Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: gx23f8UFfu20T7HUyflFDIsj+XEmcFfPxAhTTKgj86w=
Subject key identifier: A7:15:F0:55:1E:6C:B6:3B:3F:ED:52:5D:2A:95:38:D2:D5:EA:5C:07
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 019D37C020957CEF1F54E005AFB646AE52D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0FEC
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: 8upv_qHHIISzToSAMP0-RhfYGtI.roa (hash: C7Jy+UEAqPDF0X+eyhzxq1LGOJLzx5Nt6AKDkKZbA9E=)
2: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: ufbUeFT2wbnRFpHZvHtqkGDMmaM4kfWOr9isjAd6YaY=)
3: lOM9YI5AfClQ38kpLZQR1_F2EUg.roa (hash: +CFanZb7ldtygEZGWlBOOK8kO36urGbI3MSk/pZ6T4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:20:95:7c:ef:1f:54:e0:05:af:b6:46:ae:52:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=a715f0551e6cb63b3fed525d2a9538d2d5ea5c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:96:4b:67:83:c1:6a:4e:15:24:7b:24:49:
80:51:ed:d0:7d:8f:42:b5:14:17:ca:87:d7:3a:5d:
e4:02:a8:62:eb:75:da:d6:d8:1b:18:2a:aa:31:2b:
50:b1:fe:3a:1d:c2:a7:39:21:1e:ba:60:2a:14:67:
aa:b4:fb:f5:26:5a:18:72:7d:29:c8:83:ab:37:7f:
1c:e4:b7:4d:18:69:a3:a6:d8:00:b1:cc:1f:f1:6f:
a0:58:a3:5d:15:26:90:fd:f0:45:9e:75:f8:f7:1f:
85:d4:f0:6d:9f:79:52:d4:09:a4:f7:50:e5:26:37:
73:80:c9:e7:46:53:33:84:00:42:14:12:a0:cb:4e:
dd:1f:c9:97:6b:cf:b3:c2:c4:e4:e3:ec:91:85:44:
7f:37:d4:cd:da:e9:29:6e:9a:34:82:45:a2:37:48:
0f:bd:7d:ea:7c:f0:c9:82:6b:41:1c:72:ab:d5:88:
43:2b:e6:7b:f0:3f:1e:4c:92:04:62:94:56:74:ca:
ae:3a:eb:5a:10:00:86:57:cd:c0:ad:d2:57:a5:33:
0c:39:e5:5d:8b:f9:17:fb:5c:e6:2f:2c:80:85:40:
f8:a1:eb:89:3c:0c:ae:50:ec:cd:62:51:3c:04:9c:
11:11:23:15:cc:48:03:1e:71:1a:0f:26:ac:22:69:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:F0:55:1E:6C:B6:3B:3F:ED:52:5D:2A:95:38:D2:D5:EA:5C:07
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:46:ac:09:9f:e6:30:07:06:63:68:6f:fc:ae:7e:91:92:2c:
fb:4f:b0:d6:ce:7b:d3:0e:f2:5e:7e:06:18:bf:46:67:d7:b0:
2c:f3:f9:f8:37:8b:67:ee:8b:e7:2f:ab:f1:00:11:5a:b1:ed:
f6:88:29:4d:f7:aa:21:00:61:52:46:6f:9d:d9:3d:bb:96:58:
dd:40:c6:a5:fa:34:72:cf:a2:34:fd:4e:01:31:5e:03:46:90:
49:f5:eb:12:50:ef:f6:1e:4c:08:38:1c:68:b4:79:ac:90:38:
76:a9:ee:da:7b:e6:e6:1a:eb:00:2d:34:5e:1d:95:df:35:7c:
e6:d8:f8:60:5f:ad:a0:bf:6c:5b:25:52:39:2a:48:0d:8b:ad:
22:12:b2:bd:e8:94:74:5c:38:a5:fe:fc:08:c5:70:c6:6f:8a:
3c:f0:ba:ec:b3:05:a6:ce:7c:be:a5:e3:43:77:0e:47:d6:34:
d0:92:e6:c5:1a:2a:74:64:05:fc:99:d5:c4:91:61:97:90:db:
4c:44:30:8c:4c:86:1c:1b:37:06:78:8c:0f:ab:9b:52:0f:30:
c5:4e:67:00:b5:f7:7f:4e:39:d2:e3:73:2c:b5:e3:62:61:ee:
4c:a7:09:41:14:85:4a:8e:c0:36:a7:4c:0e:2c:97:9b:c8:57:
4b:80:b6:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCCVfO8fVOAFr7ZGrlLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYmE2YzBiY2NhMTZjNjg1ZGM3YjliMjdmMTk5YjQyYjRi
ZWVlZTkwHhcNMjYwMzI5MDQwMDMxWhcNMjYwMzMwMDQwMDMxWjAzMTEwLwYDVQQD
EyhhNzE1ZjA1NTFlNmNiNjNiM2ZlZDUyNWQyYTk1MzhkMmQ1ZWE1YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxaWS2eDwWpOFSR7JEmAUe3QfY9C
tRQXyofXOl3kAqhi63Xa1tgbGCqqMStQsf46HcKnOSEeumAqFGeqtPv1JloYcn0p
yIOrN38c5LdNGGmjptgAscwf8W+gWKNdFSaQ/fBFnnX49x+F1PBtn3lS1Amk91Dl
JjdzgMnnRlMzhABCFBKgy07dH8mXa8+zwsTk4+yRhUR/N9TN2ukpbpo0gkWiN0gP
vX3qfPDJgmtBHHKr1YhDK+Z78D8eTJIEYpRWdMquOutaEACGV83ArdJXpTMMOeVd
i/kX+1zmLyyAhUD4oeuJPAyuUOzNYlE8BJwRESMVzEgDHnEaDyasImk9ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcV8FUebLY7P+1SXSqVONLV6lwHMB8GA1UdIwQY
MBaAFDO6bAvMoWxoXce5sn8Zm0K0vu7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYt
Y2M3NTc5NzUxOGEwLzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYtY2M3NTc5NzUxOGEw
LzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0asCZ/m
MAcGY2hv/K5+kZIs+0+w1s570w7yXn4GGL9GZ9ewLPP5+DeLZ+6L5y+r8QARWrHt
9ogpTfeqIQBhUkZvndk9u5ZY3UDGpfo0cs+iNP1OATFeA0aQSfXrElDv9h5MCDgc
aLR5rJA4dqnu2nvm5hrrAC00Xh2V3zV85tj4YF+toL9sWyVSOSpIDYutIhKyveiU
dFw4pf78CMVwxm+KPPC67LMFps58vqXjQ3cOR9Y00JLmxRoqdGQF/JnVxJFhl5Db
TEQwjEyGHBs3BniMD6ubUg8wxU5nALX3f0450uNzLLXjYmHuTKcJQRSFSo7ANqdM
DiyXm8hXS4C20Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:12 2026 by rpki-client