Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: r8XtlTRudAvPhvfNoeYJV6R9EL/rguGrFfanjGGd4+g=
Subject key identifier: 0C:2B:B6:76:D9:83:0F:BF:51:C7:B2:B4:A8:23:2C:E9:65:8D:FE:64
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 01A182D145E616F46EB524D933A0A90E64F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 1284
Signing time: Wed 28 Oct 2026 14:01:55 +0000
Manifest this update: Wed 28 Oct 2026 14:01:55 +0000
Manifest next update: Thu 29 Oct 2026 14:01:55 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: mN5hu5S89O1z1aal181z6+iMY6g+PGPpgh6+1oOf76Q=)
2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d1:45:e6:16:f4:6e:b5:24:d9:33:a0:a9:0e:64:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Oct 28 14:01:55 2026 GMT
Not After : Oct 29 14:01:55 2026 GMT
Subject: CN=0c2bb676d9830fbf51c7b2b4a8232ce9658dfe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:d5:f4:39:45:17:72:b8:80:f8:78:11:6d:
37:57:b1:39:88:ba:d2:de:ba:c5:45:86:6d:45:6b:
bf:b7:d0:97:9c:d0:d3:51:d3:c7:05:57:7d:10:ea:
be:f0:33:0c:94:68:ab:3f:53:94:c3:2b:34:3a:4d:
15:8c:cb:5a:f0:fa:c8:7d:7c:eb:2d:88:ec:56:0e:
9a:78:a6:c7:9a:1e:b6:e3:f6:80:a7:57:42:f1:ad:
16:d2:4e:f4:97:74:e2:74:6f:43:fe:cf:37:a4:8d:
87:49:cf:5b:2d:39:63:90:db:b2:0b:ac:1c:ab:64:
2a:f4:36:96:64:ae:ba:10:d8:43:c6:30:c2:d8:44:
c3:fb:bc:ed:e1:d4:e2:d7:6e:d2:21:81:e6:12:93:
17:c6:df:c4:b5:e3:fa:1a:18:23:a9:67:e4:7c:82:
1a:df:49:92:bb:fa:d6:4a:9c:ab:d4:8b:a9:f6:89:
8d:a4:c4:69:73:49:75:6b:47:f0:65:95:43:42:6d:
e7:cc:b0:06:12:c4:f2:44:c1:ef:ee:d2:ad:ca:56:
8c:6a:62:a8:98:01:93:a7:fd:00:8e:b3:c2:19:60:
90:dc:9f:20:a4:a2:19:af:9c:54:8a:a5:45:f0:2d:
1f:b9:15:e7:8e:2e:68:35:ec:9c:54:a5:2b:41:da:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2B:B6:76:D9:83:0F:BF:51:C7:B2:B4:A8:23:2C:E9:65:8D:FE:64
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cb:a0:ce:95:29:60:20:b3:11:ca:42:a5:81:d2:80:f4:5e:
8a:13:6a:ec:a4:2e:5c:f9:aa:7e:89:3e:6b:70:52:4c:11:b3:
ed:d5:ad:a3:78:ff:37:8f:8d:5c:3d:ac:a5:83:88:74:2c:7c:
e6:2d:21:5e:03:10:ef:42:79:c4:2a:2a:b8:c5:02:fe:f9:32:
1e:f8:06:f8:df:ba:8b:11:e7:e6:8d:9f:7a:50:eb:27:c0:6f:
fe:bf:4e:c4:61:5a:00:06:63:1e:a7:8a:71:d8:6b:87:42:4e:
15:ca:a1:da:c0:4e:57:21:3c:29:e8:32:c3:dc:46:45:48:b8:
07:9b:74:93:3b:44:f9:da:0e:04:49:41:50:ac:15:35:39:91:
0e:96:66:c6:62:e1:4b:8d:67:28:81:f0:9a:6b:11:8b:e1:09:
a1:9f:44:24:4e:cb:5a:7f:be:7c:25:41:4d:f3:f7:48:a9:ef:
7a:a7:56:54:b1:50:02:4f:54:c3:fc:ce:a6:65:7c:b3:e3:21:
60:eb:9c:6c:bf:6a:be:c5:f0:01:fe:99:6a:6d:04:a4:a2:7c:
1e:f8:cb:23:30:e2:7c:a8:ce:c7:db:64:6b:13:a0:98:be:89:
36:36:a6:f3:ca:23:ce:3b:1f:0f:50:cc:30:e3:a2:4e:6e:21:
9a:2c:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:31:57 2026 by rpki-client