Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File: M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier: peEHGielKvboDFQ8Zi3JZSwERzl+ylzLrbK5A0u+lRw=
Subject key identifier: 52:BF:DD:EC:8B:F1:B4:E8:5A:9C:4C:25:88:7B:9A:D9:E8:B1:E4:FA
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer: /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial: 019E517DF392329C8103880EDE43D0807CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number: 010D
Signing time: Fri 22 May 2026 21:01:09 +0000
Manifest this update: Fri 22 May 2026 21:01:09 +0000
Manifest next update: Sat 23 May 2026 21:01:09 +0000
Files and hashes: 1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: pMuRhwMl3nJmtttplVAPhffiP4RMkrPvGo7BhJJI+Fg=)
3: YeVLRWZskfx_IZGiLmT84waZsq0.roa (hash: hRBrTkDkDF9xPGZibtinblYHrG8tk7wxZI+ehCaks0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:7d:f3:92:32:9c:81:03:88:0e:de:43:d0:80:7c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
Validity
Not Before: May 22 21:01:09 2026 GMT
Not After : May 23 21:01:09 2026 GMT
Subject: CN=52bfddec8bf1b4e85a9c4c25887b9ad9e8b1e4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:0d:d7:c2:62:65:86:80:54:b5:30:68:98:
ef:6b:b8:a7:de:5c:17:d4:3a:77:da:96:19:09:d9:
02:0d:f6:0b:50:81:a6:5e:cb:6c:2a:08:cb:84:a7:
76:bd:aa:f5:a7:fd:f6:04:0f:65:38:b9:e5:1a:3d:
e9:94:79:b5:d3:62:e9:02:b1:a5:90:a3:b2:e8:99:
62:8a:76:b5:8d:38:96:f2:fe:f2:ff:1b:a2:33:08:
f3:88:7c:6b:46:7f:ef:cb:af:a7:a0:c6:7f:c4:d5:
e6:83:7a:fe:83:95:ab:6e:52:9b:93:cc:b6:49:e6:
a7:18:7a:10:b7:c1:c7:ff:8b:a9:2f:91:a3:2f:72:
f7:f2:ee:91:72:88:68:8c:7e:64:12:bb:46:28:1a:
f2:94:2a:8c:3b:d7:a4:00:49:05:09:32:b8:23:c6:
28:ca:7f:61:bc:dd:ab:65:6f:2f:75:c2:82:56:9f:
96:c7:19:d8:1f:13:c6:2c:08:b8:1e:1b:11:01:9a:
82:ad:20:4a:db:3d:29:0b:b1:11:aa:20:b1:cd:95:
0f:84:6a:37:39:84:d2:66:cf:31:4c:e8:a2:1f:99:
3d:40:2e:ec:66:8b:3d:fd:a2:46:b4:e7:a9:fc:85:
8c:0d:b0:f3:76:22:26:de:86:be:d5:52:d8:d1:80:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:DD:EC:8B:F1:B4:E8:5A:9C:4C:25:88:7B:9A:D9:E8:B1:E4:FA
X509v3 Authority Key Identifier:
keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:de:d1:4b:38:d0:91:86:b7:f5:9e:77:8b:dd:cb:c7:d0:43:
e3:59:c5:88:97:61:f1:e4:49:a1:6f:a3:e6:a8:29:b5:67:9b:
24:bc:7e:ab:f4:49:16:71:28:4e:cc:bb:76:21:3d:2a:70:23:
de:93:f0:62:91:a1:2e:e0:9f:1b:1d:c2:da:c1:24:83:9e:ee:
9b:71:3f:ac:dd:73:49:ef:1d:15:2c:9a:87:a2:ba:e0:34:df:
79:23:86:09:73:7e:08:a9:d9:b2:08:cf:5e:a8:f6:aa:02:b9:
e7:bc:3e:68:5e:62:ff:de:00:3d:3d:5e:c5:90:18:fb:ce:77:
e8:f3:a5:98:8c:69:ba:81:6b:f5:e1:d3:63:d9:4b:79:bf:d0:
67:b4:a6:1f:59:dd:9a:2c:28:28:df:46:62:83:aa:44:20:cb:
c6:ce:60:35:2f:03:a2:10:67:88:23:41:b2:9b:14:a8:1a:ee:
06:f1:b7:49:8c:6d:06:a4:1c:49:4f:b1:be:96:60:ae:e7:df:
d5:43:a1:df:74:9b:63:c4:01:9e:53:89:e1:42:ee:c6:1a:13:
d0:62:6f:55:25:79:03:79:f7:45:15:1f:84:1c:43:77:21:28:
2a:2a:16:5a:48:44:17:a6:bf:cd:89:1d:bb:f2:11:9a:d3:8e:
e2:b2:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:40 2026 by rpki-client