
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier: J6JU9LLg4ahCIiiw3jKK31/yd+SIt9dD09J3KE+VqWY=
Subject key identifier: D6:7D:0C:BD:66:8E:A6:C9:D4:FC:77:2F:D3:31:AA:14:95:35:E4:95
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 01A0C5FC287E96E4B764C8578FC82C6BC6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number: 13EA
Signing time: Mon 21 Sep 2026 22:00:32 +0000
Manifest this update: Mon 21 Sep 2026 22:00:32 +0000
Manifest next update: Tue 22 Sep 2026 22:00:32 +0000
Files and hashes: 1: 9aA3iLX_dTChIPCO6PgksQti4b4.roa (hash: fqGRMmb2kUR03lGLsFWhMcKnX+bdih5acXmK3pBtYbE=)
2: Exg0UvgeAfe-AZQtA_LavkNZKKU.roa (hash: gKA++u4Fw/ljBBOhyevOEbxsqlYiJYqc2cMPG6ua8TU=)
3: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: zA6ougFnylrUcqVIP+ZnP05uXq1HI1dnBfF5o6h2NO4=)
4: XvuMMh6_b9Q_-y9zoflvfhhJ8cU.roa (hash: arKO35haYoOypMHOByST819307xwbCJtuXRuiew9430=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:28:7e:96:e4:b7:64:c8:57:8f:c8:2c:6b:c6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Sep 21 22:00:32 2026 GMT
Not After : Sep 22 22:00:32 2026 GMT
Subject: CN=d67d0cbd668ea6c9d4fc772fd331aa149535e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:63:ac:bc:8d:3b:ad:d0:25:47:1f:26:c9:
0d:43:ed:86:51:e7:69:5d:fc:76:a5:d5:49:0a:ba:
cb:69:1a:ad:4b:e4:7b:71:71:61:1c:1a:41:fb:68:
62:54:31:69:98:1a:95:60:00:ac:fb:66:c3:50:b8:
cc:b8:85:8d:c6:f5:ee:29:b7:18:fd:3d:73:ce:ac:
25:8f:c5:20:c7:41:7c:16:2c:e4:a8:9c:a4:d4:ae:
c6:2d:9f:69:3c:f8:49:5b:5c:8e:d5:82:61:6e:80:
b4:3a:10:31:47:9f:8e:be:79:ed:3d:7f:0e:1d:c2:
51:91:f3:71:27:f0:95:ef:d0:42:5e:aa:69:6e:11:
42:b1:80:fb:20:0f:a0:cc:13:4a:6f:52:30:6e:19:
03:49:68:e9:16:43:a6:ad:fc:66:74:76:a5:ca:e6:
21:1f:19:a8:6e:c7:3a:3f:b6:45:29:74:ad:8c:fe:
19:86:94:67:24:99:b7:f8:37:6b:55:4b:96:63:b9:
fc:61:ac:c6:c6:2b:ac:9a:41:7a:63:54:d8:5f:9c:
ad:05:d7:74:a8:54:c0:38:c0:80:e6:9a:e7:3c:b9:
ad:a5:53:7e:c8:c0:73:15:ef:c8:1f:ef:35:44:5f:
71:d9:67:99:37:4c:51:23:c9:1e:b3:66:dd:16:00:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:0C:BD:66:8E:A6:C9:D4:FC:77:2F:D3:31:AA:14:95:35:E4:95
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d8:d8:70:6a:99:5f:66:f6:7b:f5:00:e4:d0:66:2f:02:94:
69:ec:0c:e9:1f:44:93:55:7e:a7:fc:52:c0:9b:f1:f2:2a:2c:
ce:ff:85:d9:bc:0b:64:ec:3c:72:46:ad:30:3a:39:55:57:fc:
ee:fa:02:02:23:17:af:66:17:3c:3e:3b:a1:85:75:42:54:72:
c1:10:22:5d:db:84:d2:c6:98:74:aa:5b:2c:81:5e:20:de:da:
4c:d8:e3:2d:ca:9d:54:20:df:36:a6:b4:a1:ae:63:71:53:46:
6c:31:c7:7f:b4:63:41:be:21:e4:43:55:a8:49:00:b4:45:a3:
ef:c1:bb:1f:55:5e:1d:0d:11:04:aa:f3:7d:c2:69:16:0f:41:
2f:2a:a6:8a:4f:82:31:ee:c8:66:08:64:cf:c2:85:9c:ce:86:
8e:e3:fe:8c:d4:79:e1:63:61:71:d0:db:05:8a:1e:ce:55:9e:
d9:7e:5a:6f:ab:ef:b4:3c:05:b9:aa:04:96:93:7e:d4:e0:cc:
b6:57:1a:6d:05:d0:b4:d0:d8:18:61:ac:00:6c:57:1f:49:8e:
6e:1c:d1:10:32:46:f3:95:66:5a:de:0c:86:14:4b:ac:c0:20:
8c:26:c3:a6:bf:7a:83:2a:98:37:13:5c:4f:4d:05:73:51:4b:
49:dd:be:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:33 2026 by rpki-client