Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: GB3KOtDjdVYu4qS1fntoYlg51IiRlX33QZLSjwxHxQ4=
Subject key identifier: 6F:50:7B:64:7D:0C:C0:88:FE:6F:F9:9B:24:27:DC:95:40:2E:6B:CB
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019DA4540B07C849C14463AF8707B8AA091D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 06:01:04 +0000
Manifest this update: Sun 19 Apr 2026 06:01:04 +0000
Manifest next update: Mon 20 Apr 2026 06:01:04 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: riGVA6Lc29StzB5lPtY0/qM0TYAFsr3wq6NZv81sVGk=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:0b:07:c8:49:c1:44:63:af:87:07:b8:aa:09:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Apr 19 06:01:04 2026 GMT
Not After : Apr 20 06:01:04 2026 GMT
Subject: CN=6f507b647d0cc088fe6ff99b2427dc95402e6bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c9:6a:35:cd:4d:20:82:26:20:72:f6:d7:f7:
a2:cc:da:8e:10:0e:28:16:8b:49:fc:f4:5e:61:c8:
7b:54:79:e5:48:98:4e:b2:a8:10:17:e9:72:79:3e:
ff:19:90:7f:36:1f:6d:41:31:33:f4:76:af:8d:61:
e3:39:51:62:c2:fc:73:e1:e1:31:d8:f8:bd:c4:51:
6c:8c:b8:4b:c9:f5:0a:37:61:86:6d:0f:65:26:0d:
cb:77:7d:7f:93:e7:2c:e6:2b:6b:2a:6c:a7:b3:a1:
35:78:1e:61:6f:ab:c5:8b:8c:e6:e4:04:db:88:92:
ad:04:10:40:96:80:26:01:5c:c4:32:9c:75:b6:a8:
39:8b:85:94:fc:93:3f:17:4a:7a:92:61:68:0a:f4:
5b:ba:b8:f0:9a:89:71:e2:39:1c:e0:0a:1d:14:2d:
7a:e1:6c:f3:0f:9d:4c:30:98:b3:d4:2e:19:fc:f3:
c8:e5:6f:f8:78:b0:a8:18:eb:65:0a:e4:51:f7:6f:
e2:85:fb:e5:dc:1c:5e:f3:6a:20:f9:c3:a8:10:6a:
b0:a5:12:ab:b9:63:e0:85:49:19:0b:e3:55:53:75:
50:31:9a:ce:ef:d3:fb:ab:7c:8b:75:f6:4e:e8:59:
be:63:b3:ef:aa:a2:72:22:1c:da:a5:6c:86:31:94:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:50:7B:64:7D:0C:C0:88:FE:6F:F9:9B:24:27:DC:95:40:2E:6B:CB
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:4f:be:5e:d1:52:fe:fd:51:62:15:59:64:7f:33:75:44:
19:bd:2c:47:3a:99:d5:36:ae:8f:06:a8:3e:e6:66:cb:6f:6c:
a7:09:e2:67:8c:9b:5d:ae:f6:2b:3f:c2:a6:ba:6a:c2:d4:7d:
35:ae:8f:43:15:14:66:b2:c2:a8:f2:e6:8d:d9:0f:43:c7:11:
73:5f:f0:de:0a:ed:00:7f:53:4c:af:81:c7:8d:60:cb:8e:e3:
51:3d:ed:df:5e:59:a4:0b:33:a1:62:91:ca:0a:10:93:d3:2f:
e6:a8:59:85:68:62:76:91:3e:d6:01:15:9f:5f:8a:4e:3f:5a:
4d:b1:76:fd:9b:43:81:fc:ca:b6:f2:d0:8b:76:1b:8d:30:1b:
6a:9a:14:b1:9a:db:2e:13:86:58:11:23:c4:76:e2:3a:42:b8:
8b:f6:7b:d8:c6:6e:ef:37:c0:b4:5e:c9:b9:81:d0:58:be:86:
00:65:00:3e:f6:e9:65:6e:c0:5e:88:e4:5d:2f:44:f9:27:d3:
fe:05:28:5e:fc:6a:8f:3f:49:3b:d8:92:bd:e3:4b:89:fc:03:
22:c2:1d:1b:71:bd:93:0d:d0:2e:bf:4a:2c:0b:1c:59:07:6d:
84:18:e0:6c:76:d1:4b:2d:93:f3:cd:d6:45:79:8f:dd:d5:94:
2a:81:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:46 2026 by rpki-client