Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: nmS5Ftf8mrZpIrfnn+RGlSmziVqUru4EqiXnGmCb1CU=
Subject key identifier: 7C:2B:49:B1:15:2B:FA:E4:5A:07:37:B1:98:2C:73:D0:8B:03:45:AB
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 019FAA50C85514615E419EE9248E80BADB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0C74
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: YWT3Kpm0wsfvh/iXC6ab0oQvvMYfY4KwAVMYZ4wtNiw=)
3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c8:55:14:61:5e:41:9e:e9:24:8e:80:ba:db:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=7c2b49b1152bfae45a0737b1982c73d08b0345ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:df:6b:08:fa:df:db:03:d0:6e:93:2e:00:
b1:40:14:4d:37:ba:9b:e7:51:a8:07:40:87:1f:f0:
39:58:9e:a1:05:92:95:72:35:c9:6d:ee:8e:8a:c2:
c8:45:e2:d8:7e:9e:b9:4e:10:e9:2a:c0:d0:da:84:
e7:b1:b2:66:3e:ae:cc:f7:d5:d8:42:97:b8:73:46:
6f:de:7b:5a:55:66:0e:47:45:7c:70:dc:00:a0:ed:
3b:b0:d0:a1:33:2f:49:a1:94:bf:d5:5d:4f:3d:10:
51:75:a8:21:81:2a:70:bb:0b:1e:d0:02:0b:7f:b3:
d7:0f:de:63:b5:7d:9c:1a:61:f6:6b:17:82:fe:c2:
6c:7b:ad:bb:4a:c7:a0:60:70:b0:fe:27:42:69:d4:
3a:b7:23:ff:bc:da:d6:74:95:d0:22:0d:a3:be:f1:
97:b3:c1:aa:82:50:ce:81:23:65:d9:ab:b2:9d:68:
8d:c3:6f:f7:87:af:af:60:df:6a:2b:19:cc:13:bb:
78:f7:44:28:43:14:5a:02:22:6b:c7:a4:01:41:a5:
0b:ca:fd:0d:fa:24:f2:5f:3a:13:06:b1:32:74:ec:
21:1c:11:b8:26:34:06:57:c1:06:86:b9:59:f1:f1:
9e:e8:51:26:76:7a:e5:23:a4:fe:15:73:fb:9e:78:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:49:B1:15:2B:FA:E4:5A:07:37:B1:98:2C:73:D0:8B:03:45:AB
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:90:b5:da:7a:76:9c:f6:8f:68:26:cd:23:03:2a:76:3d:0f:
eb:a6:84:7c:3e:48:14:cf:bd:e2:6a:63:3c:81:f4:b9:b4:49:
f7:dd:fb:8f:28:8a:2f:19:d1:d7:24:cd:de:0a:ad:c2:98:1c:
19:ec:c2:23:b3:67:3b:2c:70:48:6f:4a:21:ff:39:f9:79:c7:
b8:51:fd:1d:70:d8:da:8b:26:64:4a:1a:66:63:c1:7b:f1:dd:
90:f5:ce:03:a6:9e:42:31:fc:fc:77:55:b6:5d:58:65:bc:ad:
36:cf:6c:58:84:7d:8d:62:a1:fe:c9:65:11:68:b1:89:6f:ed:
ba:28:ab:cf:65:f5:8f:5a:79:25:e9:53:97:e0:9d:42:81:18:
37:92:08:22:48:be:42:21:37:78:0c:91:32:58:79:54:3b:e9:
cc:40:48:f8:ae:ca:ed:f3:33:35:a9:74:05:97:bc:c8:d0:87:
56:f3:c8:ba:98:92:c3:9b:23:e7:2d:5f:b3:de:5f:80:c3:f2:
8b:23:c9:fe:85:eb:5b:8d:3c:45:25:c4:0a:83:97:ce:3c:e2:
f0:18:f3:7b:d3:bc:a6:c5:eb:bf:68:8e:d5:da:94:8d:5e:fd:
1b:2a:00:80:5b:0b:fe:ae:22:c1:eb:45:ee:01:a5:3a:d9:b0:
38:bd:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:26 2026 by rpki-client