Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier: fpxa/QzdHTekA19B/CrmapYLpj8Tmhe9sxG20iOpcmQ=
Subject key identifier: 7B:C2:9E:63:3A:8F:BE:36:70:6F:3B:02:F7:21:3E:77:17:1A:6D:77
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 019CAB6B0FF5EF1E430A178B5C5F71FAC0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number: 11CA
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: 9aA3iLX_dTChIPCO6PgksQti4b4.roa (hash: fqGRMmb2kUR03lGLsFWhMcKnX+bdih5acXmK3pBtYbE=)
2: Exg0UvgeAfe-AZQtA_LavkNZKKU.roa (hash: gKA++u4Fw/ljBBOhyevOEbxsqlYiJYqc2cMPG6ua8TU=)
3: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: eQB8PlKUdlTxmnLJTGte3viSCD7ogG81p4uqHkTHTW8=)
4: XvuMMh6_b9Q_-y9zoflvfhhJ8cU.roa (hash: arKO35haYoOypMHOByST819307xwbCJtuXRuiew9430=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0f:f5:ef:1e:43:0a:17:8b:5c:5f:71:fa:c0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=7bc29e633a8fbe36706f3b02f7213e77171a6d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:42:6a:f4:1f:0f:bf:5c:b9:94:a6:32:7b:
68:f7:98:89:3c:16:a1:42:de:56:2c:30:cc:85:7a:
ab:e9:0f:d5:34:90:f5:85:cc:29:5e:11:0f:77:c2:
7e:25:a3:85:35:77:da:b5:bf:bd:00:a9:a6:2c:1e:
b5:7f:20:09:26:59:d3:24:6c:f1:5a:fb:7f:a9:79:
e9:ee:c7:d0:a4:a7:a5:b4:e6:5d:02:be:93:bb:eb:
e9:79:af:93:ed:51:bb:78:cc:9a:43:fd:18:c6:64:
18:26:6d:5b:f0:3d:86:91:cc:76:47:28:38:cb:1b:
33:2d:80:d7:1d:12:a8:67:ec:e5:25:49:50:0f:33:
05:46:b2:04:e3:84:fe:5c:f4:e5:0f:1e:bc:c2:dc:
1b:88:c7:02:7a:e2:b0:78:e4:56:fd:9c:37:c3:c1:
21:ac:d5:00:3b:c1:cc:50:5e:25:6e:cc:32:16:b2:
5b:ec:82:96:a1:0f:54:a9:1e:90:c7:36:ca:63:63:
ee:5e:a8:fc:9e:b0:c5:b6:bb:87:ea:e5:a3:71:b9:
91:c7:db:b6:b8:9a:69:61:99:96:e9:92:1a:51:15:
db:1c:81:65:8f:07:16:4c:c2:ea:68:c8:4e:c5:dc:
c9:3d:38:79:ea:d8:ea:d8:d5:20:84:12:14:1c:d0:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:9E:63:3A:8F:BE:36:70:6F:3B:02:F7:21:3E:77:17:1A:6D:77
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:bb:33:ee:40:eb:1c:f8:20:c0:5e:5b:22:b2:ef:57:9c:
cb:47:1f:36:0f:17:d5:fe:75:85:20:2b:01:ba:21:e5:cf:9d:
0b:48:9a:71:99:9e:32:27:e6:9c:e0:24:b1:67:0a:f2:d4:fb:
0a:ca:f1:16:ca:6b:b0:88:41:72:ac:e1:ea:6d:85:06:89:c7:
48:f8:d4:83:93:4d:5c:82:3a:a2:0a:ef:b1:00:95:70:db:41:
c8:ff:f9:e0:ff:a9:57:9a:10:56:2b:55:7b:50:f0:7d:d2:8d:
ca:9b:b8:b0:05:6d:33:fd:a0:8f:ca:ad:e8:f0:77:cd:56:07:
3f:d6:c0:75:a9:b6:94:4a:a4:bf:a4:2c:d5:4b:e8:d3:fd:31:
cc:5c:e8:bf:37:12:95:24:68:cf:9a:5f:ec:ce:27:3d:a2:f5:
18:ab:f4:39:10:1c:b4:82:dc:03:d3:aa:04:e3:32:d8:79:e4:
cc:c6:25:ee:8a:4b:9b:0c:ab:67:7a:82:c1:6a:8a:a8:b4:94:
08:a2:5e:22:f2:a2:c0:0b:31:cb:ce:4a:4d:0c:2b:e8:79:4b:
68:b6:2d:57:d9:a9:b2:44:57:78:1c:81:e9:cd:36:be:58:21:
24:6b:45:af:cd:e6:eb:9e:0e:bb:a3:fd:f4:ac:39:1d:6a:28:
03:59:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:08:02 2026 by rpki-client