Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: OnTGId4K00HHtv7Hcsbz0aPVZNSJSjl3hVyEpNtdJs0=
Subject key identifier: 87:3B:36:B5:75:A1:72:48:CD:A0:2C:45:D8:9B:F4:64:81:F4:78:00
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019FA229474A94285115CC18BE5905E2CA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 06:00:41 +0000
Manifest this update: Mon 27 Jul 2026 06:00:41 +0000
Manifest next update: Tue 28 Jul 2026 06:00:41 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: XBpzVI/Y0aA5gcBPP2z497exoWCNPo1PC1pruuSJ978=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:47:4a:94:28:51:15:cc:18:be:59:05:e2:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Jul 27 06:00:41 2026 GMT
Not After : Jul 28 06:00:41 2026 GMT
Subject: CN=873b36b575a17248cda02c45d89bf46481f47800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:07:18:25:67:24:d8:40:c7:98:5b:d2:59:
45:9e:ae:6d:ee:a4:1a:09:5b:5f:ee:11:eb:c6:83:
37:6b:56:f5:7d:cb:34:3d:9e:3c:e8:6f:c8:e8:7b:
fb:ca:d1:da:36:8c:0b:94:21:22:ae:31:e7:45:7e:
5a:16:66:a5:a7:44:1a:f3:4d:a2:f6:74:3c:4e:2e:
36:bd:43:40:fb:a0:f3:66:bc:a5:51:42:b9:b2:fd:
0b:97:61:a0:4a:29:bf:95:94:29:57:2f:d8:47:04:
4f:80:fd:c6:7e:ea:36:f8:4e:5b:08:c2:aa:bf:7b:
18:0a:88:d3:0d:cb:dd:06:55:53:75:00:1b:1a:88:
0c:23:96:d6:74:d2:5b:44:50:63:79:fe:9f:8e:4a:
0d:87:47:39:7c:f3:62:2e:ea:0d:3c:24:ca:df:ec:
c0:e2:12:2d:12:38:bb:73:3a:d0:c9:ea:b7:d9:de:
20:e0:45:b8:d1:17:d6:d3:39:14:cb:96:8d:55:10:
63:55:d9:0d:f5:6b:d4:9e:60:89:4a:27:45:70:fd:
1a:d3:2b:8d:7d:41:00:80:f9:c8:dd:e1:cd:74:97:
55:9b:4e:45:da:2b:44:57:f8:6f:48:50:7b:40:cb:
3a:35:78:54:39:7e:f8:b5:39:08:fa:dc:51:07:cc:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:36:B5:75:A1:72:48:CD:A0:2C:45:D8:9B:F4:64:81:F4:78:00
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:52:6a:6c:63:9c:81:a9:2f:58:c0:71:bd:6b:3b:b4:9c:13:
da:2e:88:56:00:f1:00:99:ee:ab:d9:95:6b:e2:4e:1b:b0:f4:
f3:da:12:2c:fa:f8:30:2f:5f:92:3b:8b:3f:e6:8d:c5:b0:35:
28:2b:f2:4f:18:ea:11:08:48:bf:b7:a3:15:d5:c9:23:a1:e8:
8c:40:c3:04:ef:0e:30:32:cd:9a:4a:db:c9:19:4f:d6:58:b3:
f8:e7:d3:72:98:c8:db:48:f6:a7:5c:f9:8a:72:df:d1:ee:60:
6f:d6:d9:1c:1b:d9:77:90:d0:09:45:78:8b:7c:e6:97:e9:8e:
64:6b:0a:70:2b:40:a1:77:37:c4:06:bb:b5:97:59:10:65:ef:
78:74:e0:bb:dd:33:67:2b:f7:75:b0:a6:11:5c:3c:44:19:5a:
68:a8:e3:4f:d5:7b:5f:56:30:7b:a0:95:40:4f:a9:97:57:c6:
4f:35:ac:fb:02:1f:8b:c6:36:bc:09:77:56:2a:2d:2a:48:29:
ab:6d:61:43:9f:b3:f2:15:97:d9:d4:e9:2d:a6:d8:86:b5:dd:
fb:cf:f2:15:36:e7:3e:7d:ff:e7:1d:a7:28:08:b4:8b:ce:d5:
90:12:3b:01:ea:28:1e:06:c3:b8:c8:7d:8b:d5:8c:16:4e:99:
68:b1:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:02:02 2026 by rpki-client