Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: 7yXS9J9RfEnIsDvjhlgEU4Fs6fBsOXZB+/JY5DdRXtQ=
Subject key identifier: 55:14:12:BF:6A:B9:67:63:F4:D4:76:10:B6:D6:F4:FB:1C:70:A5:CE
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019CAAC6412163AA09EFECD5C69FC6F72AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0F27
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: rl3YXrIB8iC8O3i36oICY87n7cc0kKSjeFvuN68Crjw=)
2: qnNx4BbcqCKw4qU9ggM-AvK2t-g.roa (hash: IB/xWqsQwwimaAQrVy3VNbAYORDCQE0bYCHpAZf/Bpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:41:21:63:aa:09:ef:ec:d5:c6:9f:c6:f7:2a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=551412bf6ab96763f4d47610b6d6f4fb1c70a5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:7e:f4:b9:32:fc:59:77:93:db:3c:95:bb:
70:f2:58:77:97:b5:b0:f5:be:7d:23:a1:78:bc:97:
39:5b:ec:12:0b:8c:68:9a:c2:70:dd:1c:80:22:70:
60:bf:8c:f0:6a:49:1c:91:db:09:31:3b:42:21:5e:
51:f7:0a:d3:fd:ba:81:d4:db:a7:d2:e9:05:9a:ef:
21:ab:62:eb:e5:d3:fd:36:a8:e9:72:50:b5:08:84:
69:ca:fa:39:61:16:ad:2f:33:1e:8d:72:90:fd:1a:
9b:34:80:dc:ab:22:7d:cc:b4:4a:ad:ee:bd:7d:ae:
a3:ef:31:b9:c9:4e:6d:5e:3a:e6:10:b3:bb:cc:c2:
bf:cd:1d:e2:9d:b4:2a:12:22:2b:16:a9:4a:fd:8b:
6e:7a:af:77:ec:fa:0a:3f:5b:f9:04:87:1d:11:a2:
ed:4a:2f:a5:52:3f:27:c8:61:43:09:c1:37:77:5c:
93:f4:00:fe:cc:69:32:cc:34:9b:11:b1:2e:7a:78:
a4:f2:54:94:bd:9a:06:c4:7e:f4:ff:9e:ba:d1:37:
96:6d:2b:5f:45:dd:f9:62:de:26:dc:dc:9c:05:e5:
b5:01:cb:cf:09:73:30:8c:d9:be:49:3e:f1:6a:44:
ec:8b:65:0a:9e:03:34:99:6a:29:f8:46:30:15:f0:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:12:BF:6A:B9:67:63:F4:D4:76:10:B6:D6:F4:FB:1C:70:A5:CE
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f6:e3:30:96:b5:8e:5f:c5:1e:0d:f3:a9:e1:80:0a:d9:32:
17:df:16:99:45:af:1a:0a:57:ee:bf:42:e5:67:e8:75:ad:b7:
00:c2:e1:4b:23:12:7f:ea:1d:10:b9:66:2f:0c:51:09:5d:28:
3d:17:98:47:d9:96:1d:6d:4a:61:38:56:b1:a2:4e:df:23:cd:
1a:4b:11:91:62:11:a5:0e:be:ab:d6:68:85:b6:10:ac:3c:0b:
f3:a4:70:61:33:20:33:35:ef:72:11:df:90:d5:e4:a7:56:c6:
02:c4:08:5c:d2:af:a8:f6:10:e6:5e:36:d7:9f:fc:25:1a:a9:
cf:d9:5b:2f:ef:e2:64:4e:30:36:c4:83:33:76:69:ab:ac:85:
ca:98:27:19:2b:a7:6f:54:45:15:0b:49:85:de:70:8c:b0:ff:
db:75:0a:bd:1f:15:b4:85:71:70:7b:65:2b:eb:d2:2a:fd:10:
92:25:66:77:07:92:d0:69:c0:8f:af:41:08:f7:db:01:17:de:
43:78:ac:92:f0:8e:6e:d4:4e:d2:4c:59:14:fa:9d:6d:dc:84:
f7:9c:c8:2f:2e:cf:de:d6:e9:25:05:e1:3d:f7:19:a8:73:78:
e7:66:37:d1:e2:a8:dd:10:ef:30:d4:5d:0b:13:ba:ec:9b:68:
10:22:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:42 2026 by rpki-client