
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: zJKRLOCsGdtYNhNrKAYGj+qeOviAnMcDC9AS6J7COGk=
Subject key identifier: 1D:9D:3F:1E:BB:77:4B:AC:86:2D:95:76:FD:9D:66:47:AC:8A:0A:DE
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 01A0BF1ECAE811C488A2D828D8F561343814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 14:01:01 +0000
Manifest this update: Sun 20 Sep 2026 14:01:01 +0000
Manifest next update: Mon 21 Sep 2026 14:01:01 +0000
Files and hashes: 1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: 5cguTiIEmSVJzCquwqlf4d0ZKrBhu9di6kWo5ZuLfRg=)
2: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (hash: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk=)
3: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (hash: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw=)
4: kPXOPfjYRrsOHKmt2uydskWrmx8.asa (hash: LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:ca:e8:11:c4:88:a2:d8:28:d8:f5:61:34:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Sep 20 14:01:01 2026 GMT
Not After : Sep 21 14:01:01 2026 GMT
Subject: CN=1d9d3f1ebb774bac862d9576fd9d6647ac8a0ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:93:44:f6:d6:33:ae:3b:a2:a0:7b:e1:ec:
82:46:55:3e:cc:a5:94:b4:d9:7a:39:b0:87:de:d2:
71:1b:e3:f4:95:f7:e6:eb:cc:5e:68:f1:ce:55:ed:
26:0c:cf:0d:6d:31:2d:8c:4e:61:52:e9:8a:34:96:
73:b3:ec:5d:d5:24:5a:bc:45:9d:12:98:e5:90:26:
0f:12:69:6f:3f:6a:16:15:f7:20:72:fc:95:37:09:
72:db:95:27:98:1d:69:f3:1c:dd:4d:11:a6:2e:31:
bb:d8:a7:6b:44:cb:16:03:6e:d8:f3:5c:9e:1a:00:
91:af:70:3d:bb:e4:27:67:d2:78:4b:19:6d:8e:10:
d7:23:49:a3:01:32:ec:d6:0e:ef:14:21:35:27:18:
f3:d2:c1:2a:1d:7f:a8:df:34:5e:1c:85:95:ff:1d:
64:96:88:47:61:ea:ae:48:7d:fd:ba:7d:72:7c:4f:
ca:f6:94:06:e1:c6:45:1a:f1:24:e6:3d:7e:ae:eb:
74:11:1f:a9:2f:ce:6e:58:69:75:40:8d:91:22:16:
16:a8:f9:3c:6f:38:75:19:36:bd:76:ca:a8:b8:b9:
38:89:5b:48:d7:b6:a1:e7:c0:dc:f3:7c:8a:b1:6a:
d0:d5:da:2a:85:3e:ae:d8:d7:8c:81:94:04:82:67:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:3F:1E:BB:77:4B:AC:86:2D:95:76:FD:9D:66:47:AC:8A:0A:DE
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:17:7e:e7:dc:e5:92:23:9a:b3:a2:39:02:e3:c1:0d:83:33:
6e:f5:da:ab:68:62:4c:e4:fb:b9:10:d6:f6:ca:c9:36:ab:8f:
d5:eb:fe:76:d7:e3:63:26:3b:85:1e:9a:62:a4:ea:68:1a:f0:
cf:7d:11:17:55:95:6d:f0:7d:74:85:70:49:b0:78:15:d0:c2:
32:0f:bf:69:6e:64:df:03:a8:51:0e:26:a1:89:de:8b:80:bb:
40:57:a0:26:3d:40:ce:61:da:12:4f:53:0e:e5:85:d3:ce:13:
72:1b:58:0e:7d:dd:8f:35:b9:d2:ec:fe:4b:e8:29:fd:6b:65:
cb:63:cf:8f:ca:cb:ed:e1:44:fc:c4:2e:ba:1b:23:e2:4d:78:
76:e4:a3:22:01:8b:20:06:ca:03:2c:81:cd:d1:f0:39:b9:4f:
6d:61:b3:d1:18:92:de:0d:36:cf:a2:f9:28:4a:20:97:9d:89:
9d:52:d8:0f:8d:86:27:f8:4e:34:af:af:3a:3b:a7:62:3d:34:
90:f8:08:8a:a0:e1:ad:3f:e8:b7:eb:da:59:87:26:e7:77:ec:
ca:f2:d8:26:c2:7b:da:19:c7:41:8c:9b:8c:6c:9c:6a:5f:c9:
2e:96:6c:d3:f8:e5:1d:8b:bf:09:76:d3:39:8c:27:7a:fe:89:
63:ef:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:36:51 2026 by rpki-client