Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: +IMpnBOmyAO0Org/gvcPp8natJw9XrO3w+qQGnA+lgI=
Subject key identifier: 7E:1A:D2:08:87:88:2F:4F:0F:B4:6E:9F:F4:1C:14:D4:62:EE:32:0B
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019DCED0445B00D5A8A53AF2DF5EE69FEFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 12:00:48 +0000
Manifest this update: Mon 27 Apr 2026 12:00:48 +0000
Manifest next update: Tue 28 Apr 2026 12:00:48 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: 7zeoiwhXGov98AYgOmStgk1XJWkw/MWHOxxINJzVrYg=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:44:5b:00:d5:a8:a5:3a:f2:df:5e:e6:9f:ef:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Apr 27 12:00:48 2026 GMT
Not After : Apr 28 12:00:48 2026 GMT
Subject: CN=7e1ad20887882f4f0fb46e9ff41c14d462ee320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:f1:07:29:a9:bd:84:cd:d8:49:a3:4a:21:
f3:b6:72:31:78:3d:b3:31:23:f3:a3:7f:30:32:9a:
8e:36:1f:c4:73:5b:c2:eb:bf:16:b7:15:7c:82:8b:
0b:9a:a9:43:be:fd:ab:13:d2:06:28:2f:ad:52:a8:
22:81:4c:ad:ca:54:4d:27:6f:19:2f:36:53:ac:c5:
d3:ba:0f:3d:9d:1b:0f:53:d3:3f:8b:1e:3e:38:a6:
7b:60:01:c6:82:20:45:bf:df:4f:60:37:16:f6:6c:
16:b3:21:bc:c0:e3:69:bc:f1:19:47:b9:1e:5f:68:
23:e0:2a:05:b0:7b:5f:2c:30:6a:98:e6:46:33:26:
ec:42:74:19:52:5e:55:8c:46:ff:50:90:e5:64:32:
6a:f9:96:09:f4:d8:09:0c:73:eb:e3:fe:ca:ba:7c:
2b:5e:e9:67:1e:52:0d:a3:44:2f:ab:8e:db:17:02:
48:2d:bc:2f:13:5a:29:97:b0:12:4f:4b:12:4d:b8:
68:e4:1f:43:2d:2e:fa:34:d0:b9:f2:fb:67:d3:7a:
38:36:21:e2:53:76:18:92:93:ab:44:2a:37:cc:13:
96:62:aa:3e:8c:cf:8f:79:55:c7:c2:04:db:6f:9f:
16:91:51:60:17:6f:73:a8:f0:72:de:34:97:9c:89:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:D2:08:87:88:2F:4F:0F:B4:6E:9F:F4:1C:14:D4:62:EE:32:0B
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:53:e8:be:51:9b:04:16:8d:0d:a6:62:5e:62:13:e7:9f:ca:
b4:d4:4b:62:e9:75:68:db:c9:bf:fa:51:8d:15:aa:52:73:8e:
15:16:5f:4a:8c:16:a0:89:38:a2:b0:bd:35:28:08:4a:36:f9:
54:f6:20:a2:35:56:b4:7f:6b:44:d0:1d:03:a7:9d:a9:2b:1c:
5f:6e:6e:53:16:8d:c2:ad:c6:27:67:e1:0f:7d:98:c8:0a:d1:
9b:5c:c6:d5:82:2f:00:b0:2a:a5:90:e1:de:ef:b4:61:6f:03:
11:16:33:da:1e:4d:97:58:9a:23:af:b2:ce:ee:ee:8f:67:88:
b6:cb:88:ea:4c:2a:48:29:90:ed:a7:b7:35:87:75:d0:89:46:
e6:0e:f1:f7:71:2f:1a:3f:78:9d:87:47:e1:8b:23:81:dd:95:
ef:8e:36:ca:55:32:a9:b1:5f:fd:70:09:10:dd:a5:9d:27:3c:
cb:c7:74:aa:a8:75:f2:e7:89:92:e7:67:25:e4:03:81:d5:94:
09:40:bc:f2:67:7c:71:31:79:1e:45:1d:04:22:b7:80:cd:b4:
1c:fd:63:b8:37:03:27:81:8c:3e:70:fd:47:f0:29:6e:eb:ce:
93:89:3d:99:06:91:b4:cc:69:75:11:59:78:13:03:0c:fe:88:
42:77:b9:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0ERbANWopTry317mn++vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1
NmYxZGEwHhcNMjYwNDI3MTIwMDQ4WhcNMjYwNDI4MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZTFhZDIwODg3ODgyZjRmMGZiNDZlOWZmNDFjMTRkNDYyZWUzMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+vxBympvYTN2EmjSiHztnIxeD2z
MSPzo38wMpqONh/Ec1vC678WtxV8gosLmqlDvv2rE9IGKC+tUqgigUytylRNJ28Z
LzZTrMXTug89nRsPU9M/ix4+OKZ7YAHGgiBFv99PYDcW9mwWsyG8wONpvPEZR7ke
X2gj4CoFsHtfLDBqmOZGMybsQnQZUl5VjEb/UJDlZDJq+ZYJ9NgJDHPr4/7Kunwr
XulnHlINo0Qvq47bFwJILbwvE1opl7AST0sSTbho5B9DLS76NNC58vtn03o4NiHi
U3YYkpOrRCo3zBOWYqo+jM+PeVXHwgTbb58WkVFgF29zqPBy3jSXnIn5HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4a0giHiC9PD7Run/QcFNRi7jILMB8GA1UdIwQY
MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt
NDFkNTA5ZjhiMTU1LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1
LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVPovlGb
BBaNDaZiXmIT55/KtNRLYul1aNvJv/pRjRWqUnOOFRZfSowWoIk4orC9NSgISjb5
VPYgojVWtH9rRNAdA6edqSscX25uUxaNwq3GJ2fhD32YyArRm1zG1YIvALAqpZDh
3u+0YW8DERYz2h5Nl1iaI6+yzu7uj2eItsuI6kwqSCmQ7ae3NYd10IlG5g7x93Ev
Gj94nYdH4Ysjgd2V7442ylUyqbFf/XAJEN2lnSc8y8d0qqh18ueJkudnJeQDgdWU
CUC88md8cTF5HkUdBCK3gM20HP1juDcDJ4GMPnD9R/ApbuvOk4k9mQaRtMxpdRFZ
eBMDDP6IQne5QQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:23:38 2026 by rpki-client