Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: IlHv3CDLD6lh46rForn3dTM8GL0mGOA8rY0ouNfkrZs=
Subject key identifier: 2A:58:D4:60:5A:0D:19:F2:03:5C:BF:56:60:0A:D9:22:EA:75:F6:8B
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01A0C7465E9606597318BFE6876718F709B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 0685
Signing time: Tue 22 Sep 2026 04:01:12 +0000
Manifest this update: Tue 22 Sep 2026 04:01:12 +0000
Manifest next update: Wed 23 Sep 2026 04:01:12 +0000
Files and hashes: 1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
2: 9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa (hash: NTLz7g+ZbCzTxq/x0340sjZGnuTxuJwbS2LJZglRqHg=)
3: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: 9U6lfNygwwAfss0c6bZst/5SIxKmjv6hth9kotl7n5Q=)
4: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
5: qzOhEMjt0ER_QeMmWb_aSnbGqDs.roa (hash: ct6/7wueiN1cFlvuwHbO2g9uKG/7TkLJNxOWY9ajqoc=)
6: xR7LKB9cMx20WjaSYnBDWdIRF-g.roa (hash: vumkR84YsHI2dcyHQIVTL0w8JKyaUvc5rnjqJHi4+6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:5e:96:06:59:73:18:bf:e6:87:67:18:f7:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Sep 22 04:01:12 2026 GMT
Not After : Sep 23 04:01:12 2026 GMT
Subject: CN=2a58d4605a0d19f2035cbf56600ad922ea75f68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:4d:64:25:9c:d6:cc:19:d1:38:d6:9f:76:
61:01:56:93:48:ec:45:2b:c2:7f:37:db:51:71:c8:
c4:af:ad:ee:d7:11:de:0b:89:25:ca:3e:2b:a3:74:
d1:81:6c:26:f3:87:16:52:28:d7:2f:74:f8:af:ec:
b9:18:8d:1d:03:92:ed:7f:28:17:3a:e2:f6:79:da:
1f:91:5f:77:bb:03:b9:db:d0:b6:ea:1a:ff:86:0f:
22:10:81:eb:a4:b2:81:58:b5:99:5d:00:89:53:f1:
45:51:6d:dc:47:78:b5:0d:55:76:9d:bd:c0:aa:81:
8e:88:07:67:0a:74:a6:fd:d4:7a:29:9b:fc:15:8c:
c2:72:79:a2:7c:ad:6b:1a:8f:ac:9d:dc:da:e8:96:
9a:85:52:4c:bc:9e:d9:b8:90:ec:22:27:5a:09:33:
43:32:dd:15:2e:c8:95:14:1d:df:81:1e:16:04:96:
8b:f1:80:d9:ec:2d:5e:89:82:1c:59:fc:13:68:73:
e6:09:ca:6b:16:ec:ad:77:c9:db:90:73:e2:32:44:
9c:48:85:42:6f:ba:9e:90:dc:9e:1f:4a:6d:bf:5f:
91:ca:c2:40:c6:43:fa:09:a9:e5:6a:25:53:1e:20:
1f:ec:80:a2:5e:3b:dd:2c:9e:0c:14:7e:e2:7f:4e:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:D4:60:5A:0D:19:F2:03:5C:BF:56:60:0A:D9:22:EA:75:F6:8B
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:81:04:45:4f:e6:71:78:fd:57:23:05:42:e4:e1:c7:ec:55:
bb:35:d7:9d:33:ea:59:10:92:18:c4:76:88:84:74:c5:c0:d7:
ca:6f:b5:9d:52:d2:1a:99:52:8a:4f:d7:64:99:73:d8:74:30:
02:88:ad:60:13:e2:b4:ac:dd:a8:04:8e:cf:d2:15:79:68:a6:
15:d7:d7:0c:6e:f5:69:90:38:2a:8e:d1:6e:f4:b6:7a:61:bb:
bd:6d:d3:91:53:85:d2:ed:e0:ee:9e:44:00:61:76:07:b2:10:
15:ad:33:53:0a:69:f1:af:04:74:32:b3:06:c7:0e:6b:fc:27:
71:b7:d9:b7:65:61:50:72:40:21:a9:f5:fe:34:8a:f8:d3:75:
04:2a:ff:41:5d:25:47:fb:6e:a2:46:5b:17:5c:b9:4d:b9:f6:
8f:b4:34:ca:f0:21:ea:21:7e:20:4c:a4:20:aa:d3:0c:12:0c:
cf:8a:52:ce:21:35:33:03:57:e2:59:c3:11:e6:61:3d:a2:b5:
aa:a3:a9:31:9a:7d:68:2b:c7:d2:6e:54:34:42:e7:9a:da:9a:
2a:a2:5e:48:0b:ba:19:9a:46:09:05:67:92:0c:01:bb:d3:25:
48:9c:b3:7a:da:22:b1:b5:66:f2:c9:92:59:f8:de:12:49:69:
63:2d:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:10:08 2026 by rpki-client