Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: 8Y7rjhmEUtr0ePKd6Ea73zfD5nftue/3w2w98tPK0sU=
Subject key identifier: 59:40:09:DF:4B:C9:95:9C:FB:39:0B:B6:1E:B7:16:F5:73:EC:B6:47
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 019CACB467D3DCFD4533942F3547C06D78D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0FA4
Signing time: Mon 02 Mar 2026 04:00:29 +0000
Manifest this update: Mon 02 Mar 2026 04:00:29 +0000
Manifest next update: Tue 03 Mar 2026 04:00:29 +0000
Files and hashes: 1: 8upv_qHHIISzToSAMP0-RhfYGtI.roa (hash: C7Jy+UEAqPDF0X+eyhzxq1LGOJLzx5Nt6AKDkKZbA9E=)
2: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: 0+Dak9L2iX05R3r9Zdo/1AduRo9wSWIF24cQSwgMalg=)
3: lOM9YI5AfClQ38kpLZQR1_F2EUg.roa (hash: +CFanZb7ldtygEZGWlBOOK8kO36urGbI3MSk/pZ6T4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:67:d3:dc:fd:45:33:94:2f:35:47:c0:6d:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Mar 2 04:00:29 2026 GMT
Not After : Mar 3 04:00:29 2026 GMT
Subject: CN=594009df4bc9959cfb390bb61eb716f573ecb647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:4c:00:86:83:62:31:d6:60:42:78:2d:65:
53:f8:5f:a0:9a:d7:47:e6:d3:28:32:2a:92:24:38:
00:41:46:29:2c:27:fd:ac:cf:44:dc:45:87:d4:57:
51:ad:9e:d6:b9:ea:f3:5d:32:37:29:1c:55:df:f8:
92:66:90:cd:01:f0:15:6d:e8:35:ea:10:65:91:51:
93:76:2d:0d:b8:23:fc:82:65:75:dc:1a:a5:08:c3:
89:a0:af:7b:91:0a:b2:0f:9d:55:db:78:93:f8:7c:
15:50:30:4b:7b:14:a5:0a:40:77:6d:f5:d0:ab:dd:
88:41:61:a1:eb:eb:02:9f:a8:07:16:34:7d:1e:82:
c8:ee:86:81:ed:a2:5a:d4:ad:62:d7:d5:58:45:93:
5b:ec:85:22:86:c7:85:5a:63:37:07:05:3f:a7:6d:
26:1a:6d:96:76:dc:ee:7f:f4:bf:ba:62:04:9e:1f:
25:63:47:ff:32:3e:57:59:23:3c:f5:57:59:8f:de:
ac:b6:77:3b:60:77:b2:a9:d5:d1:36:c8:cf:e0:11:
a6:8b:e3:69:6d:3a:d0:59:e7:d6:2a:b9:91:b6:4d:
6e:e7:83:31:15:a4:b3:bf:90:e9:98:77:cd:9b:8f:
87:a5:7c:e4:e7:e4:6d:af:1c:41:9e:6a:b9:67:8e:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:09:DF:4B:C9:95:9C:FB:39:0B:B6:1E:B7:16:F5:73:EC:B6:47
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:23:4b:09:6d:11:40:20:ac:ed:c4:07:e8:3d:f6:1a:e9:80:
1f:f0:de:78:4c:f6:c7:08:0d:84:22:00:b4:e0:80:e8:e5:fe:
26:fa:d8:ba:fb:2d:56:15:ab:03:bb:e4:c5:96:91:e1:73:44:
28:12:df:ce:b8:60:7c:37:d7:3f:74:9a:c9:18:c3:bc:48:fb:
f8:47:41:95:8d:cb:12:11:1c:f6:32:f2:1f:5f:9d:f9:9f:1e:
29:38:1f:a9:2b:d5:d8:60:fe:ac:d5:8f:6c:f1:6b:54:b2:4f:
16:92:0f:aa:32:d8:5b:a8:35:e3:f0:d9:ef:4a:60:ee:57:49:
fd:e2:ad:d8:17:cd:94:e0:df:f7:c2:33:69:91:3b:ba:c8:41:
fe:51:1b:f4:88:61:2b:21:5a:2b:13:d3:76:ce:c2:cb:52:99:
95:e3:a5:28:59:69:57:c1:26:4c:f7:ed:f6:da:bd:58:c0:39:
3b:0a:4f:d9:c7:da:5d:ad:98:90:76:0e:42:63:a3:75:07:4e:
8f:f3:bc:e6:b0:6d:e3:79:10:ba:e4:f3:be:93:0e:39:f6:b3:
c6:64:4e:68:dc:b8:60:ab:04:f0:fd:6e:1e:d1:f6:a1:4c:40:
b6:62:1a:30:3d:30:c6:28:28:51:e4:1c:01:73:2e:fa:4f:cf:
2a:44:90:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:38 2026 by rpki-client