Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: 4QElWTYjLnQzz/SKvrS/1Q9MLjcazy69CXt6mGKgOPo=
Subject key identifier: 74:C7:29:C9:B7:2B:75:19:EA:85:9C:CE:B2:6E:C4:50:7B:9D:AB:96
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019EC0A448681D6F2CDC18454BF3B914B6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0BFB
Signing time: Sat 13 Jun 2026 11:00:52 +0000
Manifest this update: Sat 13 Jun 2026 11:00:52 +0000
Manifest next update: Sun 14 Jun 2026 11:00:52 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: HxKxX6msbUR/1dVIdNZgUaslghgZFz8g5YYeTVFKcYM=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:48:68:1d:6f:2c:dc:18:45:4b:f3:b9:14:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jun 13 11:00:52 2026 GMT
Not After : Jun 14 11:00:52 2026 GMT
Subject: CN=74c729c9b72b7519ea859cceb26ec4507b9dab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:a8:fb:5c:0b:0d:15:dd:e0:83:9b:46:5e:
1e:cc:d5:b8:3f:26:6b:ae:48:1e:a9:76:89:c9:04:
d9:36:33:1a:bc:bd:c8:57:35:7c:dd:ab:a0:bd:b7:
10:9a:cb:b2:4f:71:e0:d9:a6:c9:12:48:fe:0a:7b:
a6:a9:4e:b5:4e:6d:c3:85:97:d3:0c:23:0e:20:0b:
2a:9d:4e:1c:df:74:3f:26:00:8c:7c:2d:73:80:18:
77:1a:58:a1:29:90:09:c9:f4:a7:98:38:93:d5:a5:
85:7f:1a:e7:2f:46:b0:07:37:7a:03:2d:1f:7d:4b:
07:25:b6:9c:7f:70:5c:f6:29:9c:8e:0f:09:74:02:
17:3b:37:d3:2e:31:9e:fc:14:8d:94:4c:7f:5d:08:
4d:46:be:27:5e:07:48:e9:b3:53:76:cd:2a:6d:93:
e7:d2:9b:70:cf:10:a2:e8:fe:4d:f5:3f:0a:76:1e:
3c:3b:5c:82:d0:5c:25:0a:71:11:9c:28:c7:29:cf:
0c:35:97:bc:b2:ad:b2:c5:04:aa:81:3c:b3:97:b5:
c9:85:ae:b5:88:61:ee:c0:ac:10:70:a1:3d:3e:b2:
b8:70:86:9f:64:1e:84:43:50:02:d7:ab:31:c5:4d:
67:83:05:13:d2:90:9d:55:4f:12:f4:3a:64:bf:b5:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:29:C9:B7:2B:75:19:EA:85:9C:CE:B2:6E:C4:50:7B:9D:AB:96
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:81:20:0f:2f:ed:a4:1c:bd:f6:11:a1:ee:de:ec:9f:9e:f3:
7b:12:30:c7:a0:98:a4:b9:60:50:72:3c:01:d4:49:e3:0d:70:
a1:1d:af:91:60:32:ae:f3:10:09:8a:98:66:b4:21:a6:34:ac:
a9:9e:b8:60:a4:c8:0e:0e:76:33:7b:23:7a:9d:b2:47:60:74:
ac:d9:bd:f4:11:58:84:b6:0a:4b:33:7b:5f:47:83:71:07:76:
d4:c4:9e:2a:19:53:02:c8:24:c8:d5:1a:fc:b6:40:c3:4e:01:
39:b4:ea:cc:d0:f7:3b:f2:4b:7f:3c:5b:7a:9d:58:f7:fd:23:
ea:b2:93:d6:3d:e1:6a:7b:81:df:42:64:30:b2:b6:af:6d:79:
f3:d6:fd:2e:36:b9:e7:0e:0a:9e:3b:bf:19:5c:d7:d7:32:52:
60:21:11:0e:9f:c8:06:50:7f:d9:16:62:8a:7b:0d:f7:1f:dd:
cf:82:6f:50:d8:39:ce:00:35:b2:79:0c:b8:bd:d6:90:81:c1:
38:17:2e:5c:b1:c8:92:12:24:29:21:54:f3:c5:27:d3:8b:f1:
32:00:82:bc:42:33:3e:7d:a5:7b:d0:b7:4b:3e:ee:9d:08:29:
63:07:2b:30:41:c0:72:c3:52:c9:64:62:7a:6d:2b:f5:bb:01:
b2:b4:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:50 2026 by rpki-client