Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: 4RCorEfEwP6Mqth1/bLN3rI98nNSlouz7EZLn2ayVzI=
Subject key identifier: 42:34:33:9C:4F:12:9E:60:F5:EE:B4:94:12:AC:C5:D9:A9:BC:10:27
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019FABD119066E27D880E6C834BB0627F22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 03:00:34 +0000
Manifest this update: Wed 29 Jul 2026 03:00:34 +0000
Manifest next update: Thu 30 Jul 2026 03:00:34 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: bf7Sc6taen0DODwRygXmwVKhyklwqLoHWm2O3JfOTP0=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:19:06:6e:27:d8:80:e6:c8:34:bb:06:27:f2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Jul 29 03:00:34 2026 GMT
Not After : Jul 30 03:00:34 2026 GMT
Subject: CN=4234339c4f129e60f5eeb49412acc5d9a9bc1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:ab:66:e2:c1:19:34:6d:0b:b4:d4:d9:57:
5d:54:bc:ff:93:90:f4:74:14:16:06:ff:23:6d:f4:
74:51:fa:4f:8e:0f:b3:e0:e8:f1:4b:6b:f5:a6:37:
22:cc:e3:bc:30:a1:8e:04:10:6e:63:4f:a0:6e:db:
72:41:c5:98:28:6d:bc:63:a5:15:93:f3:8c:b1:04:
ab:75:3a:f8:27:57:51:25:25:19:4c:1e:1f:3c:17:
ac:6f:cd:67:90:09:0c:e2:28:b7:96:a6:a2:b6:a1:
77:50:c6:6d:4e:60:0e:33:fd:4c:ed:33:42:7f:d4:
cf:58:41:0a:4c:d0:b5:54:c7:3f:03:a6:e7:30:14:
7d:df:ac:3c:8f:da:24:55:4b:ff:ba:af:2e:68:71:
e3:bb:f6:97:04:54:96:0c:39:c6:59:14:23:29:ad:
5d:8d:3a:ab:19:fb:bb:70:31:52:b2:78:2b:e4:f2:
0e:24:5b:e3:11:8b:5e:d9:49:f9:66:28:25:f8:e9:
2d:9b:98:9f:c0:02:1d:a1:9e:10:14:8a:e5:63:ca:
db:f1:c1:3c:23:b0:63:f2:ac:5a:16:26:47:7c:c6:
9d:a8:12:6c:b9:02:25:4b:9e:e5:03:b1:61:24:43:
b4:0c:29:40:b7:dd:a6:35:4d:2c:1b:26:48:66:67:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:33:9C:4F:12:9E:60:F5:EE:B4:94:12:AC:C5:D9:A9:BC:10:27
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:22:c6:45:d2:e7:b5:11:90:4a:83:12:34:df:09:02:c6:
12:ee:8e:df:c9:c1:54:11:67:a8:0d:03:c1:16:4b:b0:d2:b9:
fe:25:03:eb:a9:f3:86:71:e3:32:b8:c4:24:cb:c4:9b:d4:39:
6b:10:8c:6e:73:b6:61:15:3d:51:eb:c7:1b:ae:98:46:8c:18:
2f:67:09:1f:dc:05:14:87:f3:64:0a:88:c7:8e:4c:b2:3b:ba:
f5:b2:ae:df:c7:b4:af:1d:7f:aa:cc:a4:b7:96:ec:d2:7d:fa:
31:d5:3c:ab:0a:57:58:8d:d1:f4:98:28:b6:ff:c9:18:93:08:
a7:8a:47:b5:24:eb:2d:e4:a7:fa:93:cc:d8:c4:e0:c4:a5:08:
e4:0a:d0:38:bb:71:88:a7:88:b9:9e:b6:66:da:cf:ff:34:42:
47:90:9b:8c:87:0e:98:d7:48:88:1b:59:5e:04:f2:1a:b9:bb:
0d:14:19:80:c3:f3:d5:a5:8f:69:97:bb:90:ee:25:ae:b0:ce:
58:c3:9b:95:f9:8f:0b:c8:ab:9e:bc:51:e3:72:94:a8:51:6f:
7f:9f:0d:b3:a1:d5:aa:6d:a0:ed:af:05:98:ae:5d:bf:12:23:
11:90:d6:64:05:6d:80:03:92:31:57:af:51:5e:40:10:f9:d9:
f0:3b:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:20 2026 by rpki-client