Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: 3/67tmlhxRq92HZv+uaMa5cxsGlvcJSJChLr+IyaI7k=
Subject key identifier: B6:99:63:DC:28:DA:EF:F3:F2:75:BE:40:46:A4:59:50:80:C6:D7:D0
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 01A08BD69178B94561B1AAF2841B60515B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 15:01:29 +0000
Manifest this update: Thu 10 Sep 2026 15:01:29 +0000
Manifest next update: Fri 11 Sep 2026 15:01:29 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: 7krTtIQAPVkzLSMqCgThe0wvphZsKuAOkO6BHqy/3aU=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:91:78:b9:45:61:b1:aa:f2:84:1b:60:51:5b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Sep 10 15:01:29 2026 GMT
Not After : Sep 11 15:01:29 2026 GMT
Subject: CN=b69963dc28daeff3f275be4046a4595080c6d7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:a1:bd:96:59:81:1c:c9:2e:5b:a2:24:08:
c5:be:62:e0:81:4e:69:86:9a:41:83:75:cd:49:1e:
d4:f5:83:5c:d4:ae:6d:55:dd:00:34:82:8a:87:0d:
c0:60:9f:b7:4e:42:52:ac:e3:ca:84:3d:9b:b4:9f:
53:03:cb:08:84:9a:1f:17:3f:f0:32:cb:d4:42:32:
86:4a:52:08:b0:6d:7c:e0:bb:60:f0:43:06:f2:83:
f1:e6:bc:4c:1b:5a:d7:d2:d5:57:fc:43:ca:a5:c6:
e0:79:6c:7d:08:08:54:23:32:86:c1:e8:bd:07:1c:
24:ea:cf:7a:8f:f0:09:4c:67:4b:a8:6e:ac:4e:e4:
b8:2e:71:ff:fa:75:f1:87:78:94:20:f5:e7:d7:05:
c7:be:90:ed:9e:de:69:c5:7a:d1:9a:cd:47:80:b1:
44:64:88:eb:48:2d:4a:dd:1e:94:86:70:f9:d6:b6:
30:53:37:e0:a1:6b:01:fa:a7:72:c8:3d:f3:98:64:
29:09:ac:9e:cb:33:94:c7:dc:20:61:31:80:f9:d2:
44:7b:d2:78:71:d1:b6:58:a8:63:e3:c0:61:80:84:
82:01:4c:cb:b1:2f:2d:e9:9d:5a:d0:a6:0d:38:0c:
41:e6:86:cc:9f:fc:fc:71:4c:6b:7c:ef:57:fd:5d:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:99:63:DC:28:DA:EF:F3:F2:75:BE:40:46:A4:59:50:80:C6:D7:D0
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2f:80:ba:95:f1:b4:a0:65:74:64:0c:b0:b4:c3:f8:50:1a:
98:3e:5e:c1:36:fb:6b:11:f6:d1:f2:72:ef:81:5b:18:bb:d2:
76:51:c3:2b:72:13:0c:d5:ed:60:ac:8e:ad:10:3d:55:1e:45:
25:f3:47:b7:ff:3a:8c:2b:f5:cb:2d:03:f1:ac:50:ae:b1:21:
c7:3f:57:ce:74:47:b9:57:78:45:d5:dd:b8:c0:d5:0c:0d:5f:
83:42:00:7c:ad:95:1a:4a:da:c2:78:d8:5d:ae:2b:dc:99:89:
7a:67:3f:04:05:9c:15:82:b9:6b:7e:bd:eb:9f:20:0b:08:1f:
2b:10:b5:6e:aa:c2:53:74:c3:05:c7:27:98:57:35:b1:00:cf:
bb:25:65:46:ff:56:ab:ce:94:a9:50:ad:02:32:96:62:97:fa:
ad:0d:c2:40:13:20:27:11:7a:76:f8:34:7e:e1:aa:72:54:ae:
cd:22:33:54:a4:c2:ef:46:c3:0e:c3:7c:54:f1:c2:b6:74:4d:
3a:69:01:a6:18:90:8c:59:9a:e9:a8:1e:f9:27:b6:b0:62:00:
64:14:f8:1c:d1:9a:13:e5:0d:ea:b1:d2:3e:06:30:b0:ee:5f:
9f:9d:3c:80:05:d4:c8:cc:b9:35:2f:53:21:95:7d:04:39:8b:
91:f3:da:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1pF4uUVhsaryhBtgUVuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1
NmYxZGEwHhcNMjYwOTEwMTUwMTI5WhcNMjYwOTExMTUwMTI5WjAzMTEwLwYDVQQD
EyhiNjk5NjNkYzI4ZGFlZmYzZjI3NWJlNDA0NmE0NTk1MDgwYzZkN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41OhvZZZgRzJLluiJAjFvmLggU5p
hppBg3XNSR7U9YNc1K5tVd0ANIKKhw3AYJ+3TkJSrOPKhD2btJ9TA8sIhJofFz/w
MsvUQjKGSlIIsG184Ltg8EMG8oPx5rxMG1rX0tVX/EPKpcbgeWx9CAhUIzKGwei9
Bxwk6s96j/AJTGdLqG6sTuS4LnH/+nXxh3iUIPXn1wXHvpDtnt5pxXrRms1HgLFE
ZIjrSC1K3R6UhnD51rYwUzfgoWsB+qdyyD3zmGQpCayeyzOUx9wgYTGA+dJEe9J4
cdG2WKhj48BhgISCAUzLsS8t6Z1a0KYNOAxB5obMn/z8cUxrfO9X/V18uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaZY9wo2u/z8nW+QEakWVCAxtfQMB8GA1UdIwQY
MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt
NDFkNTA5ZjhiMTU1LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1
LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAi+AupXx
tKBldGQMsLTD+FAamD5ewTb7axH20fJy74FbGLvSdlHDK3ITDNXtYKyOrRA9VR5F
JfNHt/86jCv1yy0D8axQrrEhxz9XznRHuVd4RdXduMDVDA1fg0IAfK2VGkrawnjY
Xa4r3JmJemc/BAWcFYK5a369658gCwgfKxC1bqrCU3TDBccnmFc1sQDPuyVlRv9W
q86UqVCtAjKWYpf6rQ3CQBMgJxF6dvg0fuGqclSuzSIzVKTC70bDDsN8VPHCtnRN
OmkBphiQjFma6age+Se2sGIAZBT4HNGaE+UN6rHSPgYwsO5fn508gAXUyMy5NS9T
IZV9BDmLkfPaeA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:06:57 2026 by rpki-client