Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: s3NS+Q+Qb1qtdsle6oi/ZLlsDpgdUrrqe1iUgaoY3xQ=
Subject key identifier: BB:D9:FD:B2:DC:45:0E:99:0B:D6:9B:72:17:5B:1E:C2:24:FC:FD:4A
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 01A1795EC55437833C5437F57C4AD740597F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 18:00:16 +0000
Manifest this update: Mon 26 Oct 2026 18:00:16 +0000
Manifest next update: Tue 27 Oct 2026 18:00:16 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: IkBlQbUD7MIUDGQGikLsUNtZCuvrvUm+Geaf5/YGB6Q=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:c5:54:37:83:3c:54:37:f5:7c:4a:d7:40:59:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Oct 26 18:00:16 2026 GMT
Not After : Oct 27 18:00:16 2026 GMT
Subject: CN=bbd9fdb2dc450e990bd69b72175b1ec224fcfd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:14:e0:b3:ea:4c:ef:b2:e0:f7:5e:ec:27:
d1:d8:e3:3d:42:fa:75:cb:6c:c7:de:8d:ec:91:09:
d5:30:cc:b6:4a:15:53:bb:4d:ae:c6:47:aa:98:a6:
e9:66:43:28:f6:5c:fa:f9:28:0c:c9:0c:08:2b:0e:
cc:79:fa:3d:b3:73:01:a4:4d:56:5d:30:8c:62:f0:
42:71:39:10:c9:9f:de:ae:1c:8e:af:ca:a0:0b:58:
28:3b:3b:00:85:8a:36:4b:30:33:d2:f0:fb:69:b2:
58:68:1f:a5:2b:b9:d3:c2:27:7b:56:84:2a:0a:1d:
04:99:bb:30:6a:04:80:45:65:5b:7b:3d:65:3d:93:
6a:a5:52:8e:9e:6e:11:67:2a:5d:58:cc:41:c7:23:
4f:89:3d:78:bd:75:ce:27:9b:24:9e:2a:6f:5a:3f:
b6:53:2e:d1:bf:bc:46:96:85:7a:d2:08:ac:ff:8e:
5e:83:e0:bd:8e:2f:a4:c7:2d:5b:87:1c:5d:df:9f:
51:60:b0:4d:6c:20:93:1c:60:7e:f0:bc:b8:51:85:
6c:63:fa:28:64:a9:78:d2:c3:a7:87:06:18:c3:7a:
07:75:40:34:c1:d8:e9:74:e8:30:7a:4c:1d:cc:fc:
c6:7a:9a:42:9d:35:21:43:59:3a:b1:a8:cc:a0:57:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:FD:B2:DC:45:0E:99:0B:D6:9B:72:17:5B:1E:C2:24:FC:FD:4A
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:93:fa:80:ef:58:f7:2c:89:92:f7:16:e1:22:97:e4:20:
28:83:fb:59:4c:bf:1e:a0:ec:d0:c8:07:2b:79:b8:a1:42:9b:
8a:79:5e:1f:a4:96:22:9c:79:33:f6:c0:5b:54:8b:0d:b2:95:
03:6e:2d:3f:93:b2:5e:e3:8e:ee:6e:36:e8:0a:70:fc:28:fa:
d2:08:f9:5d:ea:19:02:a8:e2:47:4c:63:c0:61:8b:2c:9d:02:
52:bb:99:23:1b:5b:bc:11:c7:be:61:4c:e9:6d:9e:a5:89:d8:
86:2a:27:8a:a9:02:fe:45:b3:21:92:bd:b8:f7:5a:c5:2c:a6:
aa:53:4b:3b:93:35:cd:33:cd:86:d1:42:f1:74:7c:b7:53:9a:
ae:a1:f7:f2:c3:a7:f4:a2:c3:ae:26:05:b8:0e:82:75:9d:96:
2c:8e:e0:e8:be:c9:ea:fb:86:3a:f8:f1:e8:b4:bc:64:cd:08:
5a:b3:3a:a9:12:85:0d:27:4e:7f:19:14:ff:6d:c1:ae:2a:38:
17:f4:47:2d:5d:93:57:69:1e:ec:4a:41:98:30:24:ea:2b:61:
a1:3e:df:21:81:8a:e4:6a:ee:af:9a:1c:37:c3:53:ca:6c:9d:
90:5c:7e:38:33:ba:ef:49:0d:f9:e0:eb:3b:62:f2:7d:a0:49:
ed:ec:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:32:49 2026 by rpki-client