Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: DGB2RLVa0GXdu+Wmhz7o6wXeTZCwKV9VbqvZEtgKBJg=
Subject key identifier: 0E:C0:FC:56:0C:43:6C:C1:D9:95:51:63:1F:CD:0F:2D:E4:06:72:1F
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 019D9A3EF9BDA97380C98692A45C6306D588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 101F
Signing time: Fri 17 Apr 2026 07:01:51 +0000
Manifest this update: Fri 17 Apr 2026 07:01:51 +0000
Manifest next update: Sat 18 Apr 2026 07:01:51 +0000
Files and hashes: 1: 8upv_qHHIISzToSAMP0-RhfYGtI.roa (hash: C7Jy+UEAqPDF0X+eyhzxq1LGOJLzx5Nt6AKDkKZbA9E=)
2: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: 9FWGVqWINCIzWDtkPwjRwguw3+p4OcDbf4/+5s6Hyr0=)
3: lOM9YI5AfClQ38kpLZQR1_F2EUg.roa (hash: +CFanZb7ldtygEZGWlBOOK8kO36urGbI3MSk/pZ6T4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f9:bd:a9:73:80:c9:86:92:a4:5c:63:06:d5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Apr 17 07:01:51 2026 GMT
Not After : Apr 18 07:01:51 2026 GMT
Subject: CN=0ec0fc560c436cc1d99551631fcd0f2de406721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:c9:b5:81:6e:88:db:a7:a0:bb:5b:55:44:
21:05:29:aa:de:47:3e:e9:11:6c:c8:77:71:31:49:
89:81:77:85:30:ce:48:56:e9:57:4a:0d:ee:ca:42:
bb:e8:99:97:28:15:08:aa:17:77:b7:18:a0:02:b6:
73:02:0b:1c:64:5e:8c:bb:66:4a:46:2c:45:fc:f6:
18:a9:9c:02:ff:af:da:47:e2:94:11:de:f6:49:56:
d7:e7:66:f8:de:90:a6:c8:53:bc:80:ab:3e:88:0f:
bc:06:a8:2b:31:51:bd:b7:5c:74:6c:72:3b:79:af:
77:6c:c4:2c:a4:bd:87:61:6b:6e:c2:f9:89:dc:80:
18:d5:58:31:33:19:8a:6a:98:63:d4:c4:39:c0:29:
a5:dd:65:aa:4d:fc:5f:19:47:f1:40:ec:3a:1f:b1:
76:15:3d:50:b7:ae:db:92:a8:e5:1f:07:61:15:f9:
ae:e4:00:40:58:31:5a:6a:6e:a2:1c:b3:de:75:ec:
54:94:18:2e:71:cf:ad:b8:79:e9:c0:68:0c:f7:9f:
f6:92:28:20:5f:f5:8c:4e:b9:ae:32:ff:9b:24:51:
8f:9e:f4:9a:e2:18:24:e7:f4:e8:d8:67:ce:de:14:
f9:76:9f:7b:07:28:cb:d4:0f:44:c1:8a:9c:fe:b6:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:FC:56:0C:43:6C:C1:D9:95:51:63:1F:CD:0F:2D:E4:06:72:1F
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:25:1c:0c:1a:04:66:1f:01:5b:ce:0a:6f:97:28:f0:1c:87:
9b:03:32:4d:59:f8:fa:6c:c2:c5:fa:6e:6e:3f:33:ae:90:97:
b7:04:c9:34:60:57:e4:b8:2a:90:24:d5:bf:31:f9:85:ab:4c:
c5:94:36:c6:30:4f:3d:63:ed:94:ba:74:f2:53:a6:88:0f:42:
1c:66:5e:6b:fc:d9:be:c4:90:48:54:e8:d7:75:c2:5f:b7:93:
4a:e5:26:19:8a:ca:b2:4a:2f:bd:a9:9c:a3:ef:03:72:77:42:
a5:32:d2:40:96:9c:66:58:74:cf:50:4b:ae:13:3f:0f:7b:13:
8e:49:e8:ec:fb:95:44:54:d1:d4:47:7a:54:f0:84:49:80:49:
b7:7f:f8:c9:92:82:17:3d:0e:fa:29:a0:74:8f:66:c5:58:22:
be:87:15:ce:95:5f:c0:d9:c7:99:9d:e6:31:b9:c7:80:ea:82:
62:1a:86:f6:70:c5:a0:eb:f9:13:55:5f:84:a5:de:16:a7:04:
a9:ab:f8:93:1f:59:63:06:53:ff:10:a2:d6:92:11:4f:dc:eb:
05:02:c0:62:d3:b5:70:d1:a2:ce:9c:36:b5:ed:d9:fa:c6:0d:
f0:17:6f:7b:af:bb:26:ff:6c:ed:60:1a:74:78:85:a7:6f:65:
8a:88:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:21 2026 by rpki-client