Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: LqPazS0fYwXSd+J09mcmua5Nbq2e6azWv7zH27qfzJc=
Subject key identifier: D5:D9:4F:1D:E8:02:49:00:CF:79:1A:14:0E:1C:46:AC:F3:F1:0F:A2
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 01A12FFCBF6C6B8C3CE16377156EC64C937C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 12:00:55 +0000
Manifest this update: Mon 12 Oct 2026 12:00:55 +0000
Manifest next update: Tue 13 Oct 2026 12:00:55 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: Myv2hvcWntusj7SCEM/7zyigJpCMnamFox6rxFhntYc=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:bf:6c:6b:8c:3c:e1:63:77:15:6e:c6:4c:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Oct 12 12:00:55 2026 GMT
Not After : Oct 13 12:00:55 2026 GMT
Subject: CN=d5d94f1de8024900cf791a140e1c46acf3f10fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:83:20:7b:e7:59:97:5c:76:3a:13:38:50:
85:cf:15:91:1f:5c:9e:b4:71:cc:88:58:cc:14:04:
23:32:8d:46:7f:26:52:b4:26:42:d9:7b:3a:34:82:
51:92:a2:3c:40:50:7c:d5:43:a5:e6:3a:be:40:63:
25:a0:4b:9a:ea:d3:5f:af:bb:13:de:b1:4e:22:40:
35:22:22:e4:aa:b2:5f:21:18:c5:81:98:e5:e0:01:
3a:fa:f3:67:b8:7c:c9:74:12:e4:49:bf:9d:63:78:
06:3f:bc:80:56:e1:ec:dc:53:f4:d1:c6:5b:ba:ac:
f2:d4:10:8b:e9:4b:43:2a:3c:6c:10:5e:1c:a2:f8:
b2:16:bc:00:f1:fa:46:66:68:ee:ea:64:6f:5f:3d:
62:f0:be:7e:1e:90:f4:58:b4:63:5b:94:13:1d:4e:
b8:47:43:ae:00:b8:2b:5e:eb:4f:0d:02:31:09:80:
40:e4:94:d6:25:a8:40:8b:5d:0c:70:23:8a:83:20:
c9:97:b0:3f:fc:be:9b:44:39:3d:7c:7f:cf:f0:80:
24:54:0b:34:41:b0:51:c0:86:d2:01:ef:4b:4c:fb:
f5:a1:38:f7:bc:9a:8e:8c:e1:ff:68:8a:cb:f9:33:
02:bc:29:6b:30:2c:74:92:d9:5e:0f:b1:b5:52:2e:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D9:4F:1D:E8:02:49:00:CF:79:1A:14:0E:1C:46:AC:F3:F1:0F:A2
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4a:35:a5:9b:b3:7a:c8:35:66:ae:1c:a7:93:e5:65:31:49:
ba:09:02:7f:b6:d5:b6:32:15:d8:e7:07:ac:b8:be:90:d1:7f:
f0:f8:50:f8:27:5a:23:76:43:56:aa:07:2b:ac:d0:13:db:22:
03:ce:73:4c:92:11:96:37:b4:22:67:e8:43:f3:d5:c3:d1:56:
61:3c:07:9b:d1:27:b4:c0:e0:48:66:05:88:db:b6:78:ad:3a:
01:a8:95:b5:4b:4b:76:62:bb:d8:7e:37:07:7e:2b:aa:de:e8:
32:cb:6c:11:32:be:7e:01:2b:42:ef:4d:fd:d8:c4:71:f5:c0:
aa:00:07:08:76:d7:a4:08:03:35:23:57:c6:c8:67:e9:3f:0b:
b4:de:1c:c4:11:fe:52:06:7f:cd:b9:ab:6e:d8:4e:25:ea:8b:
bb:d2:73:f2:30:ef:b9:7f:ad:cf:2a:85:cd:11:e9:ff:53:2e:
09:04:1d:13:c5:bf:ab:b8:06:d9:61:41:51:56:1b:46:58:48:
a7:33:0d:37:aa:22:ff:dd:fa:62:bf:8f:05:a6:db:cd:fb:de:
01:3d:bd:51:7b:48:59:63:33:d1:7b:3c:12:aa:dd:a1:8e:e3:
67:2f:3e:37:70:51:93:81:0c:c5:a9:21:f8:24:0e:ad:d5:f9:
5e:8e:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:55:46 2026 by rpki-client