Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: hZMPvESv8f1cxGIltuFnnhVqiwYqVX26GM9zCGUIIwI=
Subject key identifier: 0F:1B:4D:67:C1:2F:A8:A9:95:EE:A8:42:5A:05:DC:D8:51:25:B4:6F
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019FA0E0244418BD70927DEDB2489A518C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 00:01:11 +0000
Manifest this update: Mon 27 Jul 2026 00:01:11 +0000
Manifest next update: Tue 28 Jul 2026 00:01:11 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: EEt8BxIrYyf716mMvyBoCUlVXTLS+fuIBolt3ykrZF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:24:44:18:bd:70:92:7d:ed:b2:48:9a:51:8c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Jul 27 00:01:11 2026 GMT
Not After : Jul 28 00:01:11 2026 GMT
Subject: CN=0f1b4d67c12fa8a995eea8425a05dcd85125b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:58:36:75:49:c8:cc:2c:a0:52:95:b5:9e:
62:61:84:00:b7:9a:00:ff:26:95:7a:95:99:15:57:
cc:57:56:9c:47:86:06:fc:2c:8f:bd:ca:16:7d:d9:
f9:d4:1d:4e:b0:62:40:5a:69:89:ed:dd:c1:cc:d6:
eb:7a:fd:d8:2a:03:7a:87:9c:56:8c:02:13:cf:5c:
49:c3:a6:b6:7c:80:35:4a:eb:e5:96:bb:dd:0a:52:
08:d1:e0:fd:41:f2:61:36:52:bb:6f:15:2c:bb:99:
46:5e:8f:45:e2:ac:92:8a:36:d0:b2:42:a7:1b:d4:
f8:66:36:d9:24:18:d8:1e:ad:18:da:1f:fa:ab:48:
15:43:c4:83:31:e5:50:ec:01:46:57:f9:65:32:90:
9a:53:63:be:12:68:5b:9f:74:86:cf:e5:aa:33:d3:
cd:77:46:bb:11:31:6b:59:45:06:61:77:5d:26:d9:
8a:d1:39:f9:4a:80:e3:ae:79:45:ae:3a:42:b8:a1:
ac:10:53:74:47:05:e8:41:00:8d:03:9f:bc:63:2e:
e0:a7:97:36:c2:42:6e:23:d3:94:7c:ae:72:09:4a:
b0:7e:06:ce:46:ba:94:79:53:5f:3b:21:f8:1b:05:
99:fb:44:3f:8d:c2:e9:80:ef:48:0a:a0:b9:e1:b5:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:4D:67:C1:2F:A8:A9:95:EE:A8:42:5A:05:DC:D8:51:25:B4:6F
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:ae:fd:e3:99:49:ec:a1:37:d5:63:60:cb:a7:91:76:d0:
d3:af:3a:7e:ca:50:8e:52:df:37:3a:c4:76:f1:3a:95:79:95:
66:53:9c:94:b7:92:aa:3c:ad:f9:f7:0d:ac:8a:49:08:43:6a:
c9:c8:68:0b:22:1c:1f:b2:2c:3f:5a:66:86:08:c1:c9:fe:64:
d5:eb:65:2d:b0:f1:0f:80:75:8f:cf:a1:1b:02:a3:95:c3:fd:
f2:65:20:df:83:9b:5d:ed:8a:c5:5c:e2:c9:63:f8:52:b6:08:
ff:24:de:8c:cd:44:d7:97:9c:cd:74:84:f1:29:f6:05:60:e6:
8f:57:82:cc:80:8a:f0:e2:07:25:a4:50:9e:e2:9b:ca:af:7e:
b5:2d:d1:49:62:7e:b1:87:4c:97:c6:eb:cf:25:22:a6:7d:2a:
56:39:34:25:8d:77:62:aa:fd:4f:90:9f:bd:7c:0d:29:f0:b2:
d2:d0:a3:96:08:d3:94:31:26:be:5b:cf:f6:6b:03:76:d2:28:
30:26:0f:75:18:48:5f:89:eb:d1:b8:a4:0e:ce:cb:f6:b9:84:
50:74:c5:8f:41:8a:e9:c4:46:96:27:d9:79:7b:f2:0f:9c:f2:
4f:27:3d:49:1b:83:53:bf:46:13:5a:0a:84:bf:0b:0d:6b:90:
2c:d8:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:55:38 2026 by rpki-client