Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: Azl9y2T0i9bVFMGYsE9yKeOX5xofvCN2s4aoueRLeQM=
Subject key identifier: 06:BC:4A:35:1F:65:DD:E8:6F:9C:00:49:BD:9C:25:F3:C0:DE:90:E5
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 019CABA20B6E626393B8655F699F9D8026D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: INMu9Ca5YAAI2u8jNOKO0mOXCk0meUkOO1dYVkrJVy4=)
2: aTwucs9Pwvr6YSYXdadFRJo6hLs.roa (hash: ilcm0/S70CqecxpFPp/FDen+jHt9VTiUtWGnp7lMb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0b:6e:62:63:93:b8:65:5f:69:9f:9d:80:26:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=06bc4a351f65dde86f9c0049bd9c25f3c0de90e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:e7:80:20:49:2e:eb:5b:44:d1:ba:38:2b:
7d:ad:6e:e8:e9:1e:0d:8e:86:4d:ec:be:1e:00:fb:
b1:c6:af:c9:43:70:e1:9f:0d:7a:09:33:99:0d:da:
88:cb:a2:48:c6:8a:c5:0e:e1:2f:96:8e:8f:25:a4:
18:6f:01:ab:76:fb:48:bf:14:e1:03:c0:3c:59:67:
ce:67:e7:af:da:f6:03:57:c1:1f:de:85:dd:99:cd:
69:0f:1d:54:4a:27:04:af:46:b5:19:16:44:44:73:
74:09:e8:b8:66:80:f3:1d:cf:d6:3a:4d:b0:69:2c:
66:06:e8:5a:47:57:45:3b:ba:88:8a:a7:94:2d:60:
18:b9:74:26:43:99:f2:c7:84:40:53:70:79:c6:4b:
22:09:9f:6a:62:20:7f:06:96:91:de:4f:3e:95:45:
0b:57:9e:ea:79:10:8a:2e:78:25:6b:bb:c6:69:c7:
fe:b0:ac:d6:5c:78:62:7a:17:fd:53:61:6a:24:63:
a8:88:6f:f1:6c:36:e9:a7:8d:e2:8e:47:84:eb:59:
52:f9:2b:91:da:ae:9d:fd:06:d9:c8:22:99:dc:d2:
09:60:89:62:f3:09:d0:33:f7:f2:fe:91:48:88:91:
b0:27:b9:20:4f:0c:c6:1e:4c:d6:f0:a8:d9:2b:d5:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:4A:35:1F:65:DD:E8:6F:9C:00:49:BD:9C:25:F3:C0:DE:90:E5
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:75:d3:10:ef:05:e2:f6:7a:a7:26:ba:d3:45:91:65:4f:2a:
19:71:4f:43:49:08:d3:38:04:34:73:64:2a:23:52:c2:3d:a1:
81:8a:1f:71:22:20:d1:c6:8f:52:9f:87:01:20:e7:4f:4b:74:
4c:48:fd:95:34:03:9e:b5:a7:20:5f:05:8b:db:56:43:6a:a6:
34:91:20:dc:61:ad:1b:46:b7:dc:5c:25:08:1c:06:82:7a:d8:
bb:4f:c1:d0:25:f5:1c:22:14:f0:c1:69:24:39:d1:43:9c:34:
87:5c:03:f0:0c:dd:9e:26:8f:44:e8:5e:10:87:bb:de:51:9d:
fa:cd:a1:42:4f:1a:28:e8:5c:fd:2d:e8:14:ec:0d:77:ef:63:
af:46:97:dd:31:2c:ab:3f:83:d6:77:e2:d5:bc:56:d9:b8:ba:
03:c4:f1:c3:67:92:5c:3b:98:44:6f:a1:48:42:d2:55:2a:90:
15:3a:4e:1c:5b:3b:77:5d:ee:8b:b3:21:83:b8:9b:09:22:07:
f7:f1:5d:89:d3:dc:29:ba:d9:aa:51:9d:4d:66:16:46:de:53:
0a:79:cd:a9:07:7c:f2:92:85:f4:f0:1e:b4:e7:a4:91:62:35:
f0:16:2b:18:c7:0a:50:a1:77:d4:eb:11:f6:1d:e3:65:82:2b:
b9:b4:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:51 2026 by rpki-client