Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: VMyjkx0icfNJE46S0Ssl4SfXwhEl5kW9YRdh5X2vMf8=
Subject key identifier: FD:1F:ED:BE:8D:BF:3A:A3:8B:57:50:86:2F:F2:84:00:C5:7D:B5:21
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019DA2D378B73C92068794E27D54B1B86D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0B67
Signing time: Sat 18 Apr 2026 23:01:01 +0000
Manifest this update: Sat 18 Apr 2026 23:01:01 +0000
Manifest next update: Sun 19 Apr 2026 23:01:01 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: 7dh+1uU/wAV2+6AKCEjyuytSItBES1R8hNSw9nBm2IA=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:78:b7:3c:92:06:87:94:e2:7d:54:b1:b8:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Apr 18 23:01:01 2026 GMT
Not After : Apr 19 23:01:01 2026 GMT
Subject: CN=fd1fedbe8dbf3aa38b5750862ff28400c57db521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:81:9c:73:92:b6:13:87:be:b2:12:20:70:
66:b0:e7:91:02:4e:56:5d:74:80:df:af:fd:69:f5:
a4:77:f3:b3:c0:fc:d6:b9:ad:13:0f:13:59:8c:49:
87:13:63:57:19:84:b0:d6:21:fc:8e:5a:e7:bc:64:
6c:a4:29:8e:10:d3:0c:cf:b0:7e:39:bb:70:22:dd:
6b:4f:78:69:e5:00:a0:87:7d:82:30:f3:4b:de:a1:
89:97:f1:53:9f:2e:e7:8c:eb:6f:c7:fb:cb:ce:fa:
3c:ed:e9:cf:6c:cd:1c:6a:0b:d9:a2:f4:51:a1:94:
d1:d9:f6:77:bf:71:b6:08:ad:25:53:06:15:ab:fa:
8d:f7:e4:a5:39:63:21:ac:dc:4f:c7:79:12:b7:3a:
50:78:0c:1e:48:8b:d0:58:74:6d:e3:7f:a4:a9:1b:
97:c3:66:49:87:8a:df:03:f8:12:c3:c1:73:86:57:
ab:1b:d6:8e:40:98:91:55:83:dc:5e:4c:91:7f:de:
36:b7:fe:64:90:c3:c4:9a:cf:01:91:84:08:2f:3e:
04:c5:6a:3a:16:fa:b1:c7:9b:a8:5f:e2:32:46:3f:
23:48:c5:19:e9:e5:4e:c5:ae:01:36:34:c1:4c:9b:
ed:92:ab:6d:d0:29:ad:a9:73:ee:73:15:c9:cf:a7:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:ED:BE:8D:BF:3A:A3:8B:57:50:86:2F:F2:84:00:C5:7D:B5:21
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:83:d8:a7:ea:65:47:2c:d5:61:5f:a2:09:a6:6a:a2:ec:60:
ef:f5:c9:a1:d3:8e:03:a7:9d:f3:be:45:89:3b:f7:85:96:c7:
5d:82:73:74:23:8c:6b:30:46:7b:4d:0c:7e:33:18:02:56:d7:
a1:b7:a9:cb:2d:e8:60:21:5e:f5:fe:f3:93:46:e8:42:11:8a:
ae:94:61:06:3b:d2:6e:de:41:0a:a1:e5:aa:f5:c4:94:9e:22:
53:91:16:a2:5a:09:61:48:db:b5:ee:e9:90:8c:09:e0:01:ae:
59:8f:57:78:e4:6d:41:56:3e:6e:15:42:c4:7e:45:39:67:20:
d2:52:7c:e2:2d:d0:10:2d:8a:21:b7:f5:0d:b1:59:10:09:ff:
a4:45:19:81:30:36:ad:28:1c:22:0d:1f:13:8b:e1:6c:cf:c4:
ef:c7:53:ad:a1:c7:55:45:b7:27:9c:52:68:85:62:4e:99:d2:
08:2e:68:e5:c8:40:2b:4e:48:c9:fd:30:22:80:34:a9:7d:94:
82:e8:88:9e:d8:b7:e0:f5:61:ae:26:75:97:a7:8b:16:f3:df:
56:a8:df:cf:38:55:19:ea:27:90:19:cc:c3:7f:05:83:57:27:
b3:6e:41:d2:5b:9d:e9:3f:a5:07:92:a4:14:c9:3c:8e:b9:3d:
f2:5d:b3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:57 2026 by rpki-client