Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
File: sM7BwXmc5hUD-QithJCSD7iYlCo.mft (raw, json)
Hash identifier: zwK66yEYzYW9CuuuDmD0G7gzf5NG6IMEE4ZGVuKGCRE=
Subject key identifier: 8D:63:43:C2:2A:20:06:E8:B7:97:E5:01:81:09:FF:A5:DC:4F:50:12
Authority key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Certificate issuer: /CN=b0cec1c1799ce61503f908ad8490920fb898942a
Certificate serial: 019FA82C2A3907AAE6638F07FD72A418CB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
Manifest number: 0156
Signing time: Tue 28 Jul 2026 10:01:34 +0000
Manifest this update: Tue 28 Jul 2026 10:01:34 +0000
Manifest next update: Wed 29 Jul 2026 10:01:34 +0000
Files and hashes: 1: SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa (hash: Hy6zUn6CPOdPhp0PUaBkdSVPrH4LoH2MpjhK4spZ01E=)
2: sM7BwXmc5hUD-QithJCSD7iYlCo.crl (hash: lhjrPtqmcRFQJRMnLf+fsXRJNuOccvs3d+oFtR01lTs=)
3: sf9Z2ePpKun38jGY3djkfjvGjpg.roa (hash: syFz830qmJzC/1pywYFwYVAGBqkNlU+FJmKYctYWrpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:2a:39:07:aa:e6:63:8f:07:fd:72:a4:18:cb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cec1c1799ce61503f908ad8490920fb898942a
Validity
Not Before: Jul 28 10:01:34 2026 GMT
Not After : Jul 29 10:01:34 2026 GMT
Subject: CN=8d6343c22a2006e8b797e5018109ffa5dc4f5012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:b1:05:de:ae:f2:59:76:cf:df:85:83:e8:
67:a3:4c:04:c7:eb:1f:b0:c0:17:46:cc:72:bd:57:
b1:b6:60:c9:b1:86:29:04:e3:cc:a6:a3:a1:52:1c:
fc:b8:09:2b:6c:f7:43:40:21:dd:cd:3d:87:96:e4:
1d:3e:9f:29:83:f6:f5:4e:46:4e:24:50:b2:44:6e:
85:77:20:0a:f4:8b:a9:ec:a1:b3:2b:c0:19:5b:4c:
48:fe:6e:36:96:78:57:81:11:2c:d4:ba:1e:81:3a:
80:ad:b6:68:56:a8:8c:2a:95:8f:87:b7:0a:9d:97:
35:cf:b7:68:63:93:25:8a:ef:29:89:61:95:98:2e:
95:48:75:0f:90:e0:e5:ff:2a:01:9f:b1:1f:2e:dd:
d5:ca:c7:6c:28:61:42:4f:d9:2f:87:d7:c0:f0:dc:
54:85:a2:d6:0e:bc:7b:6e:a6:40:ec:0e:fb:c7:8c:
c8:55:81:2c:c5:1f:12:39:53:a9:65:1f:78:0c:3b:
f6:bf:b4:7c:a8:a1:93:35:e7:81:ce:a8:e8:55:d4:
04:5a:5a:5e:d5:0e:76:b9:f3:16:cd:a0:7f:51:e7:
56:8d:c3:1d:1b:c3:0c:43:83:47:00:b4:4d:2e:e0:
ed:96:cd:d5:04:31:93:1c:bc:ec:3e:13:0f:98:32:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:43:C2:2A:20:06:E8:B7:97:E5:01:81:09:FF:A5:DC:4F:50:12
X509v3 Authority Key Identifier:
keyid:B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ae:5d:20:8d:a8:4d:28:ee:d6:fe:10:5c:d4:62:03:1d:91:
65:b9:cd:f0:83:cc:c8:1a:66:50:99:95:8d:5b:5b:22:aa:d8:
0c:91:7c:d1:97:70:42:fe:fa:cf:c5:ae:6a:fe:75:59:c5:58:
78:85:d4:a4:4e:cd:f6:73:56:c5:7b:0f:48:55:6a:be:c6:94:
53:87:7b:05:7d:55:3c:7b:b3:78:8e:74:3c:6f:ef:6d:34:e7:
b2:c6:ef:66:0e:5e:cd:9b:54:d0:f5:ff:fc:67:ce:c4:8f:14:
b4:a3:1c:7c:e1:13:41:8a:95:70:8a:a0:f6:d2:1a:6f:c0:fa:
5d:9a:af:29:ac:59:28:22:94:fb:10:74:1f:ed:ce:fc:ae:24:
f5:3d:71:0a:95:b7:06:23:e6:87:f9:1e:1e:42:c2:36:a0:f9:
e4:b1:bd:a0:20:76:06:71:ab:64:fb:aa:89:db:98:45:cf:0c:
f5:31:09:49:38:45:4e:19:19:10:ea:a3:71:a7:a9:f7:6a:22:
c7:3c:c2:c4:d5:50:25:3f:ba:8b:db:0e:8c:da:24:8d:f1:f8:
a0:57:9b:11:53:19:b2:9c:78:8e:b2:a3:f5:09:60:07:ff:8b:
f3:63:67:da:5c:0f:70:41:d2:cb:c0:fc:1d:39:bd:a0:1d:53:
74:29:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:39 2026 by rpki-client