Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: Tx0gtl04DUvCdUDKYFIp2FJEa92JweKsHLddYLUSAUI=
Subject key identifier: 85:21:CD:E6:48:05:7F:D5:D8:DE:58:50:1A:51:7D:D5:67:CA:04:A3
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019FAA8776CC39B74A93C9CE8A0AFF4D147F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 21:00:32 +0000
Manifest this update: Tue 28 Jul 2026 21:00:32 +0000
Manifest next update: Wed 29 Jul 2026 21:00:32 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: z978LxLZUmVLMrFXBmX4TAq2nhP7TCDxhXPf0e3g/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:76:cc:39:b7:4a:93:c9:ce:8a:0a:ff:4d:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Jul 28 21:00:32 2026 GMT
Not After : Jul 29 21:00:32 2026 GMT
Subject: CN=8521cde648057fd5d8de58501a517dd567ca04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:35:8b:20:19:54:08:20:4d:bc:af:78:d7:
a3:40:bc:3e:e5:2b:20:d8:6e:34:19:99:20:87:3a:
3e:84:99:3c:15:0e:cb:79:95:38:a2:9f:91:1b:07:
a7:a0:39:69:92:0d:ca:28:84:d0:0c:f3:13:f2:f9:
0b:35:fd:a0:f6:0b:00:a8:d7:25:63:15:1f:a3:57:
21:2e:2e:30:e5:75:06:d0:fa:6f:7f:bc:a2:a7:e4:
c7:2e:1a:85:31:2f:03:a7:03:9d:d1:ca:5b:9f:48:
ab:80:69:be:83:d6:a1:9a:f9:57:b5:9c:07:82:eb:
bd:c1:3a:d1:12:78:3b:e0:c8:d5:73:75:fa:9a:22:
fe:2b:36:06:70:40:a6:48:67:36:59:38:73:9a:14:
dc:e6:33:6a:06:85:b8:26:43:14:f1:39:10:a5:9b:
77:1d:61:71:ee:18:1e:74:5d:20:55:20:02:f2:9f:
50:47:94:dc:6d:09:6e:33:8a:f5:61:41:68:b9:bf:
50:df:8c:2d:96:23:0d:71:57:fa:53:63:c6:3a:91:
e5:11:f7:49:9f:e6:22:a5:5a:91:ed:83:8d:27:ac:
db:5e:5c:3f:0a:1d:68:d3:ab:ee:8a:e4:8f:57:c3:
6d:bd:6e:42:a9:c9:a0:73:29:84:6c:e9:fc:4e:0b:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:CD:E6:48:05:7F:D5:D8:DE:58:50:1A:51:7D:D5:67:CA:04:A3
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:04:cf:8d:36:76:d5:a7:87:23:39:37:0d:e7:4b:85:c6:38:
6b:db:d3:9a:9c:24:a4:2d:0d:13:b3:7c:52:4a:31:50:e8:dd:
d0:f2:f2:ee:a8:55:6b:54:3a:46:41:7b:8a:c1:ad:47:e1:99:
0a:87:45:e3:32:99:06:b8:1e:4b:c4:e1:14:5e:9d:3a:8b:a2:
ea:e8:8f:e9:5b:e2:02:08:fc:b3:61:4a:72:67:db:05:60:de:
92:ea:6d:7a:a3:d0:4d:81:44:02:7a:00:ab:63:c5:86:97:5f:
48:88:33:ce:9d:25:23:60:16:31:3d:e6:c6:31:4c:09:27:55:
ea:d7:73:1f:d5:09:11:e7:17:4c:36:74:30:4c:b3:a3:4a:b0:
19:2d:e4:a4:ad:7c:6b:21:3e:bd:20:2d:b3:ca:71:9a:d4:4d:
de:23:7b:4e:0d:85:6b:49:00:c4:c1:f5:d4:eb:6c:63:05:78:
97:1c:44:7b:31:25:46:10:74:61:6c:11:c6:4b:72:95:8c:9b:
5f:72:b4:c2:a3:74:d0:1c:4a:56:06:ae:31:d3:0c:34:c7:bc:
d6:86:b6:d9:d6:63:a6:81:df:a0:57:e6:aa:96:f6:e4:10:f5:
cc:33:5d:81:c2:43:ae:4a:0e:eb:68:d9:90:e7:2a:24:dd:75:
03:d9:f9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh3bMObdKk8nOigr/TRR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0
NTNmNzEwHhcNMjYwNzI4MjEwMDMyWhcNMjYwNzI5MjEwMDMyWjAzMTEwLwYDVQQD
Eyg4NTIxY2RlNjQ4MDU3ZmQ1ZDhkZTU4NTAxYTUxN2RkNTY3Y2EwNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z01iyAZVAggTbyveNejQLw+5Ssg
2G40GZkghzo+hJk8FQ7LeZU4op+RGwenoDlpkg3KKITQDPMT8vkLNf2g9gsAqNcl
YxUfo1chLi4w5XUG0Ppvf7yip+THLhqFMS8DpwOd0cpbn0irgGm+g9ahmvlXtZwH
guu9wTrREng74MjVc3X6miL+KzYGcECmSGc2WThzmhTc5jNqBoW4JkMU8TkQpZt3
HWFx7hgedF0gVSAC8p9QR5TcbQluM4r1YUFoub9Q34wtliMNcVf6U2PGOpHlEfdJ
n+YipVqR7YONJ6zbXlw/Ch1o06vuiuSPV8NtvW5CqcmgcymEbOn8Tgv24QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUhzeZIBX/V2N5YUBpRfdVnygSjMB8GA1UdIwQY
MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct
NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl
LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwTPjTZ2
1aeHIzk3DedLhcY4a9vTmpwkpC0NE7N8UkoxUOjd0PLy7qhVa1Q6RkF7isGtR+GZ
CodF4zKZBrgeS8ThFF6dOoui6uiP6VviAgj8s2FKcmfbBWDekupteqPQTYFEAnoA
q2PFhpdfSIgzzp0lI2AWMT3mxjFMCSdV6tdzH9UJEecXTDZ0MEyzo0qwGS3kpK18
ayE+vSAts8pxmtRN3iN7Tg2Fa0kAxMH11OtsYwV4lxxEezElRhB0YWwRxktylYyb
X3K0wqN00BxKVgauMdMMNMe81oa22dZjpoHfoFfmqpb25BD1zDNdgcJDrkoO62jZ
kOcqJN11A9n5tg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:43 2026 by rpki-client