Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
File: sM7BwXmc5hUD-QithJCSD7iYlCo.mft (raw, json)
Hash identifier: fQR67ygfbTMcptQ/F76/J+UhQCHl+a7kAcxz78rQocs=
Subject key identifier: 66:8D:4F:7B:5E:A5:78:5B:DF:D2:6F:AB:88:BB:EF:E8:76:D0:70:0B
Authority key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Certificate issuer: /CN=b0cec1c1799ce61503f908ad8490920fb898942a
Certificate serial: 01A0C40E3A267CA116541D18B495625558CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
Manifest number: 01E9
Signing time: Mon 21 Sep 2026 13:01:01 +0000
Manifest this update: Mon 21 Sep 2026 13:01:01 +0000
Manifest next update: Tue 22 Sep 2026 13:01:01 +0000
Files and hashes: 1: SRvCUpt5EjGVd8YYBAWFq9F_TMw.asa (hash: Hy6zUn6CPOdPhp0PUaBkdSVPrH4LoH2MpjhK4spZ01E=)
2: sM7BwXmc5hUD-QithJCSD7iYlCo.crl (hash: 0Wf8TklPFi6fjlmPKPltWrHufEqC79lmHTX+jro3AfQ=)
3: sf9Z2ePpKun38jGY3djkfjvGjpg.roa (hash: syFz830qmJzC/1pywYFwYVAGBqkNlU+FJmKYctYWrpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:3a:26:7c:a1:16:54:1d:18:b4:95:62:55:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cec1c1799ce61503f908ad8490920fb898942a
Validity
Not Before: Sep 21 13:01:01 2026 GMT
Not After : Sep 22 13:01:01 2026 GMT
Subject: CN=668d4f7b5ea5785bdfd26fab88bbefe876d0700b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:04:bf:d9:a2:91:25:2f:4d:9a:a4:2f:50:
bd:23:1a:3d:ca:6d:09:ed:99:c3:e7:36:8e:36:49:
97:b6:37:04:62:2e:d3:80:6c:2d:64:69:d3:bb:23:
16:03:d4:68:96:d5:38:d9:74:11:ba:4e:94:73:57:
82:b4:0d:d8:76:fc:90:8a:db:92:b9:62:26:49:e7:
a8:c4:be:3e:05:91:ff:8f:ba:93:90:1a:0c:e2:fb:
ee:cb:b5:b6:fa:52:76:26:2c:5a:7e:f2:86:86:e3:
f0:ae:8b:15:5f:1e:18:c1:d7:ed:6c:9e:8f:a7:87:
0b:ce:a1:6f:39:17:f7:8a:a3:f2:f2:d2:2f:de:37:
d8:a9:12:74:da:ee:4f:c4:e1:18:02:c4:ea:76:56:
17:42:3e:0b:0d:9e:2d:86:12:a8:c9:fa:43:8c:04:
a7:c6:5e:98:c2:4e:f0:d9:1c:60:fe:6c:b3:8f:07:
6f:aa:ba:18:be:f9:37:b2:71:f6:8f:62:cc:72:3e:
59:ab:0a:65:68:1f:79:16:f0:f6:6a:30:03:06:f3:
36:8d:34:d0:f6:8c:f2:ce:ec:e5:60:25:9f:58:d5:
d0:d2:18:4a:c4:cf:53:48:a1:85:61:31:c2:b8:22:
28:aa:8c:ab:2b:35:43:a3:62:49:a6:d4:7e:81:bd:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8D:4F:7B:5E:A5:78:5B:DF:D2:6F:AB:88:BB:EF:E8:76:D0:70:0B
X509v3 Authority Key Identifier:
keyid:B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b3:5e:a6:00:77:28:35:c2:b7:70:10:93:3e:26:03:48:c4:
36:03:f4:14:f7:57:b8:95:34:c5:db:05:47:6f:25:c9:bc:b8:
18:e4:c2:16:c8:a0:43:5c:b6:6b:c4:65:88:29:9e:9d:37:6c:
4e:e0:44:97:2e:bf:20:74:73:8c:32:16:88:a2:51:12:85:91:
9d:c0:15:68:40:ec:45:02:db:f2:72:90:48:04:ef:9e:26:c9:
02:a8:a5:a3:22:ae:ba:be:c6:87:bb:cd:34:4b:c3:70:49:be:
d4:5c:54:d2:34:36:d8:fe:e9:05:c3:7b:52:bc:62:23:be:e1:
de:41:1f:51:0b:0d:e3:fc:c0:d1:2c:f6:48:6e:4e:8b:51:13:
8c:e3:80:4d:52:e4:ce:38:63:98:6c:b3:b7:64:d8:52:c8:2c:
bf:b7:41:a7:d5:e6:75:74:57:68:d1:55:47:5c:94:a6:e7:24:
b4:f3:9d:01:6e:69:c9:cd:e9:7e:e0:bf:7e:59:9d:41:73:67:
ff:47:45:e6:b5:b8:b6:50:dc:0f:59:94:f4:80:ff:13:1e:09:
77:95:79:d4:21:c3:63:3a:04:03:92:cd:cb:7d:70:45:76:d8:
68:54:8c:fd:c1:eb:f5:1f:68:1b:f6:d6:93:6d:e0:06:96:0d:
50:65:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:09 2026 by rpki-client