Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: XCFoWNVMr9VdP94FSSqCjYk4O9l2Ad8DF7TElEeP/9M=
Subject key identifier: 0F:09:75:DB:50:EA:AA:E5:94:3C:49:A1:C2:C4:28:32:23:91:60:C2
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019ED5E2EF6C0DF48E94EE26101620C0B379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 14:01:19 +0000
Manifest this update: Wed 17 Jun 2026 14:01:19 +0000
Manifest next update: Thu 18 Jun 2026 14:01:19 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: r35sNWwoE6UsHqAjDH+EEoZLrJenN1SjCE28SUhnJJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:e2:ef:6c:0d:f4:8e:94:ee:26:10:16:20:c0:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Jun 17 14:01:19 2026 GMT
Not After : Jun 18 14:01:19 2026 GMT
Subject: CN=0f0975db50eaaae5943c49a1c2c42832239160c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:45:86:83:d0:72:05:d0:8c:b4:f1:3a:67:
d9:56:d8:16:a8:98:e6:36:38:11:a7:bb:28:80:44:
06:a3:aa:e4:80:dc:33:68:2c:da:1a:fc:81:df:1c:
48:ee:89:7b:b3:1a:70:98:63:e1:47:02:44:13:a5:
d3:79:c1:74:09:34:5c:cd:cf:55:1c:f4:f4:49:8e:
b7:a4:7e:47:84:93:6c:19:3d:cb:2f:a9:4a:b2:8d:
09:64:c3:d1:71:cb:d7:70:5c:c9:de:a8:aa:04:f6:
34:20:4b:05:e9:2d:cf:42:49:87:88:3a:de:cd:ea:
27:8c:c3:da:63:4f:a4:8c:dc:53:eb:ad:b0:99:ea:
de:4b:06:45:7a:c9:9a:6b:7c:c3:c5:01:17:62:93:
9c:62:21:b7:4e:67:71:36:b1:71:67:04:40:f0:89:
78:e8:3f:31:a1:af:ef:f8:2d:11:81:67:07:86:a9:
3f:53:43:9b:26:df:10:35:18:83:86:4b:56:6f:63:
1a:fe:5f:ba:f9:84:b6:e1:d0:ad:ff:aa:c8:00:15:
ae:5a:42:ee:73:75:bb:2c:24:f3:ad:35:8e:ca:3d:
b3:80:c2:fb:16:a9:2a:0f:dc:b2:2c:01:40:ee:39:
ef:5a:27:a1:89:d2:a3:62:e4:ce:07:ef:68:5b:0c:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:75:DB:50:EA:AA:E5:94:3C:49:A1:C2:C4:28:32:23:91:60:C2
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0d:dc:91:de:49:f6:7e:89:92:9d:99:e1:f6:2b:c9:2f:17:
1a:c9:f2:01:84:ad:e9:f0:69:89:5f:94:ad:08:0f:b7:b5:06:
81:4a:e0:4e:a8:4b:f1:73:81:e6:78:0f:36:ac:16:87:fc:f8:
c0:22:2f:a0:f8:c3:f6:ad:db:99:e2:24:b5:23:d3:79:93:3e:
9d:fc:f3:e4:91:d4:9e:c5:25:d3:db:e2:71:a2:7d:2b:53:82:
0c:55:c5:39:48:b8:ef:2f:27:de:33:f2:a5:36:20:f9:21:22:
28:2b:99:82:b7:35:f9:b2:23:fa:8b:f3:d7:c2:ec:b1:b6:25:
ce:ed:da:ed:64:3f:3d:2e:6e:f6:f4:5d:df:be:5a:0c:d7:e8:
f8:45:f9:14:19:33:c0:4c:37:6e:89:62:2b:90:9f:53:2f:2d:
83:a8:23:16:9b:26:9e:d1:40:1e:27:2f:c1:74:39:dd:42:85:
a0:22:5d:72:5c:7d:60:e7:0a:66:90:90:80:00:34:53:da:0e:
1d:d4:fa:5c:00:aa:2c:70:9a:97:99:c7:7a:8a:bc:16:37:9a:
ac:3c:14:66:2c:5f:43:45:8f:54:21:69:ac:e7:53:63:97:bc:
05:07:c1:04:fb:e4:a1:4d:ac:ea:aa:7a:08:c9:e5:bc:83:be:
74:41:72:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7V4u9sDfSOlO4mEBYgwLN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk
Y2MwOWEwHhcNMjYwNjE3MTQwMTE5WhcNMjYwNjE4MTQwMTE5WjAzMTEwLwYDVQQD
EygwZjA5NzVkYjUwZWFhYWU1OTQzYzQ5YTFjMmM0MjgzMjIzOTE2MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WxFhoPQcgXQjLTxOmfZVtgWqJjm
NjgRp7sogEQGo6rkgNwzaCzaGvyB3xxI7ol7sxpwmGPhRwJEE6XTecF0CTRczc9V
HPT0SY63pH5HhJNsGT3LL6lKso0JZMPRccvXcFzJ3qiqBPY0IEsF6S3PQkmHiDre
zeonjMPaY0+kjNxT662wmereSwZFesmaa3zDxQEXYpOcYiG3TmdxNrFxZwRA8Il4
6D8xoa/v+C0RgWcHhqk/U0ObJt8QNRiDhktWb2Ma/l+6+YS24dCt/6rIABWuWkLu
c3W7LCTzrTWOyj2zgML7FqkqD9yyLAFA7jnvWiehidKjYuTOB+9oWwxRSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8JddtQ6qrllDxJocLEKDIjkWDCMB8GA1UdIwQY
MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt
YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1
LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgw3ckd5J
9n6Jkp2Z4fYryS8XGsnyAYSt6fBpiV+UrQgPt7UGgUrgTqhL8XOB5ngPNqwWh/z4
wCIvoPjD9q3bmeIktSPTeZM+nfzz5JHUnsUl09vicaJ9K1OCDFXFOUi47y8n3jPy
pTYg+SEiKCuZgrc1+bIj+ovz18LssbYlzu3a7WQ/PS5u9vRd375aDNfo+EX5FBkz
wEw3boliK5CfUy8tg6gjFpsmntFAHicvwXQ53UKFoCJdclx9YOcKZpCQgAA0U9oO
HdT6XACqLHCal5nHeoq8FjearDwUZixfQ0WPVCFprOdTY5e8BQfBBPvkoU2s6qp6
CMnlvIO+dEFySA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 18:42:18 2026 by rpki-client