Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: etaPca4lwIqItaz6lk5BZ2vuIMHW76x7KSKbU0KIJ5U=
Subject key identifier: C6:0F:F0:65:C3:AF:8F:B6:1D:89:86:52:DB:24:D7:FC:BE:DC:C5:A6
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 019CE7129299FE5664A307490B00318CDB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 12:01:19 +0000
Manifest this update: Fri 13 Mar 2026 12:01:19 +0000
Manifest next update: Sat 14 Mar 2026 12:01:19 +0000
Files and hashes: 1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: iyRv2S8/Vv1TEkq2IM+D81h9tjcKQZQFU4kTUBPiIOE=)
3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:92:99:fe:56:64:a3:07:49:0b:00:31:8c:db:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Mar 13 12:01:19 2026 GMT
Not After : Mar 14 12:01:19 2026 GMT
Subject: CN=c60ff065c3af8fb61d898652db24d7fcbedcc5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:51:c2:36:0c:cf:66:ed:0d:89:c2:e5:f4:
1c:b4:ca:1c:d4:8a:66:e8:92:70:f1:18:f5:9f:18:
7a:af:1f:2a:29:76:d4:6b:ad:31:88:bf:f5:98:f0:
0d:f6:25:80:75:55:b2:9c:4b:74:a8:b2:bc:ab:e0:
24:44:a6:fc:04:19:23:c5:13:17:a6:65:77:7d:2a:
44:90:b0:46:c6:ee:f7:af:7b:c8:03:6b:cd:08:d0:
3c:4c:da:32:bc:44:32:bc:fa:12:4c:78:60:0e:78:
a1:f3:7c:6a:9e:f8:96:cd:fa:ae:51:a8:e8:d6:75:
43:84:68:a6:a0:17:6d:d7:72:f3:75:13:3d:76:26:
30:e7:9d:ee:d2:8a:f3:ff:ed:90:39:70:be:a8:c4:
91:0c:99:8f:de:b1:55:18:69:4c:ba:7f:6b:81:af:
ef:44:a4:f6:ab:e7:a8:1a:31:f2:f6:d3:7e:75:ac:
62:02:37:73:30:0c:38:f9:79:00:11:a2:b4:c6:47:
d3:2d:2d:8e:e0:15:de:db:41:8d:36:c4:b3:42:c4:
ab:c9:d9:1e:2f:6c:76:68:21:e3:08:e2:a3:90:b1:
c8:fd:d1:cb:1c:1d:61:4f:e8:45:c7:49:7f:79:23:
c7:68:b9:8e:a6:b6:b3:33:57:f4:f8:f7:95:54:18:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0F:F0:65:C3:AF:8F:B6:1D:89:86:52:DB:24:D7:FC:BE:DC:C5:A6
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:f9:1e:6a:12:a6:b1:f5:ae:89:5f:8b:19:ae:ca:15:b8:
2a:a9:2a:2e:73:0a:7c:9c:2c:77:c3:cb:c7:d2:22:91:a1:7e:
e6:01:33:da:4a:27:8a:78:5a:82:8e:f2:02:fd:55:b4:27:a5:
0b:aa:6e:ad:1a:f1:e3:f9:17:3d:37:ee:70:e7:b4:3e:66:b1:
bc:43:ba:ef:95:62:b6:a7:3a:27:d8:89:6a:fb:80:30:8d:6a:
84:86:20:b3:3c:e8:21:97:8d:ff:3f:1c:79:0d:6f:46:e8:65:
20:6a:07:7c:22:ec:01:c6:1d:d3:58:3b:21:3f:fe:6d:fc:6d:
68:e5:b4:3e:ad:d1:e7:2a:9c:cb:7c:e3:60:99:95:6d:28:05:
bc:d3:86:f6:e2:a2:3f:6f:04:a1:f4:ec:1e:58:cd:c1:1a:29:
c5:4b:1c:7e:9d:22:51:d6:ee:61:a9:49:26:b8:18:6e:cb:90:
3b:cb:c8:52:f6:53:8b:20:53:e7:36:7b:a4:82:5c:b2:e3:e4:
5a:77:7f:c6:d9:e4:16:08:1e:d1:0b:3c:fd:81:43:49:26:cf:
64:a7:b3:e1:f2:73:99:92:49:ed:29:c1:66:de:37:09:47:3f:
26:d1:3f:77:7e:36:2c:54:c4:2a:f0:0b:c6:e4:57:17:eb:69:
41:7c:99:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznEpKZ/lZkowdJCwAxjNsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWMzMzM2ZTJjZTNiZDc1YWIyOWNlODFlNTRmZjgxZWM1
NmYxZGEwHhcNMjYwMzEzMTIwMTE5WhcNMjYwMzE0MTIwMTE5WjAzMTEwLwYDVQQD
EyhjNjBmZjA2NWMzYWY4ZmI2MWQ4OTg2NTJkYjI0ZDdmY2JlZGNjNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTtRwjYMz2btDYnC5fQctMoc1Ipm
6JJw8Rj1nxh6rx8qKXbUa60xiL/1mPAN9iWAdVWynEt0qLK8q+AkRKb8BBkjxRMX
pmV3fSpEkLBGxu73r3vIA2vNCNA8TNoyvEQyvPoSTHhgDnih83xqnviWzfquUajo
1nVDhGimoBdt13LzdRM9diYw553u0orz/+2QOXC+qMSRDJmP3rFVGGlMun9rga/v
RKT2q+eoGjHy9tN+daxiAjdzMAw4+XkAEaK0xkfTLS2O4BXe20GNNsSzQsSrydke
L2x2aCHjCOKjkLHI/dHLHB1hT+hFx0l/eSPHaLmOprazM1f0+PeVVBjiKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYP8GXDr4+2HYmGUtsk1/y+3MWmMB8GA1UdIwQY
MBaAFDNcMzbizjvXWrKc6B5U/4HsVvHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQt
NDFkNTA5ZjhiMTU1LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZWQyMGUtMjE1OS00N2Q1LTliMWQtNDFkNTA5ZjhiMTU1
LzEvTTF3ek51TE9POWRhc3B6b0hsVF9nZXhXOGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIf5HmoS
prH1rolfixmuyhW4KqkqLnMKfJwsd8PLx9IikaF+5gEz2koninhago7yAv1VtCel
C6purRrx4/kXPTfucOe0PmaxvEO675Vitqc6J9iJavuAMI1qhIYgszzoIZeN/z8c
eQ1vRuhlIGoHfCLsAcYd01g7IT/+bfxtaOW0Pq3R5yqcy3zjYJmVbSgFvNOG9uKi
P28EofTsHljNwRopxUscfp0iUdbuYalJJrgYbsuQO8vIUvZTiyBT5zZ7pIJcsuPk
Wnd/xtnkFgge0Qs8/YFDSSbPZKez4fJzmZJJ7SnBZt43CUc/JtE/d342LFTEKvAL
xuRXF+tpQXyZeQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:33:46 2026 by rpki-client