Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: QH7cx8Bz9T4qJS9cxCSOEXUmPckn9KW61wBZPRrYjVA=
Subject key identifier: E7:AB:FE:B7:A5:F8:B4:B8:67:95:55:C8:FE:26:ED:D7:6C:66:7C:DE
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01A1630E80138717889C6141DEF26CA44002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 06DA
Signing time: Thu 22 Oct 2026 10:00:56 +0000
Manifest this update: Thu 22 Oct 2026 10:00:56 +0000
Manifest next update: Fri 23 Oct 2026 10:00:56 +0000
Files and hashes: 1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
2: 9zWDYSeZIkjEiVRVUNgSRKOdTw0.roa (hash: NTLz7g+ZbCzTxq/x0340sjZGnuTxuJwbS2LJZglRqHg=)
3: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: +J+b5QVuVkI56SRpLJ2j0SzPFpICPLtpnh9UJC+8edQ=)
4: NzGOwWDQOPETxj9EvmXudQeuwLI.roa (hash: Kknhz18DNtR1usJp51T3b1nw1Fkr9AIsd/KE8XOKe1s=)
5: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
6: bBE_lk3N6KS_zZoKS2wxF-vk23U.roa (hash: ehTdcQEnQLxX102cc7+OSyJZuGfqAICJZm2W6zJrmvg=)
7: qzOhEMjt0ER_QeMmWb_aSnbGqDs.roa (hash: ct6/7wueiN1cFlvuwHbO2g9uKG/7TkLJNxOWY9ajqoc=)
8: ycv1jzLgd7j5nnAigjja5UrdTAk.asa (hash: 4B7WxTo6YNGN8EM+eQ/ebz9io459CdwWh5W2A+u4G1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:0e:80:13:87:17:88:9c:61:41:de:f2:6c:a4:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Oct 22 10:00:56 2026 GMT
Not After : Oct 23 10:00:56 2026 GMT
Subject: CN=e7abfeb7a5f8b4b8679555c8fe26edd76c667cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:7c:21:e4:98:86:b4:3b:44:4a:13:a6:59:
a0:7e:c5:3d:81:2b:95:2c:52:25:7e:dc:ec:ac:54:
d6:2c:2a:ba:f6:b3:22:4f:71:56:7e:81:d3:e2:17:
0d:15:94:87:36:6a:3c:44:76:9b:b7:ca:b9:34:7f:
0a:01:d7:8e:e6:36:76:19:93:a5:8e:0f:3c:d4:c7:
0d:63:3d:90:ca:88:61:6a:a6:ff:d0:98:ba:cc:6e:
3f:c5:4f:5a:ec:01:6e:45:ac:bd:c5:67:90:2f:1f:
cb:8a:27:46:12:f9:36:14:32:ba:1c:84:b8:76:33:
bd:32:c2:16:57:c9:3b:3c:72:27:ee:ce:60:ad:d3:
5c:9e:28:8c:63:68:70:24:2e:49:83:74:90:38:9f:
9b:c3:1c:06:a2:8e:79:da:5c:b7:6e:4f:1b:fa:24:
0d:77:c6:ad:48:9f:cb:1f:e1:5e:b3:98:cd:96:dc:
67:4a:50:b9:7c:a5:f1:5c:39:52:50:65:7d:1a:41:
b4:8e:27:e2:1b:f4:91:ea:9c:20:9f:ae:db:db:cc:
b6:09:69:20:35:0b:35:2c:77:a8:19:bc:36:8a:8d:
da:19:c4:4c:b6:13:09:57:78:af:93:d2:5d:74:ab:
92:d7:a0:2c:eb:01:f4:d7:14:43:d9:16:77:a3:79:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:FE:B7:A5:F8:B4:B8:67:95:55:C8:FE:26:ED:D7:6C:66:7C:DE
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9e:ff:ce:d5:9d:65:eb:2c:9e:67:2a:8c:ee:27:85:06:92:
0f:b6:7f:5e:a9:54:5d:07:28:63:96:b8:cc:eb:c3:49:c3:9d:
4c:23:13:af:45:cc:9c:cc:e3:88:60:3c:46:9c:08:e0:42:cd:
41:a4:7c:8c:05:d9:0e:4a:07:ae:1c:c1:71:41:a4:fd:df:92:
1d:da:87:f2:ac:69:39:25:86:1a:0d:b8:8f:a1:cf:b7:8b:ea:
20:b9:2f:e4:05:90:fd:4e:de:e3:bf:b1:48:5b:40:ad:64:8e:
7e:db:1d:ae:16:f0:17:6f:93:9c:ce:40:c0:40:f7:58:90:7d:
a4:cb:86:dc:41:73:e6:1c:af:db:97:a1:fa:3c:82:d0:93:ba:
f9:4f:de:19:4b:4d:14:02:96:5f:b6:3d:5c:46:61:c3:60:0d:
b4:c7:3e:69:ac:b2:f8:04:be:30:94:95:a0:fb:62:0d:30:9b:
62:d2:c1:26:2f:7b:ec:52:0d:38:50:70:86:1a:20:70:40:3f:
d3:09:5a:d7:5f:8b:d1:52:f5:e7:c1:30:fb:19:9f:ec:a6:89:
41:4d:f0:e2:4a:48:4e:ee:76:90:8f:c4:75:15:36:f9:0e:c2:
42:ad:dd:b7:f2:43:51:f0:10:47:d0:1e:7b:01:eb:28:00:61:
ea:d3:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:41:46 2026 by rpki-client