Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: nKZnP4Q8XFBRBnE0eg5r9xA66W3ucUmdnoVQGBfB8Xo=
Subject key identifier: D6:B2:83:92:E6:C6:E4:88:AC:1B:E4:5D:27:C6:7B:6B:FB:BF:FB:DD
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019CA9B38CF382BCF63811E8423BB47190DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0AE6
Signing time: Sun 01 Mar 2026 14:00:42 +0000
Manifest this update: Sun 01 Mar 2026 14:00:42 +0000
Manifest next update: Mon 02 Mar 2026 14:00:42 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: dhmMCwEdDTS9r/LWxVFEVDje8s1Tt6oFLW6/Yj2qrPM=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8c:f3:82:bc:f6:38:11:e8:42:3b:b4:71:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Mar 1 14:00:42 2026 GMT
Not After : Mar 2 14:00:42 2026 GMT
Subject: CN=d6b28392e6c6e488ac1be45d27c67b6bfbbffbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:bb:48:c2:71:8e:b7:9a:d0:f2:e0:05:28:
71:29:8b:56:01:55:5b:1f:0b:93:7b:82:67:95:90:
ba:02:c7:03:0c:5e:df:6f:2c:54:45:a3:27:cc:01:
35:e2:f2:04:3c:7c:0e:12:55:27:dc:36:cd:06:cc:
d3:17:05:d1:43:43:6e:94:0a:50:95:86:c9:87:7c:
f1:c4:67:f0:51:0c:6c:2c:e3:f5:81:cc:e7:e4:f6:
87:05:14:3a:ac:b0:9d:60:a2:2a:83:57:ad:4d:57:
88:e2:ea:01:3c:18:98:59:99:61:49:5f:f1:43:24:
86:dd:36:3a:e3:e4:e9:bf:e1:85:af:29:c7:4e:80:
46:55:44:a5:a6:53:a5:48:a6:ea:b5:8e:ff:43:6e:
9a:cb:cc:5b:78:65:12:a2:46:04:25:b7:8a:2e:df:
1d:b9:60:2c:02:6f:db:6b:00:f9:03:6e:74:76:80:
6a:ff:70:14:3b:9c:a0:a1:c6:05:91:77:ff:69:bb:
d0:d2:5b:02:07:98:09:63:a2:ae:0a:81:dd:41:3f:
4c:d0:9c:ba:92:9e:28:57:c2:23:84:e5:c2:23:9d:
b4:39:ee:18:03:c2:29:5b:bb:00:5b:73:e7:26:3e:
55:c5:4f:f5:46:7f:58:92:5b:5c:26:9b:25:50:b2:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B2:83:92:E6:C6:E4:88:AC:1B:E4:5D:27:C6:7B:6B:FB:BF:FB:DD
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:18:49:b9:02:dc:4b:00:b0:a0:14:5b:2d:b0:10:8a:43:
ed:c0:df:2f:e0:b3:64:df:fa:0b:ea:34:75:3c:6e:d0:29:25:
bc:8e:9d:6d:e9:06:cf:24:89:11:4c:88:20:56:12:40:50:02:
b7:01:f4:a5:67:02:97:7f:ac:e0:15:49:06:d3:7d:d3:af:d6:
d2:70:a1:9f:16:3a:6d:08:70:d5:90:25:4c:0b:e6:c4:03:15:
40:91:32:07:1f:45:66:7a:8b:95:32:a4:3a:eb:f4:2b:fa:a6:
7c:89:e6:a3:86:88:21:6d:0b:d9:6c:62:f9:6b:db:d3:b5:0a:
0a:10:5b:d9:0b:38:27:73:1a:fe:aa:bb:58:4e:6a:01:9a:e5:
27:1e:b7:93:4e:62:f3:7b:d2:ba:e4:11:47:b0:50:2b:ed:1c:
8f:79:89:d5:cd:f9:18:03:af:54:77:cf:b9:74:6a:ed:4f:35:
31:00:f0:8e:96:99:2f:29:50:29:cf:1b:51:aa:d6:89:b2:40:
8f:db:a2:9b:91:9d:72:8a:32:7d:e3:10:bd:59:88:d1:5d:3e:
a9:3f:cc:60:7c:a9:ab:72:99:5e:6a:d0:f5:e4:c9:d2:a9:a2:
e3:f6:26:9b:b7:3f:30:dd:99:11:47:f7:f7:0c:e1:76:80:cc:
9b:07:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:43 2026 by rpki-client