Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: 5m+rphpnnc9mz1vI88AKRt7o8iThMORC/agVFC5VkwM=
Subject key identifier: BB:F3:D1:A2:B3:95:1C:A3:7C:98:C6:A1:5F:BD:A9:8D:55:49:7C:5F
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 019E921472A73FAD987D75E1B0F8D7DDCC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0D68
Signing time: Thu 04 Jun 2026 10:01:13 +0000
Manifest this update: Thu 04 Jun 2026 10:01:13 +0000
Manifest next update: Fri 05 Jun 2026 10:01:13 +0000
Files and hashes: 1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: QlDl6PO4dKnpOrEtMmL/S1eruIU3C2Lrlya2Ht1YPoM=)
2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=)
3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:14:72:a7:3f:ad:98:7d:75:e1:b0:f8:d7:dd:cc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jun 4 10:01:13 2026 GMT
Not After : Jun 5 10:01:13 2026 GMT
Subject: CN=bbf3d1a2b3951ca37c98c6a15fbda98d55497c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:e3:27:08:d3:5c:16:c9:ef:d1:dc:de:bc:
7f:e9:fe:cf:d0:8a:d5:be:12:66:b1:d8:75:70:a3:
11:47:58:6a:84:63:2c:4e:cf:78:33:85:db:52:fe:
92:76:bd:2b:50:7f:72:56:39:ec:5b:0a:a9:41:89:
63:05:48:b1:5b:0f:86:31:e6:5a:0f:f2:f1:d3:3b:
36:d4:75:20:c9:85:ae:b7:5f:10:d9:15:c3:60:cf:
22:e7:23:c3:3e:65:f0:ed:ca:2c:1b:1d:0e:1a:47:
f0:a3:cf:2f:5e:13:85:bb:8a:ed:1d:9c:31:f4:0a:
c6:4d:7f:ac:39:99:0c:b7:57:7e:74:91:2c:06:66:
75:a3:94:be:ff:8c:b1:ff:26:f9:40:9b:3c:57:b1:
b4:ca:3b:26:f7:32:28:24:1f:64:99:2b:bc:c1:38:
ee:fa:79:c4:45:e2:21:9a:00:bd:d2:57:6b:4c:9b:
2a:0b:af:78:21:ef:0e:18:b3:96:8b:8f:31:24:90:
22:6d:ce:26:02:4c:48:8a:99:e4:97:8a:66:a2:9c:
e4:e5:0a:f7:e3:84:3e:15:7e:c9:47:96:e4:d1:01:
f8:ca:f7:8f:2a:11:5f:ec:18:42:e5:73:bc:4e:f3:
74:ae:da:0c:7a:50:92:4a:57:29:90:9f:65:8c:62:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:D1:A2:B3:95:1C:A3:7C:98:C6:A1:5F:BD:A9:8D:55:49:7C:5F
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:78:17:79:2b:0c:dc:8e:29:2a:76:f9:b1:34:f2:fa:66:da:
3b:cd:ab:e6:3d:bc:95:6d:71:a6:f3:5b:d5:1f:eb:a3:2a:20:
8f:6c:6e:e6:06:a1:2e:ea:35:c7:4a:da:65:0e:fc:a3:a3:c0:
20:64:bf:09:4e:e7:60:69:2d:e7:aa:c5:7e:69:06:64:bd:e2:
2b:b1:a7:fa:63:40:32:33:e4:83:6c:b3:0a:64:f9:df:57:ff:
db:50:62:1b:d1:32:83:1e:74:e9:c6:29:30:9b:00:30:95:4c:
c5:d6:97:44:ff:b7:be:5f:cd:d3:38:26:cb:ed:8e:eb:5f:1e:
83:ce:fd:9c:dd:b6:5d:93:d8:cc:03:40:ad:81:17:ff:7a:5f:
4a:14:0f:9b:c0:f7:23:29:d6:30:29:61:1b:3a:a8:8d:ef:53:
0c:f1:02:48:cc:a4:a3:7f:88:e4:60:23:0c:6a:26:f0:de:50:
44:98:c2:c0:a7:02:b7:02:b6:2b:73:28:30:79:26:03:f4:ab:
6e:d3:e4:f6:90:fb:73:9a:2d:f1:e0:2f:6a:b5:d5:41:33:e7:
58:68:ed:e9:cc:fb:6f:31:7c:72:dc:43:6a:1f:bd:13:d9:e6:
c2:d5:70:68:98:bd:90:f1:27:fc:35:70:2c:28:12:ff:b9:9a:
23:81:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:30:47 2026 by rpki-client