:22:38:60:a7:01:d1:bc:ec:28:00:5a:
a1:bc:c3:f5:b0:0e:c8:a5:3b:1b:cc:38:2e:ff:3f:
3f:e3:4f:41:0d:78:c3:e9:48:c4:2e:1c:7d:bb:41:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4B:93:44:7F:21:1C:1C:C8:12:C5:AE:D5:E9:84:A9:2A:E6:33:44
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d2:23:71:23:38:44:ac:12:b9:97:9b:cf:fa:55:12:16:cd:
f8:15:f3:b0:c5:08:db:69:72:45:13:33:44:84:ef:bf:a3:63:
de:ad:a9:43:a0:e8:d7:13:bd:f8:27:1b:ac:c0:e2:94:77:a5:
7b:e8:3c:a3:7d:59:e7:89:3a:a9:92:94:7f:a3:e1:f7:19:f5:
27:e1:36:32:8e:8f:67:48:ad:03:de:57:2f:f7:f3:d5:c2:a0:
00:88:1e:61:8f:6f:2c:c2:6e:a0:c0:8f:92:3f:ab:35:50:48:
83:60:ca:83:43:f5:af:51:93:6d:c3:7a:26:24:8b:bc:60:2f:
51:ff:d7:16:da:57:33:66:ce:d7:8f:92:74:6c:82:a4:6b:c5:
90:ce:24:fd:ec:b1:a3:0a:0a:c0:33:1c:70:0e:14:c9:69:0c:
d0:4e:91:4d:74:cb:4d:5f:4a:98:b7:b4:67:71:f7:e9:9e:55:
79:0c:c5:c1:70:a5:c4:3d:53:5f:dc:1e:da:42:f7:f0:8c:d0:
61:a3:88:e6:a7:65:6c:cb:73:6d:da:4c:95:13:a9:92:56:02:
30:00:7c:64:e9:73:67:d9:3d:ee:8e:65:93:e4:2a:5e:aa:85:
48:3c:3a:df:ad:75:65:8a:34:f9:8b:d6:cc:50:13:89:0e:15:
6f:fe:58:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLs7MF444pR53JpjHy/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWUwZjVlNjU0MzkzY2VkYTIyZGI0NDk3OGYyNzNlNzg5
ZTIzNDEwHhcNMjYwMzAxMTcwMTA3WhcNMjYwMzAyMTcwMTA3WjAzMTEwLwYDVQQD
Eyg0YzRiOTM0NDdmMjExYzFjYzgxMmM1YWVkNWU5ODRhOTJhZTYzMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qs/cnz8tCd5iOEZ3X4f4+e2d3M0
GOu5zFZvILyeoygbdswG4EB5vmk2t4xw+rPNp7s4+fCGLDWfz9+ZBolLRbTBUbD0
wmJqBbmHQG3jxovlKGMltMj1Ylpwcp2Y82ZW64VGChHOLGkPHfI67OujlmBiu+Ta
U98GtmLpbc+aL4HQ0wgguWo4PLa6l33T4ez38ubJr7GsvaCaSG/6KOEABMrVabQF
12TL/FErgS0GTuTaUo5QXqkO+4NaOfNkau0L08i534MXe+OzZBMStsRsivqWB+6n
IjhgpwHRvOwoAFqhvMP1sA7IpTsbzDgu/z8/409BDXjD6UjELhx9u0FDtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExLk0R/IRwcyBLFrtXphKkq5jNEMB8GA1UdIwQY
MBaAFDOeD15lQ5PO2iLbRJePJz54niNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUt
OGU1ZDllZWZhZjkxLzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zNmIwOTgtZTlhYy00OTEwLWE2ZjUtOGU1ZDllZWZhZjkx
LzEvTTU0UFhtVkRrODdhSXR0RWw0OG5QbmllSTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNIjcSM4
RKwSuZebz/pVEhbN+BXzsMUI22lyRRMzRITvv6Nj3q2pQ6Do1xO9+CcbrMDilHel
e+g8o31Z54k6qZKUf6Ph9xn1J+E2Mo6PZ0itA95XL/fz1cKgAIgeYY9vLMJuoMCP
kj+rNVBIg2DKg0P1r1GTbcN6JiSLvGAvUf/XFtpXM2bO14+SdGyCpGvFkM4k/eyx
owoKwDMccA4UyWkM0E6RTXTLTV9KmLe0Z3H36Z5VeQzFwXClxD1TX9we2kL38IzQ
YaOI5qdlbMtzbdpMlROpklYCMAB8ZOlzZ9k97o5lk+QqXqqFSDw63611ZYo0+YvW
zFATiQ4Vb/5YjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:03 2026 by rpki-client