Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: ViliUmwSeBmNuE+JcOrfRLfvZHy1WyFgP28PooT0xoc=
Subject key identifier: DE:5D:DF:95:95:12:8D:28:A8:41:71:99:00:2C:04:70:47:67:7B:9F
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019CAB6B98033BC012976C86794158A47A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 13BF
Signing time: Sun 01 Mar 2026 22:01:21 +0000
Manifest this update: Sun 01 Mar 2026 22:01:21 +0000
Manifest next update: Mon 02 Mar 2026 22:01:21 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: IVb+TkZaqoGfTn/Ie6BwWjwnSM/pAyjpkBkMq/K3/A8=)
2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:98:03:3b:c0:12:97:6c:86:79:41:58:a4:7a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Mar 1 22:01:21 2026 GMT
Not After : Mar 2 22:01:21 2026 GMT
Subject: CN=de5ddf9595128d28a8417199002c047047677b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:98:31:2d:fb:a7:19:26:7e:43:23:0e:5d:
db:8d:92:c2:04:51:60:ec:f4:6a:bd:47:df:e6:d8:
82:a2:fa:08:20:47:26:90:ae:7d:7d:8d:14:52:71:
33:10:14:ee:77:d7:b6:ed:63:95:d4:0e:42:b7:34:
a3:84:74:5f:2e:7d:86:91:2b:b9:f0:ce:1e:f3:67:
4d:c3:ec:c9:31:50:a6:ff:e8:53:82:ce:39:d1:25:
a7:b9:d7:1c:3e:58:81:b5:c7:2e:bd:f9:f3:1a:d4:
f2:a5:fb:1b:b5:ee:9c:be:df:0e:3d:da:ec:f9:8a:
38:76:ec:40:5f:45:73:4b:0a:9f:0f:09:12:8a:8a:
66:fb:0c:70:a1:5c:42:1e:9b:f2:6f:a0:e9:f2:3a:
a5:94:07:05:86:cd:9c:f4:85:65:56:c1:a9:7d:8b:
ab:9e:05:97:cb:6c:f9:af:b5:d2:f9:70:75:71:15:
a4:da:53:38:ed:ac:a8:c4:22:e3:80:90:c1:ac:b5:
3c:f8:61:db:96:30:04:a8:54:f8:b8:c2:22:70:63:
09:11:57:23:9d:6e:98:54:7f:8c:24:05:d1:b2:8d:
d7:95:19:1e:a4:10:f9:9e:8f:a6:22:62:98:07:8d:
6a:67:81:19:1e:ca:5a:38:7e:77:49:be:0a:35:1e:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:DF:95:95:12:8D:28:A8:41:71:99:00:2C:04:70:47:67:7B:9F
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:73:e4:a8:2c:3e:1f:73:5a:f3:57:af:b1:94:14:52:64:46:
a9:9e:49:2d:4e:03:a6:07:ab:69:6f:bc:54:62:c1:92:7b:d1:
de:cc:62:3e:e7:6c:55:c0:ff:53:49:1a:43:ec:ee:44:57:d5:
2e:25:87:96:44:a4:53:b2:b7:1d:1b:f1:3a:7a:40:3d:ae:05:
85:94:5c:80:16:b0:02:4c:7c:67:90:dd:19:1d:63:87:2f:3b:
d4:73:2e:94:bc:d5:b7:2c:dc:f9:b0:9d:74:e1:67:eb:3f:ce:
f2:78:1d:c0:ff:2c:4a:0b:69:bf:bc:8b:ac:4e:d6:59:76:75:
7f:ea:9e:03:12:1d:86:93:88:6e:f2:04:98:9c:4b:75:89:61:
4b:bd:04:94:14:2b:83:1b:fb:b9:1a:c1:01:86:d5:62:f6:f1:
49:67:ce:b7:62:58:c4:7f:94:eb:ed:db:27:bf:18:12:c0:38:
d0:19:1f:62:f0:97:f6:13:6c:7e:60:a3:5a:08:a3:8b:50:db:
35:b3:0e:fd:ba:0d:fd:38:be:33:0a:f5:af:ee:71:87:4d:fa:
5d:dd:66:47:70:70:4c:90:54:3b:e3:ce:f5:12:71:02:9e:df:
ce:d0:8e:57:82:36:ae:fa:23:3d:19:b7:a9:5c:dd:64:6d:99:
b9:d5:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:33 2026 by rpki-client