Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: l+sRrShHhlOcVfoCYs9E62V3WkwhKrScdIfvBCSi6Pg=
Subject key identifier: 23:3D:A4:F7:E9:41:8F:5A:02:78:77:16:98:05:73:C9:CF:1A:3C:D7
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019CAF116B869CCDA743D838F12A707EFA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 15:01:20 +0000
Manifest this update: Mon 02 Mar 2026 15:01:20 +0000
Manifest next update: Tue 03 Mar 2026 15:01:20 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: 4uygsqHO22qRlM/YmFOOdrUfFNJpYrvZQQ2Q50FyNgo=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:6b:86:9c:cd:a7:43:d8:38:f1:2a:70:7e:fa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Mar 2 15:01:20 2026 GMT
Not After : Mar 3 15:01:20 2026 GMT
Subject: CN=233da4f7e9418f5a02787716980573c9cf1a3cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:2b:6f:3b:5d:9b:a8:51:bf:d3:ce:48:07:
26:79:12:62:fb:ed:0a:82:66:39:88:82:f9:d6:52:
d6:ab:49:d6:a1:c8:26:f6:86:6a:1a:2e:dd:b8:e0:
bc:83:9f:71:87:a8:4a:d7:0b:9f:16:cb:68:5e:55:
96:27:a5:03:a6:eb:36:60:0d:14:79:e7:c7:02:55:
86:8b:4d:3a:da:44:f6:22:09:75:7e:25:eb:36:e6:
eb:c4:d1:b0:f6:6e:11:b7:3a:0d:f0:36:cf:66:fe:
79:b7:77:e0:8c:35:ab:ab:6d:3e:f8:60:9a:e0:80:
d6:7d:64:30:4e:7e:3d:7a:ed:5f:8d:a7:08:17:9e:
a4:78:12:18:70:9a:c0:95:e1:69:63:5f:d6:96:7c:
e1:62:35:17:26:85:c2:26:b7:16:13:ba:2f:5a:3c:
df:e7:c1:b8:40:0e:4d:01:3b:d7:04:55:28:56:b2:
42:e4:88:e7:80:cb:2c:cd:b2:68:23:94:06:c1:71:
a5:65:b1:ab:33:1c:10:02:2f:ef:db:d8:5d:52:93:
71:a6:10:d6:f0:ff:0b:d2:dc:cb:93:11:bc:13:71:
9a:93:d3:27:54:3a:f9:ab:a4:48:93:c1:55:08:a1:
ec:24:7b:de:81:b0:64:7c:98:fb:6d:a5:6d:6c:b1:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:A4:F7:E9:41:8F:5A:02:78:77:16:98:05:73:C9:CF:1A:3C:D7
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f5:19:c1:2e:f5:35:c7:a4:44:c3:9a:cf:84:af:53:fb:6c:
87:be:c8:88:ec:ec:5b:a7:04:82:4a:32:4e:c4:b8:78:c0:20:
d5:62:66:7c:4a:76:3b:b2:68:e2:4e:c0:8a:99:0f:67:86:56:
68:a1:80:54:18:ac:67:c9:c9:1b:7c:0f:3a:9d:4f:0a:b0:41:
0c:b0:be:11:54:fe:27:5b:d1:6d:06:a3:9c:e4:ea:01:7e:31:
99:14:a8:ba:68:81:b9:c3:55:ff:3c:a0:2e:7c:ac:98:05:47:
6a:81:de:c2:b7:54:16:72:07:bd:5d:61:1c:16:64:9c:51:df:
46:84:5d:4e:05:41:2f:aa:b3:e2:1c:b5:1b:6d:0e:67:14:2c:
a6:f4:f1:56:45:6f:ac:58:68:18:e4:17:50:1f:a6:08:56:fb:
c2:20:c4:2c:68:7a:18:f9:60:fc:b3:b6:4b:0f:a6:90:fb:8d:
a0:6b:3f:10:10:f6:ad:de:d2:fe:e1:d7:95:96:da:54:cf:3c:
51:5a:a4:09:cc:83:82:d2:3f:8b:62:1e:46:98:0f:a3:f1:6f:
0b:cc:cf:6c:4b:f6:4d:e6:14:06:9d:16:bf:f4:18:0f:03:b0:
f5:79:e3:b5:0b:c6:85:f9:ad:f9:0c:15:9e:6f:c0:f6:05:72:
bb:06:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:08 2026 by rpki-client