Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: D5snoWaf0KZvjpe7vYi5EKaBW5osKNYwG7+IaGPhtq4=
Subject key identifier: B1:0D:12:07:C0:8C:56:E5:DB:D7:4D:41:4C:53:EE:99:88:FC:7B:AF
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 019F12D37991F77F76AF7CA646D17FA787CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 10:01:16 +0000
Manifest this update: Mon 29 Jun 2026 10:01:16 +0000
Manifest next update: Tue 30 Jun 2026 10:01:16 +0000
Files and hashes: 1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=)
2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: oExH2aEoC6UUplfZxpQDVS22gyCaKMGGu4Ko+D86XWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:79:91:f7:7f:76:af:7c:a6:46:d1:7f:a7:87:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Jun 29 10:01:16 2026 GMT
Not After : Jun 30 10:01:16 2026 GMT
Subject: CN=b10d1207c08c56e5dbd74d414c53ee9988fc7baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:98:97:3b:68:7c:d1:48:3b:0a:d5:7d:ba:
5e:28:60:6b:17:74:cb:2b:f7:4e:d1:03:40:31:e9:
85:9d:6c:a9:db:b1:84:2a:97:96:09:c2:3b:b9:8f:
12:f1:04:bb:b4:56:58:43:13:6a:f9:52:ab:17:65:
17:45:d2:2a:0d:4f:e2:33:cc:c8:ce:9c:02:79:c4:
68:02:dc:3b:b5:cb:01:55:bf:ad:13:d3:00:f9:d4:
c2:fe:ee:b7:2c:5f:e9:77:6b:90:d1:2b:01:fd:94:
e7:41:4a:93:09:d3:12:38:be:19:d6:39:97:c4:82:
c2:a2:d5:15:07:2c:78:ca:22:39:96:55:37:3c:7a:
b7:d0:23:a2:1a:ee:1e:95:e9:f9:3c:c2:9a:94:0f:
a6:bb:52:46:b7:26:dc:0f:09:99:bb:f2:52:4f:ee:
68:5f:14:18:ff:93:3a:e5:44:f6:59:19:fd:b2:64:
78:08:71:0f:eb:7c:a5:47:4b:18:7d:52:96:e0:f9:
c9:ae:f7:df:f1:14:5a:0a:69:a7:46:fd:77:96:e1:
47:16:ad:82:65:d2:c2:02:14:ea:f6:a4:5e:a3:8d:
a2:d9:5f:ee:b1:46:2f:f5:6c:94:3d:07:81:a7:8a:
47:71:b9:94:84:f0:41:f2:2d:2d:22:9d:f7:8e:66:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:12:07:C0:8C:56:E5:DB:D7:4D:41:4C:53:EE:99:88:FC:7B:AF
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8a:a5:16:5f:eb:c9:05:50:a5:3a:22:17:5c:6b:ba:2b:e3:
ea:e5:2d:93:fd:fd:ee:db:bc:87:6a:cf:7c:f7:6d:9c:69:f8:
0c:62:7b:e9:b1:94:41:2a:b8:f6:19:f8:c6:a5:4d:53:85:b0:
8a:8c:e4:42:68:4e:1a:a0:21:f1:0b:89:03:3d:ca:a5:c6:97:
39:85:d8:77:75:75:e2:0a:08:f4:be:fb:1e:00:8b:b8:b7:02:
af:73:fd:20:12:b4:27:bd:fa:fe:b1:ca:55:0f:45:a5:44:cb:
45:b7:26:90:dd:2d:84:35:96:62:60:2d:d2:87:d9:80:43:d5:
74:64:33:40:7d:45:c7:1a:30:8d:ad:38:8a:bb:12:21:ce:2f:
d1:f8:71:cf:43:d9:1c:99:14:a7:50:78:cb:61:49:b3:d6:79:
2d:b6:4b:5a:de:b1:08:16:67:80:9c:e3:da:4e:c6:6d:39:28:
4b:c2:95:0f:50:d7:ad:4e:06:b8:1e:6e:b5:44:01:5d:61:06:
13:c7:64:32:7e:f9:f5:ac:34:6b:51:7c:95:11:18:79:cb:54:
2d:c9:9e:da:74:70:02:2f:70:09:23:aa:bd:61:6f:e5:57:2a:
df:43:3e:65:39:d8:a9:e1:4a:26:b6:c5:60:a3:5b:ca:b5:f0:
0a:a8:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:37:03 2026 by rpki-client