Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: sokVyHuJVAZKdxigNF8w+z/6sZIjrVJLpCu8k32CyNw=
Subject key identifier: 5D:6C:AC:70:CA:C8:DA:2E:79:DE:EB:16:45:F3:9B:57:AF:2D:E5:D3
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019EB73361515D35196F59B4F7985856F407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 15:00:58 +0000
Manifest this update: Thu 11 Jun 2026 15:00:58 +0000
Manifest next update: Fri 12 Jun 2026 15:00:58 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: dgisO6jxfFoaUJvPHH7VSrpc1igSKAJA6KsbFgoXJe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:61:51:5d:35:19:6f:59:b4:f7:98:58:56:f4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Jun 11 15:00:58 2026 GMT
Not After : Jun 12 15:00:58 2026 GMT
Subject: CN=5d6cac70cac8da2e79deeb1645f39b57af2de5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:23:a8:38:85:d7:d2:2b:73:c8:9f:28:e0:
0f:b4:20:4f:9c:8e:b3:27:81:e5:b3:70:5a:ac:ee:
2b:4d:36:48:d6:a2:e7:f3:a5:2c:29:d3:1d:61:7b:
5c:e7:e7:42:7b:39:f2:83:f1:b0:ec:a3:50:a4:91:
d9:e4:9c:77:08:77:34:4b:97:72:2b:79:d9:8d:2c:
df:c5:f9:e2:4f:f2:95:f1:cf:42:54:a3:b6:0a:c5:
c5:8a:07:a2:e6:44:54:1e:a3:34:be:73:69:f7:11:
c5:ac:2c:f3:67:f4:68:2c:0a:70:37:39:65:30:38:
79:38:09:40:cb:0c:ce:52:e7:97:c4:80:cd:eb:92:
0c:c2:4d:61:98:a9:0b:ca:80:ac:6d:55:93:b7:24:
fc:ca:c6:f7:25:d9:a5:6b:a3:a3:5c:b7:66:99:34:
72:97:dd:d0:30:86:bc:53:1e:31:0d:3d:0c:66:7d:
ef:13:ae:4b:ed:65:94:57:c0:67:c9:b0:e9:67:01:
6a:9c:97:0d:c3:07:0d:61:ee:61:c6:8e:30:d4:09:
3f:3f:5b:42:ec:ca:73:4d:33:ca:44:01:46:ff:5a:
bd:10:9e:a5:d7:4c:db:f2:03:bb:3c:ea:4d:3a:36:
e7:1c:72:f9:9c:b9:99:46:b5:ac:cf:82:17:fe:e3:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6C:AC:70:CA:C8:DA:2E:79:DE:EB:16:45:F3:9B:57:AF:2D:E5:D3
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:89:66:90:78:41:4d:7f:75:22:79:2c:a1:40:26:fd:bb:
68:aa:c6:84:05:e9:8a:8c:13:24:78:61:92:70:0d:b4:36:db:
f4:0b:b1:e4:40:30:92:26:07:38:a1:34:7e:dc:02:da:23:0e:
9c:24:64:7e:69:c4:55:ca:6b:4f:db:6f:8f:10:19:d5:f4:a6:
71:6c:b2:e1:c0:63:78:a0:45:a0:ec:4d:11:c6:59:29:47:1b:
f9:f3:63:5b:24:e3:9e:69:e7:33:ea:d7:4c:c4:5c:ce:c3:67:
d3:83:dd:e6:ab:96:76:ae:f4:1f:04:a3:a3:12:81:5d:ca:36:
a8:b3:97:9b:02:b8:2b:2b:f3:93:aa:fd:88:8a:4e:b6:11:5b:
2c:f0:44:7e:8d:82:38:ef:1c:71:51:eb:12:25:1f:ed:9a:b3:
4a:e5:30:03:67:9f:ff:2f:80:42:df:00:60:bd:0e:6d:31:17:
5e:d0:54:44:51:5c:30:37:d5:f6:e5:44:a5:44:f1:27:0d:b3:
7b:20:42:11:08:fc:1c:58:9f:c2:7f:cb:6c:a1:dd:0f:7b:ad:
5b:f0:d1:d7:cc:2d:ba:19:72:65:25:65:e5:b9:3d:ce:70:2d:
b3:1d:b6:3d:5e:5f:c8:9d:9b:2c:c8:70:bf:d2:87:4c:15:ce:
bd:56:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:54 2026 by rpki-client