Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: URE81VA/Z7d4xQc4TbV/Lc8r4gr0gIYdBvIz6UG5f1Y=
Subject key identifier: FB:7E:33:71:D5:12:0A:C4:34:F4:6C:0F:66:1E:5D:F0:D0:74:E5:AC
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 01A0C47BDBEBE84B7A03607DC04424209B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 15:00:46 +0000
Manifest this update: Mon 21 Sep 2026 15:00:46 +0000
Manifest next update: Tue 22 Sep 2026 15:00:46 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: vtEHF/+um55PC2UJbzUU0avcm5K7EdgDIP3ymKkfdwk=)
2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:db:eb:e8:4b:7a:03:60:7d:c0:44:24:20:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Sep 21 15:00:46 2026 GMT
Not After : Sep 22 15:00:46 2026 GMT
Subject: CN=fb7e3371d5120ac434f46c0f661e5df0d074e5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:0d:c8:ea:93:61:cc:2d:1f:52:d2:2d:88:
f7:3e:f1:92:5a:c7:e5:a6:4d:78:2b:95:a7:30:fc:
3e:2c:f7:c4:5b:26:93:6a:c8:b2:59:60:91:9b:bc:
51:56:ab:1c:61:97:53:4a:95:47:67:5e:ef:fe:5c:
5c:1d:5b:e2:1f:4e:bd:bf:b7:a1:0d:80:10:c6:fb:
ac:c7:ee:cf:2c:58:6b:bd:5a:9b:a1:b8:13:80:c8:
ed:1c:ca:56:10:3b:df:1d:2b:46:ff:9a:78:35:70:
e7:27:71:c7:b8:91:75:8c:cc:ac:58:cd:67:26:5c:
67:07:56:19:b5:de:d0:db:a9:b9:1c:ad:83:50:b7:
81:48:d7:c0:c4:ba:22:9f:b8:d3:67:3f:9b:a0:b1:
a5:b2:a0:31:4f:fb:4b:6c:c8:f1:9c:93:e1:3c:e0:
db:2f:ad:5b:37:ac:d0:0a:d6:69:dc:5f:22:ca:71:
b3:90:e0:d3:a1:19:13:8f:53:09:0d:0b:12:e8:39:
9c:82:36:25:63:b0:9f:d5:5f:8b:3b:3b:8c:b9:75:
ec:75:f3:f9:ce:f0:0f:b9:14:9d:8a:77:db:3c:83:
f0:81:0e:e8:48:eb:85:ed:b9:d0:1d:c8:a2:d3:10:
60:d1:a5:78:a8:e7:2d:23:7d:60:e2:fe:d8:70:77:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:33:71:D5:12:0A:C4:34:F4:6C:0F:66:1E:5D:F0:D0:74:E5:AC
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c9:40:9a:73:5f:50:35:85:11:38:89:c0:bc:65:25:9a:bc:
91:2e:aa:0f:a3:5f:b4:43:03:62:18:72:e0:a4:1d:79:39:05:
5e:37:a7:24:fe:4c:e3:f1:3e:74:6a:3d:1c:48:81:35:bc:59:
d6:63:80:bc:cf:27:24:17:44:8e:e6:20:9c:3e:a8:97:95:99:
55:9b:55:dd:83:87:2c:47:ca:39:e3:e7:19:50:7a:98:3d:f2:
c4:d9:86:6a:5f:ea:ec:93:d7:58:8e:0b:9e:d7:22:72:f1:65:
6f:8d:c0:4f:3b:87:bd:dc:bb:30:83:38:57:56:ba:ab:e5:94:
0a:f6:43:c7:f9:14:5a:59:06:e2:51:d0:85:46:29:cb:57:b0:
5d:13:c6:f7:7d:38:b5:56:c6:90:b8:74:07:57:6b:d8:6b:95:
40:1d:a8:27:3d:db:53:51:e6:23:2f:72:57:1f:d7:df:c7:b5:
00:71:58:f9:c0:29:3a:6b:7f:ca:2c:a3:c5:b7:9a:19:b1:23:
b3:93:6b:2e:f7:e0:fc:90:a7:ca:2b:73:ab:e5:ea:f5:20:1d:
3d:24:dd:ce:2e:4b:47:14:ba:56:cd:18:a5:5c:19:36:da:06:
1a:cc:af:c5:63:eb:d5:ae:e1:7a:86:97:e4:ae:b0:ab:d5:42:
fb:64:f8:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe9vr6Et6A2B9wEQkIJsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYWY1ZGM2MjljZDQ5Mzc1OTdmM2ZjZDg1OGNhNWM4MGVk
OTdjNTAwHhcNMjYwOTIxMTUwMDQ2WhcNMjYwOTIyMTUwMDQ2WjAzMTEwLwYDVQQD
EyhmYjdlMzM3MWQ1MTIwYWM0MzRmNDZjMGY2NjFlNWRmMGQwNzRlNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbENyOqTYcwtH1LSLYj3PvGSWsfl
pk14K5WnMPw+LPfEWyaTasiyWWCRm7xRVqscYZdTSpVHZ17v/lxcHVviH069v7eh
DYAQxvusx+7PLFhrvVqbobgTgMjtHMpWEDvfHStG/5p4NXDnJ3HHuJF1jMysWM1n
JlxnB1YZtd7Q26m5HK2DULeBSNfAxLoin7jTZz+boLGlsqAxT/tLbMjxnJPhPODb
L61bN6zQCtZp3F8iynGzkODToRkTj1MJDQsS6DmcgjYlY7Cf1V+LOzuMuXXsdfP5
zvAPuRSdinfbPIPwgQ7oSOuF7bnQHcii0xBg0aV4qOctI31g4v7YcHdeswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt+M3HVEgrENPRsD2YeXfDQdOWsMB8GA1UdIwQY
MBaAFDOvXcYpzUk3WX8/zYWMpcgO2XxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUt
ZTI2ZTlmNTFkZGIyLzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUtZTI2ZTlmNTFkZGIy
LzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVclAmnNf
UDWFETiJwLxlJZq8kS6qD6NftEMDYhhy4KQdeTkFXjenJP5M4/E+dGo9HEiBNbxZ
1mOAvM8nJBdEjuYgnD6ol5WZVZtV3YOHLEfKOePnGVB6mD3yxNmGal/q7JPXWI4L
ntcicvFlb43ATzuHvdy7MIM4V1a6q+WUCvZDx/kUWlkG4lHQhUYpy1ewXRPG9304
tVbGkLh0B1dr2GuVQB2oJz3bU1HmIy9yVx/X38e1AHFY+cApOmt/yiyjxbeaGbEj
s5NrLvfg/JCnyitzq+Xq9SAdPSTdzi5LRxS6Vs0YpVwZNtoGGsyvxWPr1a7heoaX
5K6wq9VC+2T4rQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:13:23 2026 by rpki-client