Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: AhGwycvtG5DnFASpOIzkkN2YFhyVgYmYygF/ts4olsw=
Subject key identifier: 74:CB:BE:19:19:1F:88:75:F9:19:B4:A8:28:C0:A7:F6:A3:E2:43:82
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019D9A3F0CC16A02F977D9AAE2F1B0427E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0FA3
Signing time: Fri 17 Apr 2026 07:01:56 +0000
Manifest this update: Fri 17 Apr 2026 07:01:56 +0000
Manifest next update: Sat 18 Apr 2026 07:01:56 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: AfsYfQ9GGtDHNr62WupuxUqUmH2AiITxzsioiZ49w2s=)
2: qnNx4BbcqCKw4qU9ggM-AvK2t-g.roa (hash: IB/xWqsQwwimaAQrVy3VNbAYORDCQE0bYCHpAZf/Bpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0c:c1:6a:02:f9:77:d9:aa:e2:f1:b0:42:7e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Apr 17 07:01:56 2026 GMT
Not After : Apr 18 07:01:56 2026 GMT
Subject: CN=74cbbe19191f8875f919b4a828c0a7f6a3e24382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:18:e7:a7:30:68:1a:17:df:9d:c2:c9:fa:
0e:77:c1:81:7b:80:76:75:0c:e9:66:2a:d7:bc:45:
6c:8a:7f:b5:54:26:4b:1b:9d:b0:c9:05:aa:50:11:
45:ca:fe:b5:f0:23:9f:31:f3:e7:f6:f0:75:9c:3c:
fe:24:0d:75:49:c8:f2:c9:33:b0:47:18:db:ee:16:
b1:f8:b4:6b:24:a4:ab:b5:2b:ef:88:94:76:2f:0b:
d5:d2:74:c1:e9:50:be:18:da:9e:6d:b3:5a:3f:57:
b1:79:f8:28:28:90:fe:f7:8e:92:e0:2d:08:a4:c2:
a3:7b:6b:70:07:45:ff:b0:e4:32:39:88:41:f7:45:
48:96:6a:39:39:f7:a9:03:df:f0:d5:40:e9:cf:f7:
27:95:6b:50:a4:4a:2d:de:93:37:ed:4f:67:9f:32:
69:0b:62:05:1d:ce:bd:e3:be:7d:b0:54:5d:1c:9a:
f9:65:fc:b3:a1:cf:8e:ca:c7:30:aa:0d:8c:23:47:
e6:ac:c6:6e:96:db:e0:2c:24:63:77:2c:ac:43:eb:
49:9c:3d:5e:33:c2:a8:ae:e6:45:44:5f:f4:30:fa:
a7:d5:05:44:b5:ec:ee:c8:d6:d6:ea:45:2a:17:8c:
46:1e:e2:49:88:07:01:86:76:68:68:f3:34:f9:99:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CB:BE:19:19:1F:88:75:F9:19:B4:A8:28:C0:A7:F6:A3:E2:43:82
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f9:92:15:34:b5:38:33:8e:82:9f:f7:b9:78:11:3e:f4:6b:
9d:fd:a2:89:06:99:71:96:f8:a3:87:c9:39:71:65:f8:cd:77:
d3:87:dc:52:0a:b9:0b:1e:89:32:a9:09:cc:90:df:f2:28:d1:
4d:80:94:76:80:68:32:a5:61:1b:17:b1:74:ad:e6:52:8f:ba:
51:9c:21:56:29:67:4c:61:52:41:a2:6b:46:b4:ed:f5:20:dd:
25:c4:f5:2b:ef:17:2d:9d:ac:bc:9b:84:09:12:50:13:fe:9d:
b1:82:8f:c9:48:70:4d:81:53:c5:29:e3:3b:52:5c:8e:77:a0:
c6:2c:10:b8:64:ea:f9:d1:44:f8:3f:b6:49:b1:7a:0f:d6:2e:
94:b5:ff:ae:bc:d4:0a:e9:c7:40:3e:85:34:4e:82:c0:f5:82:
7c:40:fb:a1:01:9b:64:da:ef:01:85:66:4b:4f:b4:b1:3c:b8:
15:2a:52:eb:5b:f0:33:1b:81:a6:59:01:1c:69:43:da:ab:53:
45:8c:87:90:c9:fd:2b:73:00:1e:cc:1d:cc:29:33:cb:f5:ba:
7f:24:ea:94:98:09:f2:36:38:27:18:a0:9b:83:75:93:5f:95:
9e:db:2d:85:48:04:ff:b3:74:0b:be:27:23:ea:f1:26:ca:1e:
3b:57:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:54 2026 by rpki-client