Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: qeDn+K5kzzw1UFI1p1nanEyfqUnTSrXzCNK1YO8hftQ=
Subject key identifier: 42:15:CD:24:9F:51:46:C5:EC:38:B0:20:04:0B:EA:FA:C6:B1:ED:28
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 01A12BB275B0CDAE323E6B26ABBA228A8F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 16:01:17 +0000
Manifest this update: Sun 11 Oct 2026 16:01:17 +0000
Manifest next update: Mon 12 Oct 2026 16:01:17 +0000
Files and hashes: 1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=)
2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: Cfe72H7c7igqIDVMygQebPZceSRxr7JJ+h9G5CdoqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:75:b0:cd:ae:32:3e:6b:26:ab:ba:22:8a:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Oct 11 16:01:17 2026 GMT
Not After : Oct 12 16:01:17 2026 GMT
Subject: CN=4215cd249f5146c5ec38b020040beafac6b1ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:48:ee:85:41:fc:39:5b:f5:f2:fc:9f:08:
38:81:ec:f0:60:51:08:88:89:a3:92:58:c2:5c:fa:
1e:c9:7d:d8:5b:33:d0:a2:c2:f6:32:df:73:16:ed:
3f:da:78:48:02:ee:25:95:e2:e0:86:d4:68:04:ab:
72:62:8a:18:f3:32:89:e4:4e:f7:c5:e7:79:4e:07:
3a:61:c4:14:aa:74:06:29:b8:ea:ac:34:61:a5:da:
2a:8e:bf:a2:4f:0b:34:2f:86:a3:51:c7:ff:57:67:
2f:a3:21:f0:63:8a:c7:44:5e:2e:1e:a9:8d:fa:37:
1a:4e:24:ca:37:10:76:28:ec:f3:91:ad:d3:f2:5d:
f0:c4:f8:ed:c3:99:96:49:08:d1:71:7d:12:a7:8d:
d9:5c:38:89:80:74:ba:77:cf:d5:2b:e6:22:e6:6e:
6f:27:53:f1:71:f4:43:ba:7d:f8:ca:a1:15:3a:df:
ee:10:fb:e4:88:54:f0:89:41:b4:99:86:38:55:84:
a5:6c:98:7a:cd:3b:ce:83:07:6f:b8:ee:70:a2:d4:
33:83:47:b7:73:11:26:a2:44:ec:fb:5f:d0:3b:1e:
02:42:8e:10:cb:fa:56:64:9a:19:8a:72:c5:c7:79:
3c:ce:9d:d4:b3:f1:f5:3d:d6:87:a3:42:56:7b:fb:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:CD:24:9F:51:46:C5:EC:38:B0:20:04:0B:EA:FA:C6:B1:ED:28
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5e:87:29:7f:ee:b1:dd:7f:53:01:15:7a:2a:a7:48:a3:b9:
b1:5b:9e:a3:40:94:82:6e:86:e3:89:3a:ea:99:0a:55:f5:90:
03:c3:67:88:0b:1b:06:a5:8f:0b:52:ff:7f:d7:b9:ed:5b:68:
9a:55:61:e6:71:72:78:f1:7f:e5:69:51:96:45:03:23:0f:40:
15:b4:cc:c6:75:74:a6:37:2a:82:2b:31:de:cc:33:db:c8:18:
03:b8:b5:d3:a6:64:2e:ad:af:82:e2:6d:fc:33:b0:7e:e6:e3:
bc:12:9a:9f:0e:d3:ba:4e:8a:43:d0:8d:89:97:24:af:62:0f:
96:0d:9a:9a:c3:18:7d:08:e3:06:48:f6:dc:47:4f:b6:ed:e4:
26:93:c5:1e:42:f1:32:44:47:aa:8d:9a:29:08:e2:27:6f:7a:
58:de:c2:ee:1c:6a:4d:80:c7:fb:4b:9d:5c:55:f8:67:bc:ec:
fc:03:f1:09:32:fa:78:a1:58:00:13:3d:ca:37:1c:2e:1f:bf:
73:10:c4:b1:9d:69:5e:02:9f:d1:50:db:d2:33:43:a7:9f:89:
98:98:e1:32:b3:e4:a6:1e:a6:29:8d:1a:89:40:24:8d:70:be:
76:b2:fc:59:36:f5:e5:fa:6d:f2:37:f4:67:51:21:60:d4:35:
7d:df:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:01:45 2026 by rpki-client