Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: rEJnyOw8hjUZKZEPgZ1G7Sd/1Qb4cb68BKH6JsoOENU=
Subject key identifier: BC:91:95:DE:C0:AE:63:36:36:F6:D3:99:71:14:F2:59:4B:B7:AD:B0
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01A0C633136F5DD9006519BE4BC1F67E6C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0D07
Signing time: Mon 21 Sep 2026 23:00:31 +0000
Manifest this update: Mon 21 Sep 2026 23:00:31 +0000
Manifest next update: Tue 22 Sep 2026 23:00:31 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: Qpsm1QCFVMWrsRLujZn5dBHxZm7pHYhSaqzlcX2OcTQ=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:13:6f:5d:d9:00:65:19:be:4b:c1:f6:7e:6c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Sep 21 23:00:31 2026 GMT
Not After : Sep 22 23:00:31 2026 GMT
Subject: CN=bc9195dec0ae633636f6d3997114f2594bb7adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:65:fa:93:c2:c3:66:ec:96:ec:04:59:17:
3f:e8:61:1c:8b:93:29:f1:78:2a:b6:99:22:7a:a8:
a8:65:1e:f3:1e:64:49:49:9a:af:48:5a:1d:ac:4e:
6d:77:f3:a1:ca:d2:da:a9:14:9d:3c:4f:e1:21:db:
6a:68:b3:d2:e9:2c:cf:75:b3:70:e8:4c:42:6a:c1:
13:6a:1c:b7:d9:20:40:55:7f:1a:a4:b5:48:6e:04:
09:90:26:f4:7c:2b:25:94:c3:c5:c1:56:42:9e:2f:
68:a6:28:a1:66:61:82:6c:bc:f2:6f:5d:b8:87:24:
3f:14:13:1e:0c:da:af:4b:5c:56:5c:d8:70:a3:41:
57:4d:2b:78:a7:d3:3c:2a:33:2d:13:58:ca:06:b8:
1f:4f:f2:80:4f:0f:38:61:2f:3e:19:de:1e:6a:f3:
5e:17:6a:44:0b:be:bf:fb:a9:a6:11:48:ac:45:2f:
38:76:a9:ee:ce:46:22:bd:60:1a:bf:e4:0c:91:17:
cb:e2:8e:57:21:44:ec:f4:8f:21:fa:3f:04:70:79:
af:19:50:b9:c7:ac:1c:dc:48:4e:e6:c7:99:c4:25:
15:41:00:44:a9:9f:a8:74:f0:f1:86:7b:b5:b9:cf:
7b:aa:11:85:2c:4b:bd:6f:b4:e2:68:99:72:d1:2d:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:91:95:DE:C0:AE:63:36:36:F6:D3:99:71:14:F2:59:4B:B7:AD:B0
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:76:e0:36:5b:71:fd:c4:d3:85:e0:1a:89:4e:30:9d:5d:
7c:50:50:51:64:ef:53:22:e3:bd:b8:ab:29:95:00:76:79:85:
60:84:e5:e7:72:0c:79:58:b9:c1:ce:25:41:c8:5a:66:78:0e:
36:9c:24:54:ff:68:37:a7:f2:17:23:5c:f0:f7:e8:ee:27:40:
a8:61:bc:fc:53:bf:bb:4d:a1:21:76:f8:bf:b5:da:2b:ba:93:
36:b3:f2:c7:d1:8e:9a:f6:cd:24:26:f3:b7:c6:3e:12:0c:f8:
c6:3b:de:39:d7:b8:96:a2:a0:c5:4c:c8:8f:a1:1c:2f:d2:d9:
5d:12:bd:8e:94:a3:ac:7b:f4:21:ae:e1:73:de:09:0a:9a:ff:
f3:44:9f:c9:99:3b:56:a1:39:96:91:47:ff:0f:d0:15:76:63:
68:92:4b:a6:a7:a0:cd:b1:a1:cf:de:56:2c:79:d7:57:ad:5c:
59:f2:fd:38:d6:27:bc:36:f5:2e:0d:73:ea:2d:cb:87:4c:cf:
f5:bf:2e:e0:e4:40:a6:06:e1:d9:f7:13:81:7b:37:48:80:2f:
cc:6c:2e:74:76:0b:a1:6c:bb:83:2d:72:3a:4a:31:6f:10:3d:
3e:49:1b:9b:80:f6:d6:ac:b4:db:ab:91:4c:f6:a2:51:dd:a0:
22:b6:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:43:51 2026 by rpki-client