Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: xligkjEOG0DgzclT8CUl9z91O1ygAh0WOSJDskaI+34=
Subject key identifier: D1:16:AE:48:8C:F6:EC:E7:8B:35:71:1A:F2:CC:BE:BA:08:F2:29:D2
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 019D389C09B2DA1AAD37AF4667AC19E05604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: iQHm2TXXxd5hO8XosIIVCFaubvcxJXXBzZ+/UaoDRE4=)
2: aTwucs9Pwvr6YSYXdadFRJo6hLs.roa (hash: ilcm0/S70CqecxpFPp/FDen+jHt9VTiUtWGnp7lMb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:09:b2:da:1a:ad:37:af:46:67:ac:19:e0:56:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=d116ae488cf6ece78b35711af2ccbeba08f229d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:40:6e:60:d9:a2:22:d9:64:75:60:22:50:
38:1b:2b:07:fb:78:db:78:28:8e:3e:97:56:c5:a0:
7e:f7:04:b4:e2:8a:47:b3:10:d9:7a:5b:c9:11:31:
e1:54:d3:56:8d:e7:f6:e9:3a:d6:fe:fb:55:e7:3f:
9b:65:73:19:94:4c:00:06:e5:fd:82:a2:87:d0:a2:
ff:60:c5:fd:5b:18:c7:83:6f:4d:0b:bd:b0:9b:82:
fb:63:04:ad:aa:bc:53:4e:33:ea:12:10:21:c6:77:
0e:e5:62:65:5e:87:7d:2f:79:b6:40:14:17:3c:03:
22:1d:c4:b9:3a:77:d0:70:b3:a2:64:c4:a3:e4:b2:
57:46:be:93:34:58:00:c5:43:aa:3e:3c:80:b1:b5:
6e:0d:b9:0f:d8:31:5b:3c:37:a9:20:13:5f:3b:cd:
57:1c:d5:37:36:2c:ce:3f:1f:a6:a2:66:a2:3c:74:
2e:b1:76:17:bc:8c:73:9b:7e:84:9e:81:a4:c3:82:
cf:23:cd:b0:6b:87:6e:57:9a:91:9e:33:5a:27:07:
8c:2b:f3:f6:c6:03:5f:3a:ca:58:62:dc:c3:4e:f0:
12:1a:26:12:d7:63:4a:96:f1:74:b3:39:49:d0:a3:
b4:47:b6:8b:b3:76:e1:fc:88:60:93:98:ff:28:4f:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:AE:48:8C:F6:EC:E7:8B:35:71:1A:F2:CC:BE:BA:08:F2:29:D2
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:8f:22:b3:07:75:92:b6:37:67:b3:59:69:6d:f1:87:ba:
40:80:31:47:98:81:a9:1f:fc:3d:41:d8:30:da:67:0f:17:47:
0e:c1:30:f2:eb:95:80:ba:ce:97:94:29:52:b5:5e:7e:9d:6d:
dd:69:ea:90:8f:d0:c0:57:8b:72:86:ea:f8:1d:25:fe:dd:9c:
57:83:a3:2c:83:19:24:8c:dc:78:06:d0:55:e7:e9:75:22:29:
8b:06:69:83:6a:aa:09:aa:9d:bb:ea:85:51:a3:ec:c6:91:ab:
ad:6c:cd:66:7f:a9:02:05:42:43:0e:a2:59:26:e3:39:6e:6a:
8f:a8:89:1a:8f:d4:1f:d7:30:55:69:02:38:6b:db:05:18:ec:
c2:b2:ab:ae:80:21:4e:cf:19:80:74:c9:06:81:34:f1:ea:61:
61:90:d4:b1:70:6c:c3:f8:0f:c6:5b:ff:55:cc:0a:45:78:7a:
f3:eb:ef:bc:a3:2e:1e:6c:50:88:95:93:8a:b7:6f:17:32:68:
b9:41:ea:62:fd:e6:f5:cf:00:e6:ea:de:25:5d:3a:aa:f6:c6:
9c:f5:cb:ba:b9:72:d7:1c:92:5a:93:76:bd:c8:17:01:98:5a:
6c:3b:c1:7a:30:2f:42:ed:7a:78:04:55:42:c7:ee:71:d9:b1:
3b:24:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:46 2026 by rpki-client