Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
File: sM7BwXmc5hUD-QithJCSD7iYlCo.mft (raw, json)
Hash identifier: qIeQyJL+quruz7NU+F6ou9D22S9uMxe+yhTxBxNVDYo=
Subject key identifier: 61:53:21:2F:63:3B:0C:EF:85:1B:33:07:CC:D8:58:FF:BD:6A:FA:19
Authority key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Certificate issuer: /CN=b0cec1c1799ce61503f908ad8490920fb898942a
Certificate serial: 019EBE7F238B2D2AF48024DC74534E1F80ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
Manifest number: DD
Signing time: Sat 13 Jun 2026 01:01:03 +0000
Manifest this update: Sat 13 Jun 2026 01:01:03 +0000
Manifest next update: Sun 14 Jun 2026 01:01:03 +0000
Files and hashes: 1: SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa (hash: Hy6zUn6CPOdPhp0PUaBkdSVPrH4LoH2MpjhK4spZ01E=)
2: sM7BwXmc5hUD-QithJCSD7iYlCo.crl (hash: sfP/YOX5y/6fkROJnIVRFebq0KnJh2i6zvZm48gf+0M=)
3: sf9Z2ePpKun38jGY3djkfjvGjpg.roa (hash: syFz830qmJzC/1pywYFwYVAGBqkNlU+FJmKYctYWrpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:23:8b:2d:2a:f4:80:24:dc:74:53:4e:1f:80:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cec1c1799ce61503f908ad8490920fb898942a
Validity
Not Before: Jun 13 01:01:03 2026 GMT
Not After : Jun 14 01:01:03 2026 GMT
Subject: CN=6153212f633b0cef851b3307ccd858ffbd6afa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:2d:13:a5:e1:22:cd:22:99:e7:3f:10:d1:
d8:e3:9a:dc:7e:54:97:cd:14:7f:b2:c4:28:b7:e5:
6b:16:bd:16:67:ad:15:42:1d:0c:a1:de:1b:3c:12:
15:40:52:6c:cb:33:65:49:33:bd:a9:82:bf:df:74:
40:73:8a:d8:0b:8b:0a:e2:45:83:83:16:28:39:b7:
11:15:88:63:3f:dd:eb:ac:2b:af:c6:a7:09:44:b3:
6c:af:d3:d4:2e:1b:41:1d:96:ca:74:d7:c2:24:aa:
d0:b3:f2:71:ee:9d:d7:27:2a:d6:be:b5:4a:5c:22:
50:9a:6c:b5:2f:96:c6:fc:b1:21:ad:77:4a:02:00:
45:e1:62:c6:d0:c9:e4:5b:09:56:fa:29:0f:64:ae:
72:bb:dd:ab:06:da:5b:c7:96:cf:64:3c:86:72:10:
8f:16:55:18:c1:99:4a:aa:ef:62:06:62:c9:a9:87:
46:9a:ae:83:8c:f7:da:c7:c0:b2:54:8f:b7:5f:10:
54:95:67:e4:40:27:77:59:33:7b:63:ca:db:67:4c:
2a:64:70:43:bd:9e:d0:c4:a5:0a:a7:24:33:b6:6a:
25:01:03:0f:46:34:9d:6d:60:aa:26:7e:97:b9:e9:
a7:91:cc:c5:92:26:df:8c:71:2a:0b:63:62:03:e2:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:21:2F:63:3B:0C:EF:85:1B:33:07:CC:D8:58:FF:BD:6A:FA:19
X509v3 Authority Key Identifier:
keyid:B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d7:97:e3:bd:e9:fe:2f:76:f0:9d:3e:f0:8e:64:24:04:57:
34:5a:31:12:16:2f:d8:67:a0:bd:fa:2c:ca:fd:60:5e:e1:66:
13:2e:40:01:a1:be:36:85:b1:7e:07:30:b7:31:db:fe:90:05:
d0:eb:f3:ba:f8:b7:62:ba:65:10:4d:ad:c6:f7:95:b3:ea:3d:
bc:a9:89:e3:d7:09:99:16:4a:05:11:62:f1:62:95:40:1f:aa:
f9:31:3a:7c:2c:35:4c:55:ad:77:bf:81:ae:01:16:9d:ba:be:
b8:d6:ec:d9:a8:0a:53:f0:27:5f:ba:a0:92:f7:d9:21:d5:f1:
fe:8f:78:b2:22:0f:3a:82:07:82:bf:0d:7c:c7:5c:ee:aa:ad:
5e:bf:29:a3:77:77:8e:0d:45:c9:36:25:e9:ff:89:cb:6e:17:
d6:1e:53:c6:98:a5:23:21:2f:16:4b:14:07:b5:d6:bd:8a:74:
60:55:ba:89:9b:c9:60:50:02:e9:1e:f1:5d:9d:6c:a2:22:e1:
9e:e4:9d:25:7b:34:63:1f:c8:11:94:77:19:b7:fc:67:cd:91:
e6:b1:8a:3c:10:e0:2e:64:e7:93:c1:81:a6:72:b9:f6:60:5d:
e0:bb:bf:6b:43:cf:5d:d0:38:bc:df:25:22:32:9c:87:f4:57:
b4:8d:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:58 2026 by rpki-client