Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: P0ex3Dlq67NZ/eWZVQptGbp/skimdmABb/9gWM7bZjA=
Subject key identifier: 71:A3:17:92:36:30:03:45:F5:9F:67:AA:DA:74:C4:57:60:59:B8:15
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 019CABD976FF6AB297D11061F3FF1B02FA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:21 +0000
Manifest this update: Mon 02 Mar 2026 00:01:21 +0000
Manifest next update: Tue 03 Mar 2026 00:01:21 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: Y80KSDNjWP4X8h9EK8ZkH0+oBC7NVqBpCddDJUkz9fk=)
2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:76:ff:6a:b2:97:d1:10:61:f3:ff:1b:02:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Mar 2 00:01:21 2026 GMT
Not After : Mar 3 00:01:21 2026 GMT
Subject: CN=71a3179236300345f59f67aada74c4576059b815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:e2:e6:be:8b:55:04:dc:3a:2a:3c:24:f3:
39:24:81:c7:bf:58:d1:43:35:2b:d3:6a:15:ca:98:
df:ba:7a:bb:e2:ab:e0:c8:60:c5:94:ea:e0:d2:ae:
ff:36:26:1a:29:83:9f:39:0c:ff:82:f0:99:4d:ee:
d3:56:02:26:90:15:a6:46:f8:77:84:71:68:3a:36:
5c:27:3c:84:6f:28:57:c5:f6:7b:a5:88:36:f1:09:
e6:95:1a:34:d4:04:b8:e8:5e:a7:55:db:83:81:44:
06:b6:74:0a:06:bb:e1:62:01:6b:b9:21:0c:31:03:
dd:fa:07:33:22:72:94:24:17:a8:b2:df:64:47:fa:
5c:81:26:04:f4:5e:99:49:12:87:40:90:7f:29:cd:
f5:ca:96:7f:1a:09:47:55:e3:5d:4b:5b:aa:ef:ef:
a4:ce:a8:07:8d:0f:f4:a1:b2:eb:cf:3b:2c:98:9c:
ee:07:60:24:4e:7d:00:df:4e:ac:24:43:d6:16:4d:
97:76:fe:d1:07:90:06:eb:7b:2e:d4:75:64:f1:74:
50:b8:b0:e3:43:e5:ae:91:61:7e:19:9a:2e:42:2a:
77:cd:25:54:a4:8a:a7:8a:57:91:03:15:6f:65:df:
6a:a2:81:fb:7d:60:19:57:ac:76:d7:9a:a9:c4:92:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:17:92:36:30:03:45:F5:9F:67:AA:DA:74:C4:57:60:59:B8:15
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b4:92:06:c6:1d:de:98:a9:49:a9:c7:5f:ec:4f:53:0b:02:
09:da:4b:c5:22:56:d8:01:96:4e:a7:0a:1f:9a:d5:5c:01:e6:
e0:54:74:9d:e4:41:a5:cf:58:60:6c:73:00:20:4d:db:e8:12:
28:f0:f8:28:e1:42:8f:ce:8a:1d:60:7d:7b:aa:eb:96:f8:26:
17:8f:f1:48:8c:34:93:ff:ab:65:f6:df:6d:53:2f:20:78:1e:
45:da:8d:0b:3b:c4:b5:dd:25:f7:e6:c3:90:9f:c5:34:01:37:
96:1a:8e:ca:7b:e9:36:87:43:26:63:4a:3a:7a:fc:16:d7:a4:
e2:75:55:2f:29:00:57:8e:5e:ee:81:d6:ed:2d:88:cb:b2:fe:
5b:7e:1f:a4:0b:85:c4:24:84:13:25:c0:6f:73:49:24:79:25:
0f:51:4c:dc:59:f2:ea:55:18:a5:57:05:26:ee:e6:c4:ca:92:
84:27:d5:a8:55:f2:d2:69:8f:2b:74:6d:ca:ee:b4:0f:19:fd:
13:16:ec:9e:16:61:97:58:83:ba:d9:fe:b2:7e:9a:00:5e:29:
7e:4d:95:77:0c:f1:79:2c:53:67:c6:95:61:2b:42:06:56:c6:
4e:69:8e:09:2f:fc:4f:a2:f1:bb:05:a3:07:ec:8b:34:fb:3f:
e2:2c:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:43 2026 by rpki-client